T_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket(0x0, 0x3, 0xff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="564a34f052c01a3dff5e50a3b27bca09270a05efbb7de52c54a72c527ae9c90d3f472f8b117b8bba34985b3373ddb911543869", @ANYRESHEX=r3, @ANYBLOB=',aname=/dev/dmmidi#\x00,fscache,cache=mmap,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',euid', @ANYRESDEC=r4, @ANYBLOB=',smackfsroot=/dev/dmmidi#\x00,obj_role=/dev/dmmi']) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000003c0)={0x2, 0x0, 0x81, 0xfff, 0x80000000}) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000340)) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) syz_open_dev$sndseq(0x0, 0x0, 0x2000) 06:29:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7b, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x5}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7c, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 514.449216][T17661] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 514.519198][T17661] CPU: 1 PID: 17661 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 514.527704][T17661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.537759][T17661] Call Trace: [ 514.541066][T17661] dump_stack+0x11d/0x181 [ 514.545407][T17661] dump_header+0xaa/0x449 [ 514.549751][T17661] oom_kill_process.cold+0x10/0x15 [ 514.554863][T17661] out_of_memory+0x231/0xa00 [ 514.559499][T17661] mem_cgroup_out_of_memory+0x128/0x150 [ 514.565058][T17661] try_charge+0xb5c/0xbe0 [ 514.569449][T17661] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 514.576059][T17661] cache_grow_begin+0x3ed/0x670 [ 514.581096][T17661] fallback_alloc+0x161/0x1f0 [ 514.585803][T17661] ____cache_alloc_node+0x1b1/0x1c0 [ 514.591024][T17661] ? debug_smp_processor_id+0x4c/0x172 [ 514.596650][T17661] __kmalloc+0x1ac/0x690 [ 514.600907][T17661] ? kvm_dev_ioctl+0x49c/0xca0 [ 514.605691][T17661] kvm_dev_ioctl+0x49c/0xca0 [ 514.610299][T17661] ? kvm_put_kvm+0x650/0x650 [ 514.614886][T17661] do_vfs_ioctl+0x991/0xc60 [ 514.619422][T17661] ? tomoyo_file_ioctl+0x34/0x40 [ 514.624641][T17661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.630901][T17661] ksys_ioctl+0xbd/0xe0 [ 514.635058][T17661] __x64_sys_ioctl+0x4c/0x60 [ 514.639682][T17661] do_syscall_64+0xcc/0x370 [ 514.644182][T17661] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 514.650103][T17661] RIP: 0033:0x45a679 [ 514.654069][T17661] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 514.674032][T17661] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.682441][T17661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 514.690464][T17661] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 514.698456][T17661] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 514.706443][T17661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 06:29:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7c, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 514.714550][T17661] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 514.737514][T17661] memory: usage 307200kB, limit 307200kB, failcnt 184 [ 514.744453][ T26] audit: type=1800 audit(1575354582.514:114): pid=17681 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16886 res=0 [ 514.775391][T17661] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 514.793947][T17661] Memory cgroup stats for /syz1: [ 514.794208][T17661] anon 275324928 [ 514.794208][T17661] file 49152 [ 514.794208][T17661] kernel_stack 2580480 [ 514.794208][T17661] slab 13549568 [ 514.794208][T17661] sock 0 [ 514.794208][T17661] shmem 0 [ 514.794208][T17661] file_mapped 0 [ 514.794208][T17661] file_dirty 0 [ 514.794208][T17661] file_writeback 0 [ 514.794208][T17661] anon_thp 257949696 [ 514.794208][T17661] inactive_anon 262144 [ 514.794208][T17661] active_anon 275288064 [ 514.794208][T17661] inactive_file 4096 [ 514.794208][T17661] active_file 69632 [ 514.794208][T17661] unevictable 0 [ 514.794208][T17661] slab_reclaimable 2297856 [ 514.794208][T17661] slab_unreclaimable 11251712 [ 514.794208][T17661] pgfault 32835 [ 514.794208][T17661] pgmajfault 0 [ 514.794208][T17661] workingset_refault 0 [ 514.794208][T17661] workingset_activate 0 06:29:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x110) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket(0x0, 0x3, 0xff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) mount$9p_fd(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="564a34f052c01a3dff5e50a3b27bca09270a05efbb7de52c54a72c527ae9c90d3f472f8b117b8bba34985b3373ddb911543869", @ANYRESHEX=r3, @ANYBLOB=',aname=/dev/dmmidi#\x00,fscache,cache=mmap,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',euid', @ANYRESDEC=r4, @ANYBLOB=',smackfsroot=/dev/dmmidi#\x00,obj_role=/dev/dmmi']) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000003c0)={0x2, 0x0, 0x81, 0xfff, 0x80000000}) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000340)) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) syz_open_dev$sndseq(0x0, 0x0, 0x2000) [ 514.794208][T17661] workingset_nodereclaim 0 [ 514.794208][T17661] pgrefill 413 [ 514.794208][T17661] pgscan 1593 [ 514.794208][T17661] pgsteal 1357 [ 514.898152][T17661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12322,uid=0 06:29:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 514.928389][T17661] Memory cgroup out of memory: Killed process 12322 (syz-executor.1) total-vm:72716kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 06:29:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7d, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 515.034399][T17664] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 515.081615][T17664] CPU: 0 PID: 17664 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 515.089997][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.100054][T17664] Call Trace: [ 515.103500][T17664] dump_stack+0x11d/0x181 [ 515.107843][T17664] dump_header+0xaa/0x449 [ 515.112275][T17664] oom_kill_process.cold+0x10/0x15 [ 515.117409][T17664] out_of_memory+0x231/0xa00 [ 515.122062][T17664] mem_cgroup_out_of_memory+0x128/0x150 [ 515.127628][T17664] try_charge+0x7f5/0xbe0 [ 515.131970][T17664] ? __rcu_read_unlock+0x66/0x3c0 [ 515.137020][T17664] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 515.142631][T17664] __memcg_kmem_charge+0xde/0x240 [ 515.147673][T17664] __alloc_pages_nodemask+0x26c/0x310 [ 515.153093][T17664] alloc_pages_current+0xd1/0x170 [ 515.158307][T17664] get_zeroed_page+0x14/0x50 [ 515.162947][T17664] __pud_alloc+0x48/0x250 [ 515.167317][T17664] copy_page_range+0x149f/0x1a80 [ 515.172279][T17664] ? __read_once_size.constprop.0+0x12/0x20 06:29:43 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 515.178367][T17664] ? anon_vma_interval_tree_insert+0x1d6/0x260 [ 515.184670][T17664] ? __write_once_size.constprop.0+0x20/0x20 [ 515.190708][T17664] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 515.196441][T17664] ? vma_gap_callbacks_rotate+0x126/0x190 [ 515.202235][T17664] ? vm_get_page_prot+0x90/0x90 [ 515.207096][T17664] dup_mm+0x74a/0xba0 [ 515.211127][T17664] copy_process+0x36f3/0x3b50 [ 515.215895][T17664] _do_fork+0xfe/0x6e0 [ 515.220096][T17664] ? __read_once_size+0x5a/0xe0 [ 515.224958][T17664] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 515.230901][T17664] ? _copy_to_user+0x84/0xb0 [ 515.235510][T17664] __x64_sys_clone+0x12b/0x160 [ 515.240295][T17664] do_syscall_64+0xcc/0x370 [ 515.244873][T17664] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 515.250956][T17664] RIP: 0033:0x45a679 [ 515.254869][T17664] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:29:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7d, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 515.274737][T17664] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 515.283149][T17664] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 515.291321][T17664] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.299290][T17664] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 515.307273][T17664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 515.315248][T17664] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 515.497483][T17664] memory: usage 302884kB, limit 307200kB, failcnt 184 [ 515.515304][T17664] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 515.550701][T17664] Memory cgroup stats for /syz1: [ 515.551089][T17664] anon 271089664 [ 515.551089][T17664] file 49152 [ 515.551089][T17664] kernel_stack 2580480 [ 515.551089][T17664] slab 13549568 [ 515.551089][T17664] sock 0 [ 515.551089][T17664] shmem 0 [ 515.551089][T17664] file_mapped 0 [ 515.551089][T17664] file_dirty 0 [ 515.551089][T17664] file_writeback 0 [ 515.551089][T17664] anon_thp 253755392 [ 515.551089][T17664] inactive_anon 262144 [ 515.551089][T17664] active_anon 271089664 [ 515.551089][T17664] inactive_file 4096 [ 515.551089][T17664] active_file 69632 [ 515.551089][T17664] unevictable 0 [ 515.551089][T17664] slab_reclaimable 2297856 [ 515.551089][T17664] slab_unreclaimable 11251712 [ 515.551089][T17664] pgfault 32835 [ 515.551089][T17664] pgmajfault 0 [ 515.551089][T17664] workingset_refault 0 [ 515.551089][T17664] workingset_activate 0 [ 515.551089][T17664] workingset_nodereclaim 0 [ 515.551089][T17664] pgrefill 413 [ 515.551089][T17664] pgscan 1593 [ 515.551089][T17664] pgsteal 1357 [ 515.689444][T17664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11864,uid=0 [ 515.709733][T17664] Memory cgroup out of memory: Killed process 11864 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:35904kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:29:43 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\xff') setns(r2, 0x0) 06:29:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7e, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7e, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:43 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) mount$9p_unix(0x0, 0x0, 0x0, 0x10000, 0x0) 06:29:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x6}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="03", 0xfffffffffffffd1b, 0x0, 0x0, 0x0) 06:29:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x82, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x82, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:44 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\xeb') setns(r2, 0x0) 06:29:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x83, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x83, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x84, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x84, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x7}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:44 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\xf6') setns(r2, 0x0) 06:29:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x85, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x85, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa808) 06:29:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x86, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:45 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\xfe') setns(r2, 0x0) 06:29:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x86, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa808) 06:29:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x87, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x8}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x87, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 517.921541][T17829] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 517.947575][T17829] CPU: 0 PID: 17829 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 517.956065][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.966141][T17829] Call Trace: [ 517.969452][T17829] dump_stack+0x11d/0x181 [ 517.973800][T17829] dump_header+0xaa/0x449 [ 517.978162][T17829] oom_kill_process.cold+0x10/0x15 [ 517.983294][T17829] out_of_memory+0x231/0xa00 [ 517.987906][T17829] mem_cgroup_out_of_memory+0x128/0x150 [ 517.993494][T17829] try_charge+0xb5c/0xbe0 [ 517.997871][T17829] ? __rcu_read_unlock+0x66/0x3c0 [ 518.002907][T17829] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 518.008462][T17829] __memcg_kmem_charge+0xde/0x240 [ 518.013506][T17829] __alloc_pages_nodemask+0x26c/0x310 06:29:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x88, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 518.018899][T17829] alloc_pages_current+0xd1/0x170 [ 518.024133][T17829] pte_alloc_one+0x18/0x50 [ 518.028569][T17829] __pte_alloc+0x2d/0x220 [ 518.032906][T17829] copy_page_range+0x151a/0x1a80 [ 518.037880][T17829] ? __vma_link_rb+0x3f4/0x440 [ 518.042663][T17829] dup_mm+0x74a/0xba0 [ 518.046677][T17829] copy_process+0x36f3/0x3b50 [ 518.051370][T17829] ? record_times+0x16/0x90 [ 518.055927][T17829] _do_fork+0xfe/0x6e0 [ 518.060021][T17829] ? preempt_count_add+0x48/0xb0 [ 518.064970][T17829] ? blkcg_maybe_throttle_current+0x472/0x610 06:29:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x89, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 518.071065][T17829] ? percpu_ref_put_many+0x78/0xc0 [ 518.076281][T17829] __x64_sys_clone+0x12b/0x160 [ 518.081084][T17829] do_syscall_64+0xcc/0x370 [ 518.085742][T17829] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 518.091627][T17829] RIP: 0033:0x45a679 [ 518.095526][T17829] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 518.115156][T17829] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 518.123662][T17829] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 518.131659][T17829] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.139648][T17829] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 518.147868][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 518.155956][T17829] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:29:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x88, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids\xff\x91ventq\x00\x8c+d..\xb1\x88[\x87\xb8\x8e\x80\xf9\x1cV\xcb\x7f\x96\xfd\xbd\x06\xf1\xc5\x8ap\x00\x9ays7\n\xbc\xb7\\\x16\xedk\xdf\rS>UC\xb0Z\xa7\xd5\xc3\xab\xef\xb6n\x9e\x86\x9c\x1f\xa2\xd6r\x12\xa0\xb4\xb5!\xedA\x81\xa7\xccV\x03\xd1<\x92m\b\xcb\xe8\xa4D p\xf7\x99E\xb8\xbc\x06\x7f1N\xff\x96\x00\xe6rS\xf1\xae\xa0\x03\xa4~\xaf\xae\xbc\\\"?7\xca3Qd\xdd\x1a\xe5\xff\x80\xfe\xd9o\x8f\xd1\xd2\xb8%+\xcb\x12KT\x8d\x9f\x82\xbas\x15\x83\x9e\xf8\xac\x8d\xf4*g\x0efu\xba\xd2;\xdb\xbe\xd3{k\xf8Z\x03>\x8cB\xda\xd4\xe8\x91\x02\xfc\x0ep\x05W\x15\x980E\x16\xfe\xa5\xac8R\x96\xc1\x11\xbf\x81\xed\x8eM\xa8', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="dc15a76f5d9223e346714e7c26dc78572fd068ab536f20d3c7a2cc84f39632264f75063c6d0d8e3bd79f17cb7c14"]], 0xff7d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000100)={0x0}) 06:29:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x20000e4a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 518.447490][T17829] memory: usage 307200kB, limit 307200kB, failcnt 251 [ 518.487806][T17829] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 518.533009][T17829] Memory cgroup stats for /syz1: [ 518.533232][T17829] anon 273743872 [ 518.533232][T17829] file 49152 [ 518.533232][T17829] kernel_stack 2727936 [ 518.533232][T17829] slab 14131200 [ 518.533232][T17829] sock 0 [ 518.533232][T17829] shmem 0 [ 518.533232][T17829] file_mapped 0 [ 518.533232][T17829] file_dirty 0 [ 518.533232][T17829] file_writeback 0 [ 518.533232][T17829] anon_thp 255852544 [ 518.533232][T17829] inactive_anon 262144 [ 518.533232][T17829] active_anon 273743872 [ 518.533232][T17829] inactive_file 4096 [ 518.533232][T17829] active_file 69632 [ 518.533232][T17829] unevictable 0 [ 518.533232][T17829] slab_reclaimable 2433024 [ 518.533232][T17829] slab_unreclaimable 11698176 [ 518.533232][T17829] pgfault 33297 [ 518.533232][T17829] pgmajfault 0 [ 518.533232][T17829] workingset_refault 0 [ 518.533232][T17829] workingset_activate 0 [ 518.533232][T17829] workingset_nodereclaim 0 [ 518.533232][T17829] pgrefill 413 [ 518.533232][T17829] pgscan 1626 [ 518.533232][T17829] pgsteal 1357 [ 518.659012][T17829] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10505,uid=0 [ 518.680589][T17829] Memory cgroup out of memory: Killed process 10505 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:29:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7fffef92, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x89, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:46 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x300}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x20000e4a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) 06:29:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x7fffef92, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:29:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x4}], 0x8d9, 0x0) 06:29:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000400)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"c8024a3f7c2c84a2ac959fe78307f4ecbdec5e0657bfa810018f7665b5a974c17d24dda716692e44ee2d87a9a48581473dbb5ba48ad23781249c306f5e79cc2cadc94ebbdd5b5507180e638e2df60616f29bdcd8fd055c8900b885ff4c85ab269cfadf7b4f0a57ce82d9bf2b61e806554b4ecb17534510e599d65a516e6c541502c80bea595c0b7cf6c56b6931926e4b43a4b898b7b394848667f2906a0aa43e9edc65171b5828bd396271395907b52531a531eadc73c16d26553435a5d91a84985d2487249ea82d9efc74abe46042fecc8d47fa45dec2614b32876c710dfef7baa0c6edbf522af51ce28120c1075a7a8de5a99aa39ffab40deb5308c03080fee374c8110e68f1a4ad4e1863dee733f781411109fd56861cb957c9ec3584f742ec6ea7b8736f719ddb4c0bcb14e0d9011b5ca0b22ca7f37e26d9c783795b537818330aa620687763dfd63e048b9a999c6ecab26ae69a7a526f58d7ae1f53f0b99c8c19fbb231e22a8564bc019e31fc0bdf8c9770172655b7206b076068a934c04d244e5e104fd2c77435123cf2d3e0358ddb6715c7380be5ac675ab1a0c8e711cf609ed74d4bc963e8ea9001c5102e5aa360bcf5b40785fdeb49867606ebfb628f542faf6166a15f983a83c8b01a602eccb91c215d0bab7a1bc17f6e0d63cb932567e03b2f1b96a8981955f9f4041c8e20f22ce4b68522881292f04e03182e83f921e914608f84504afc5fd8c0c430d90372aba47ae466e7f02d639728e680fd279012e572e13c91748c37c81d163d58ebc357c145c2eb089a463634cd50ef884b79acf4edfef17ea4a702063827498ca74cb76f3877b37f615e33ccc65033629eb80a2e976a3c27e80e405ab5133faea5fa9371bb5a41e3b9fbc972aa13f27a2fbd33add9456b44e5a715ace5e9f0727ca9c9d83048d1f663a5a471b5bfff8efedb9745701d4023f30ff688a8a6dedaacab389cdda9d4ca1c6eeadc877137ca5482dc0bff0cd507d6ab75e85f0c4047b05b6c83f5724b3b35f38cf234052f63f7d7a3757d6988a140862bb0017bae0e37ddff98eec4a01d0f8aaabf049842bb6a860a473cde435bea84cc4a56b83d5f282a0bc68821fdaba67f3205b2db49c93627fad042221205e465d847f86be54d8b6e8b57c3354387c3fbf8a8d51c0ef8f8b2b1171470b708eb1c67f73c28ca7c6df4145094e8b2ff6af8b0c336b9262d00705dc5d72a1c61ce7ac211b4f947b5a3b0c108841d87f67eb1fb75dead562c1d4db307e02cf81d2fc5c7de5284140ed6cf705f55cdc3911dac2b8e07396208a58750ea40a8abb0cca1a9300c4f5b6d58b0457edfeb70af7ccbbe15db99607b66c6a7ebcdbfd35a2fd96f880e847c1757ecf3f33255c4f573de0bde9194cd8e6bffb97dd2c739c070482f7ec5153abc3f5eed6bae884f34089a38cb79e88c7d"}) 06:29:47 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x2}], 0x8d9, 0x0) 06:29:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x37}], 0x8d9, 0x0) 06:29:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3700}], 0x8d9, 0x0) 06:29:47 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000400)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) 06:29:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x500}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x4}], 0x8d9, 0x0) 06:29:47 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3f00}], 0x8d9, 0x0) 06:29:48 executing program 5: socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:29:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x37}], 0x8d9, 0x0) 06:29:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xff03}], 0x8d9, 0x0) [ 520.497676][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 520.503483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 520.509294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 520.515041][ C1] protocol 88fb is buggy, dev hsr_slave_1 06:29:48 executing program 5: socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:29:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x40000}], 0x8d9, 0x0) 06:29:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3700}], 0x8d9, 0x0) 06:29:48 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) [ 521.081909][T18005] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 521.108512][T18005] CPU: 0 PID: 18005 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 521.117293][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.127352][T18005] Call Trace: [ 521.130672][T18005] dump_stack+0x11d/0x181 [ 521.135078][T18005] dump_header+0xaa/0x449 [ 521.139415][T18005] oom_kill_process.cold+0x10/0x15 [ 521.144528][T18005] out_of_memory+0x231/0xa00 [ 521.149286][T18005] mem_cgroup_out_of_memory+0x128/0x150 [ 521.155020][T18005] try_charge+0xb5c/0xbe0 [ 521.159404][T18005] ? __rcu_read_unlock+0x10/0x3c0 [ 521.164433][T18005] mem_cgroup_try_charge+0xd2/0x260 [ 521.169662][T18005] mem_cgroup_try_charge_delay+0x3a/0x80 [ 521.175303][T18005] wp_page_copy+0x322/0x1120 [ 521.179894][T18005] ? __read_once_size+0x41/0xe0 [ 521.184742][T18005] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 521.190629][T18005] do_wp_page+0x192/0x11f0 [ 521.195039][T18005] ? record_times+0x16/0x90 [ 521.199626][T18005] __handle_mm_fault+0x1ab1/0x2c70 [ 521.204742][T18005] handle_mm_fault+0x21b/0x530 [ 521.209558][T18005] __do_page_fault+0x456/0x8d0 [ 521.214372][T18005] do_page_fault+0x38/0x194 [ 521.218881][T18005] page_fault+0x34/0x40 [ 521.223032][T18005] RIP: 0033:0x4418e7 [ 521.226922][T18005] Code: 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e <89> 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e 48 89 0f 48 [ 521.246516][T18005] RSP: 002b:00007ffde2f6fa48 EFLAGS: 00010202 [ 521.252667][T18005] RAX: 0000000020000100 RBX: 000000000075c9a0 RCX: 00000000702f736e [ 521.260645][T18005] RDX: 0000000000000014 RSI: 0000000000760290 RDI: 0000000020000100 [ 521.268608][T18005] RBP: 0000000000760270 R08: 0000000053526ae6 R09: 0000000053526aea [ 521.276832][T18005] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 000000000075bf20 [ 521.284861][T18005] R13: 000000000007f32e R14: 0000000000760278 R15: 000000000075bf2c [ 521.296006][T18005] memory: usage 307200kB, limit 307200kB, failcnt 283 [ 521.303236][T18005] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 521.310897][T18005] Memory cgroup stats for /syz1: [ 521.311082][T18005] anon 272564224 [ 521.311082][T18005] file 49152 [ 521.311082][T18005] kernel_stack 2838528 [ 521.311082][T18005] slab 14458880 [ 521.311082][T18005] sock 0 [ 521.311082][T18005] shmem 0 [ 521.311082][T18005] file_mapped 0 [ 521.311082][T18005] file_dirty 135168 [ 521.311082][T18005] file_writeback 0 [ 521.311082][T18005] anon_thp 253755392 [ 521.311082][T18005] inactive_anon 262144 [ 521.311082][T18005] active_anon 272564224 [ 521.311082][T18005] inactive_file 4096 [ 521.311082][T18005] active_file 69632 [ 521.311082][T18005] unevictable 0 [ 521.311082][T18005] slab_reclaimable 2433024 [ 521.311082][T18005] slab_unreclaimable 12025856 [ 521.311082][T18005] pgfault 33759 06:29:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ff7f}], 0x8d9, 0x0) 06:29:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3f00}], 0x8d9, 0x0) 06:29:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa808) 06:29:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x600}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 521.311082][T18005] pgmajfault 0 [ 521.311082][T18005] workingset_refault 0 [ 521.311082][T18005] workingset_activate 0 [ 521.311082][T18005] workingset_nodereclaim 0 [ 521.311082][T18005] pgrefill 446 [ 521.311082][T18005] pgscan 1659 [ 521.311082][T18005] pgsteal 1357 [ 521.407801][T18005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10477,uid=0 [ 521.426953][T18005] Memory cgroup out of memory: Killed process 10477 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 521.449420][ T1069] oom_reaper: reaped process 10477 (syz-executor.1), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB 06:29:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x1000000}], 0x8d9, 0x0) 06:29:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xff03}], 0x8d9, 0x0) 06:29:49 executing program 5: 06:29:49 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x40000}], 0x8d9, 0x0) 06:29:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x2000000}], 0x8d9, 0x0) 06:29:50 executing program 5: 06:29:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ff7f}], 0x8d9, 0x0) 06:29:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8efff7f}], 0x8d9, 0x0) 06:29:50 executing program 5: 06:29:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x700}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x1000000}], 0x8d9, 0x0) 06:29:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x20000e40}], 0x8d9, 0x0) 06:29:50 executing program 5: 06:29:50 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x2000000}], 0x8d9, 0x0) 06:29:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x37000000}], 0x8d9, 0x0) 06:29:51 executing program 5: 06:29:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8efff7f}], 0x8d9, 0x0) 06:29:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3f000000}], 0x8d9, 0x0) 06:29:51 executing program 5: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) gettid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) 06:29:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0xff00}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x20000e40}], 0x8d9, 0x0) 06:29:51 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x400e0020}], 0x8d9, 0x0) 06:29:51 executing program 5: 06:29:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x37000000}], 0x8d9, 0x0) 06:29:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x7fffef08}], 0x8d9, 0x0) 06:29:52 executing program 5: 06:29:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3f000000}], 0x8d9, 0x0) 06:29:52 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x7ffff000}], 0x8d9, 0x0) [ 524.918682][T18185] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 524.970709][T18185] CPU: 0 PID: 18185 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 524.979248][T18185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.989301][T18185] Call Trace: [ 524.992603][T18185] dump_stack+0x11d/0x181 [ 524.996957][T18185] dump_header+0xaa/0x449 [ 525.001300][T18185] oom_kill_process.cold+0x10/0x15 [ 525.006519][T18185] out_of_memory+0x231/0xa00 [ 525.011148][T18185] mem_cgroup_out_of_memory+0x128/0x150 [ 525.016828][T18185] try_charge+0xb5c/0xbe0 [ 525.021258][T18185] ? __rcu_read_unlock+0x10/0x3c0 [ 525.026296][T18185] mem_cgroup_try_charge+0xd2/0x260 [ 525.031952][T18185] mem_cgroup_try_charge_delay+0x3a/0x80 [ 525.037588][T18185] wp_page_copy+0x322/0x1120 [ 525.042301][T18185] ? __read_once_size+0x41/0xe0 [ 525.047346][T18185] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 525.053436][T18185] do_wp_page+0x192/0x11f0 [ 525.057961][T18185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.066522][T18185] __handle_mm_fault+0x1ab1/0x2c70 [ 525.071830][T18185] handle_mm_fault+0x21b/0x530 [ 525.076579][T18185] __do_page_fault+0x456/0x8d0 [ 525.081384][T18185] do_page_fault+0x38/0x194 [ 525.085956][T18185] page_fault+0x34/0x40 [ 525.090524][T18185] RIP: 0033:0x40cea8 [ 525.094414][T18185] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 68 2c 00 00 8b 05 62 b1 32 00 48 8b 15 d3 57 66 00 83 c0 01 <89> 05 52 b1 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 525.114351][T18185] RSP: 002b:00007ffde2f6f9e0 EFLAGS: 00010202 [ 525.120412][T18185] RAX: 0000000000000004 RBX: 0000001b32921190 RCX: 0000001b33920000 [ 525.128454][T18185] RDX: 0000001b32920000 RSI: 00000000000015e9 RDI: ffffffff4e9cd5e9 [ 525.136412][T18185] RBP: 0000001b32921194 R08: 000000004e9cd5e9 R09: 000000004e9cd5ed [ 525.144375][T18185] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 0000001b32921198 [ 525.152337][T18185] R13: 0000000000080203 R14: 000000000075bfc8 R15: 000000000075bfd4 06:29:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x1000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:52 executing program 5: 06:29:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x400e0020}], 0x8d9, 0x0) 06:29:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8dffffff}], 0x8d9, 0x0) 06:29:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 525.168552][T18185] memory: usage 307200kB, limit 307200kB, failcnt 325 [ 525.211431][T18185] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 525.231885][T18185] Memory cgroup stats for /syz1: [ 525.232113][T18185] anon 270872576 [ 525.232113][T18185] file 49152 [ 525.232113][T18185] kernel_stack 2912256 [ 525.232113][T18185] slab 15171584 [ 525.232113][T18185] sock 0 [ 525.232113][T18185] shmem 0 [ 525.232113][T18185] file_mapped 0 [ 525.232113][T18185] file_dirty 135168 [ 525.232113][T18185] file_writeback 0 [ 525.232113][T18185] anon_thp 251658240 [ 525.232113][T18185] inactive_anon 262144 [ 525.232113][T18185] active_anon 270938112 [ 525.232113][T18185] inactive_file 4096 [ 525.232113][T18185] active_file 69632 [ 525.232113][T18185] unevictable 0 [ 525.232113][T18185] slab_reclaimable 2568192 [ 525.232113][T18185] slab_unreclaimable 12603392 [ 525.232113][T18185] pgfault 34221 [ 525.232113][T18185] pgmajfault 0 [ 525.232113][T18185] workingset_refault 0 06:29:53 executing program 5: [ 525.232113][T18185] workingset_activate 0 [ 525.232113][T18185] workingset_nodereclaim 0 [ 525.232113][T18185] pgrefill 446 [ 525.232113][T18185] pgscan 1692 [ 525.232113][T18185] pgsteal 1357 06:29:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xeffdffff}], 0x8d9, 0x0) 06:29:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x7fffef08}], 0x8d9, 0x0) [ 525.437440][T18185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9675,uid=0 [ 525.517720][T18185] Memory cgroup out of memory: Killed process 9675 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35820kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:29:53 executing program 5: 06:29:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x7ffff000}], 0x8d9, 0x0) 06:29:53 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:53 executing program 5: [ 526.220895][T18241] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 526.234104][T18241] CPU: 0 PID: 18241 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 526.242501][T18241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.252580][T18241] Call Trace: [ 526.255955][T18241] dump_stack+0x11d/0x181 [ 526.260309][T18241] dump_header+0xaa/0x449 [ 526.264651][T18241] oom_kill_process.cold+0x10/0x15 [ 526.269876][T18241] out_of_memory+0x231/0xa00 [ 526.274584][T18241] mem_cgroup_out_of_memory+0x128/0x150 [ 526.280168][T18241] try_charge+0xb5c/0xbe0 [ 526.284532][T18241] ? __rcu_read_unlock+0x66/0x3c0 [ 526.289663][T18241] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 526.295204][T18241] __memcg_kmem_charge+0xde/0x240 [ 526.300334][T18241] __alloc_pages_nodemask+0x26c/0x310 [ 526.305812][T18241] alloc_pages_current+0xd1/0x170 [ 526.310855][T18241] __pmd_alloc+0x4b/0x2b0 [ 526.315209][T18241] copy_page_range+0x158b/0x1a80 [ 526.320332][T18241] ? __read_once_size.constprop.0+0x12/0x20 [ 526.326251][T18241] ? anon_vma_interval_tree_insert+0x1d6/0x260 [ 526.332468][T18241] ? __write_once_size.constprop.0+0x20/0x20 [ 526.338507][T18241] ? vm_get_page_prot+0x90/0x90 [ 526.343516][T18241] dup_mm+0x74a/0xba0 [ 526.347527][T18241] copy_process+0x36f3/0x3b50 [ 526.352250][T18241] _do_fork+0xfe/0x6e0 [ 526.356339][T18241] ? __read_once_size+0x5a/0xe0 [ 526.361195][T18241] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 526.367043][T18241] ? _copy_to_user+0x84/0xb0 [ 526.371933][T18241] __x64_sys_clone+0x12b/0x160 [ 526.376716][T18241] do_syscall_64+0xcc/0x370 [ 526.381499][T18241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 526.387396][T18241] RIP: 0033:0x45a679 [ 526.391303][T18241] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 526.411083][T18241] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 06:29:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x2000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ffffff}], 0x8d9, 0x0) 06:29:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8dffffff}], 0x8d9, 0x0) 06:29:54 executing program 5: 06:29:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 526.419498][T18241] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 526.427467][T18241] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.435435][T18241] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 526.443400][T18241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 526.451593][T18241] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 526.537435][T18241] memory: usage 307196kB, limit 307200kB, failcnt 348 [ 526.545670][T18241] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 526.563639][T18241] Memory cgroup stats for /syz1: [ 526.563848][T18241] anon 270880768 [ 526.563848][T18241] file 49152 [ 526.563848][T18241] kernel_stack 2912256 [ 526.563848][T18241] slab 15306752 [ 526.563848][T18241] sock 0 [ 526.563848][T18241] shmem 0 [ 526.563848][T18241] file_mapped 0 [ 526.563848][T18241] file_dirty 135168 [ 526.563848][T18241] file_writeback 0 [ 526.563848][T18241] anon_thp 251658240 [ 526.563848][T18241] inactive_anon 262144 [ 526.563848][T18241] active_anon 270880768 [ 526.563848][T18241] inactive_file 4096 [ 526.563848][T18241] active_file 69632 [ 526.563848][T18241] unevictable 0 [ 526.563848][T18241] slab_reclaimable 2568192 [ 526.563848][T18241] slab_unreclaimable 12738560 [ 526.563848][T18241] pgfault 34320 [ 526.563848][T18241] pgmajfault 0 06:29:54 executing program 5: 06:29:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xeffdffff}], 0x8d9, 0x0) 06:29:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xff030000}], 0x8d9, 0x0) [ 526.563848][T18241] workingset_refault 0 [ 526.563848][T18241] workingset_activate 0 [ 526.563848][T18241] workingset_nodereclaim 0 [ 526.563848][T18241] pgrefill 479 [ 526.563848][T18241] pgscan 1692 [ 526.563848][T18241] pgsteal 1357 06:29:54 executing program 5: 06:29:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xfffffdef}], 0x8d9, 0x0) [ 526.918358][T18241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9091,uid=0 [ 526.934931][T18241] Memory cgroup out of memory: Killed process 9091 (syz-executor.1) total-vm:72976kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 527.111613][T18243] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 527.127069][T18243] CPU: 0 PID: 18243 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 527.135736][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.145800][T18243] Call Trace: [ 527.149189][T18243] dump_stack+0x11d/0x181 [ 527.153584][T18243] dump_header+0xaa/0x449 [ 527.157944][T18243] oom_kill_process.cold+0x10/0x15 [ 527.163134][T18243] out_of_memory+0x231/0xa00 [ 527.167755][T18243] mem_cgroup_out_of_memory+0x128/0x150 [ 527.173467][T18243] try_charge+0xb5c/0xbe0 [ 527.177872][T18243] ? __rcu_read_unlock+0x66/0x3c0 [ 527.182898][T18243] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 527.188965][T18243] __memcg_kmem_charge+0xde/0x240 [ 527.193978][T18243] __alloc_pages_nodemask+0x26c/0x310 [ 527.199357][T18243] alloc_pages_current+0xd1/0x170 [ 527.204369][T18243] pte_alloc_one+0x18/0x50 [ 527.208783][T18243] __pte_alloc+0x2d/0x220 [ 527.213134][T18243] copy_page_range+0x151a/0x1a80 [ 527.218071][T18243] ? __read_once_size.constprop.0+0x12/0x20 [ 527.223967][T18243] ? __vma_link_rb+0x3f4/0x440 [ 527.228910][T18243] dup_mm+0x74a/0xba0 [ 527.232917][T18243] copy_process+0x36f3/0x3b50 [ 527.237589][T18243] _do_fork+0xfe/0x6e0 [ 527.241735][T18243] ? __read_once_size+0x5a/0xe0 [ 527.246639][T18243] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 527.252388][T18243] ? _copy_to_user+0x84/0xb0 [ 527.256990][T18243] __x64_sys_clone+0x12b/0x160 [ 527.261799][T18243] do_syscall_64+0xcc/0x370 [ 527.266322][T18243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 527.272222][T18243] RIP: 0033:0x45a679 [ 527.276160][T18243] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 527.297146][T18243] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 527.305816][T18243] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 527.313955][T18243] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.322012][T18243] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 527.330192][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 527.338295][T18243] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 527.347773][T18243] memory: usage 307200kB, limit 307200kB, failcnt 369 [ 527.355111][T18243] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 527.362200][T18243] Memory cgroup stats for /syz1: [ 527.362385][T18243] anon 270815232 [ 527.362385][T18243] file 49152 [ 527.362385][T18243] kernel_stack 2912256 [ 527.362385][T18243] slab 15306752 [ 527.362385][T18243] sock 0 [ 527.362385][T18243] shmem 0 [ 527.362385][T18243] file_mapped 0 [ 527.362385][T18243] file_dirty 135168 [ 527.362385][T18243] file_writeback 0 [ 527.362385][T18243] anon_thp 251658240 [ 527.362385][T18243] inactive_anon 262144 [ 527.362385][T18243] active_anon 270815232 [ 527.362385][T18243] inactive_file 4096 [ 527.362385][T18243] active_file 69632 [ 527.362385][T18243] unevictable 0 [ 527.362385][T18243] slab_reclaimable 2568192 [ 527.362385][T18243] slab_unreclaimable 12738560 [ 527.362385][T18243] pgfault 34353 [ 527.362385][T18243] pgmajfault 0 [ 527.362385][T18243] workingset_refault 0 [ 527.362385][T18243] workingset_activate 0 [ 527.362385][T18243] workingset_nodereclaim 0 [ 527.362385][T18243] pgrefill 479 [ 527.362385][T18243] pgscan 1692 [ 527.362385][T18243] pgsteal 1357 [ 527.461175][T18243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13548,uid=0 [ 527.476953][T18243] Memory cgroup out of memory: Killed process 13548 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 527.497136][ T1069] oom_reaper: reaped process 13548 (syz-executor.1), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB 06:29:55 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:55 executing program 5: 06:29:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xffffff7f}], 0x8d9, 0x0) 06:29:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x3000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ffffff}], 0x8d9, 0x0) 06:29:55 executing program 5: 06:29:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xffffff8d}], 0x8d9, 0x0) [ 527.788108][T18291] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 06:29:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xff030000}], 0x8d9, 0x0) 06:29:55 executing program 5: [ 527.860123][T18291] CPU: 1 PID: 18291 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 527.868614][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.878951][T18291] Call Trace: [ 527.882272][T18291] dump_stack+0x11d/0x181 [ 527.886785][T18291] dump_header+0xaa/0x449 [ 527.891150][T18291] oom_kill_process.cold+0x10/0x15 [ 527.896276][T18291] out_of_memory+0x231/0xa00 [ 527.900888][T18291] mem_cgroup_out_of_memory+0x128/0x150 [ 527.906689][T18291] try_charge+0xb5c/0xbe0 [ 527.911065][T18291] ? __rcu_read_unlock+0x66/0x3c0 [ 527.916264][T18291] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 527.921761][T18291] __memcg_kmem_charge+0xde/0x240 [ 527.926854][T18291] __alloc_pages_nodemask+0x26c/0x310 [ 527.932243][T18291] alloc_pages_current+0xd1/0x170 [ 527.940792][T18291] pte_alloc_one+0x18/0x50 [ 527.945232][T18291] __pte_alloc+0x2d/0x220 [ 527.949839][T18291] copy_page_range+0x151a/0x1a80 [ 527.954806][T18291] ? __vma_link_rb+0x3f4/0x440 [ 527.959672][T18291] dup_mm+0x74a/0xba0 [ 527.963828][T18291] copy_process+0x36f3/0x3b50 [ 527.968555][T18291] _do_fork+0xfe/0x6e0 [ 527.972700][T18291] ? __read_once_size+0x5a/0xe0 [ 527.978234][T18291] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 527.983996][T18291] ? _copy_to_user+0x84/0xb0 [ 527.989539][T18291] __x64_sys_clone+0x12b/0x160 [ 527.994460][T18291] do_syscall_64+0xcc/0x370 [ 527.999009][T18291] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.004986][T18291] RIP: 0033:0x45a679 [ 528.008979][T18291] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 528.028753][T18291] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 528.037165][T18291] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 528.045399][T18291] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.053384][T18291] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 528.061404][T18291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 528.069365][T18291] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:29:55 executing program 5: 06:29:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xfffffff0}], 0x8d9, 0x0) [ 528.241345][T18291] memory: usage 307200kB, limit 307200kB, failcnt 409 [ 528.277705][T18291] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 528.448625][T18291] Memory cgroup stats for /syz1: [ 528.448774][T18291] anon 270888960 [ 528.448774][T18291] file 49152 [ 528.448774][T18291] kernel_stack 2912256 [ 528.448774][T18291] slab 15306752 [ 528.448774][T18291] sock 0 [ 528.448774][T18291] shmem 0 [ 528.448774][T18291] file_mapped 0 [ 528.448774][T18291] file_dirty 135168 [ 528.448774][T18291] file_writeback 0 [ 528.448774][T18291] anon_thp 251658240 [ 528.448774][T18291] inactive_anon 262144 [ 528.448774][T18291] active_anon 270848000 [ 528.448774][T18291] inactive_file 4096 [ 528.448774][T18291] active_file 69632 [ 528.448774][T18291] unevictable 0 [ 528.448774][T18291] slab_reclaimable 2568192 [ 528.448774][T18291] slab_unreclaimable 12738560 [ 528.448774][T18291] pgfault 34452 [ 528.448774][T18291] pgmajfault 0 [ 528.448774][T18291] workingset_refault 0 [ 528.448774][T18291] workingset_activate 0 [ 528.448774][T18291] workingset_nodereclaim 0 [ 528.448774][T18291] pgrefill 479 [ 528.448774][T18291] pgscan 1692 [ 528.448774][T18291] pgsteal 1357 [ 528.551966][T18291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10596,uid=0 [ 528.569297][T18291] Memory cgroup out of memory: Killed process 10596 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 528.591220][ T1069] oom_reaper: reaped process 10596 (syz-executor.1), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 528.620302][T18298] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 528.638479][T18298] CPU: 1 PID: 18298 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 528.647303][T18298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.658371][T18298] Call Trace: [ 528.661846][T18298] dump_stack+0x11d/0x181 [ 528.666542][T18298] dump_header+0xaa/0x449 [ 528.671420][T18298] oom_kill_process.cold+0x10/0x15 [ 528.676665][T18298] out_of_memory+0x231/0xa00 [ 528.681448][T18298] mem_cgroup_out_of_memory+0x128/0x150 [ 528.687552][T18298] try_charge+0xb5c/0xbe0 [ 528.691905][T18298] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 528.697491][T18298] cache_grow_begin+0x3ed/0x670 [ 528.702601][T18298] fallback_alloc+0x161/0x1f0 [ 528.707654][T18298] ____cache_alloc_node+0x1b1/0x1c0 [ 528.713308][T18298] ? debug_smp_processor_id+0x4c/0x172 [ 528.719171][T18298] kmem_cache_alloc_node+0xbb/0x660 [ 528.724509][T18298] copy_process+0x2dd/0x3b50 [ 528.729660][T18298] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 528.735901][T18298] _do_fork+0xfe/0x6e0 [ 528.740353][T18298] ? __read_once_size+0x5a/0xe0 [ 528.745608][T18298] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 528.752688][T18298] ? _copy_to_user+0x84/0xb0 [ 528.757731][T18298] __x64_sys_clone+0x12b/0x160 [ 528.762859][T18298] do_syscall_64+0xcc/0x370 [ 528.767629][T18298] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 528.773615][T18298] RIP: 0033:0x45a679 [ 528.777894][T18298] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 528.797868][T18298] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 528.807147][T18298] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 528.816632][T18298] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.826209][T18298] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 528.835069][T18298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 528.846813][T18298] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 528.858785][T18298] memory: usage 307192kB, limit 307200kB, failcnt 426 [ 528.866008][T18298] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 528.874987][T18298] Memory cgroup stats for /syz1: [ 528.875245][T18298] anon 270798848 [ 528.875245][T18298] file 49152 [ 528.875245][T18298] kernel_stack 2912256 [ 528.875245][T18298] slab 15306752 [ 528.875245][T18298] sock 0 [ 528.875245][T18298] shmem 0 [ 528.875245][T18298] file_mapped 0 [ 528.875245][T18298] file_dirty 135168 [ 528.875245][T18298] file_writeback 0 [ 528.875245][T18298] anon_thp 251658240 [ 528.875245][T18298] inactive_anon 262144 [ 528.875245][T18298] active_anon 270757888 [ 528.875245][T18298] inactive_file 4096 [ 528.875245][T18298] active_file 69632 [ 528.875245][T18298] unevictable 0 [ 528.875245][T18298] slab_reclaimable 2568192 [ 528.875245][T18298] slab_unreclaimable 12738560 [ 528.875245][T18298] pgfault 34485 [ 528.875245][T18298] pgmajfault 0 [ 528.875245][T18298] workingset_refault 0 [ 528.875245][T18298] workingset_activate 0 [ 528.875245][T18298] workingset_nodereclaim 0 [ 528.875245][T18298] pgrefill 479 [ 528.875245][T18298] pgscan 1692 [ 528.875245][T18298] pgsteal 1357 [ 528.983512][T18298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10389,uid=0 [ 529.003869][T18298] Memory cgroup out of memory: Killed process 10389 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 529.023835][ T1069] oom_reaper: reaped process 10389 (syz-executor.1), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB 06:29:56 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xfffffdef}], 0x8d9, 0x0) 06:29:56 executing program 5: 06:29:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x7ffffffff000}], 0x8d9, 0x0) 06:29:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x4000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:57 executing program 5: 06:29:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x4000000000000}], 0x8d9, 0x0) 06:29:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xffffff7f}], 0x8d9, 0x0) 06:29:57 executing program 5: 06:29:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ff7f00000000}], 0x8d9, 0x0) 06:29:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xffffff8d}], 0x8d9, 0x0) [ 529.517014][T18358] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 529.573182][T18358] CPU: 1 PID: 18358 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 529.581575][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.592066][T18358] Call Trace: [ 529.595379][T18358] dump_stack+0x11d/0x181 [ 529.599831][T18358] dump_header+0xaa/0x449 [ 529.604184][T18358] oom_kill_process.cold+0x10/0x15 [ 529.609384][T18358] out_of_memory+0x231/0xa00 [ 529.613993][T18358] mem_cgroup_out_of_memory+0x128/0x150 [ 529.619553][T18358] try_charge+0xb5c/0xbe0 [ 529.623894][T18358] ? __rcu_read_unlock+0x66/0x3c0 [ 529.628971][T18358] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 529.634544][T18358] __memcg_kmem_charge+0xde/0x240 [ 529.639580][T18358] __alloc_pages_nodemask+0x26c/0x310 [ 529.644972][T18358] alloc_pages_current+0xd1/0x170 [ 529.650076][T18358] pte_alloc_one+0x18/0x50 [ 529.654498][T18358] __pte_alloc+0x2d/0x220 [ 529.659099][T18358] copy_page_range+0x151a/0x1a80 [ 529.664039][T18358] ? __read_once_size.constprop.0+0x12/0x20 [ 529.669942][T18358] ? anon_vma_interval_tree_insert+0x1d6/0x260 [ 529.676239][T18358] ? __write_once_size.constprop.0+0x20/0x20 [ 529.682288][T18358] dup_mm+0x74a/0xba0 [ 529.686284][T18358] copy_process+0x36f3/0x3b50 [ 529.690984][T18358] _do_fork+0xfe/0x6e0 [ 529.695063][T18358] ? __read_once_size+0x5a/0xe0 [ 529.699921][T18358] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 529.705706][T18358] ? _copy_to_user+0x84/0xb0 [ 529.710384][T18358] __x64_sys_clone+0x12b/0x160 [ 529.715267][T18358] do_syscall_64+0xcc/0x370 [ 529.719786][T18358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 529.725729][T18358] RIP: 0033:0x45a679 [ 529.729623][T18358] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 529.749233][T18358] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 529.757647][T18358] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 529.765618][T18358] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.773617][T18358] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 529.781591][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 529.789701][T18358] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 529.804186][T18358] memory: usage 307200kB, limit 307200kB, failcnt 470 [ 529.811354][T18358] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 529.826489][T18358] Memory cgroup stats for /syz1: [ 529.826893][T18358] anon 270827520 [ 529.826893][T18358] file 49152 [ 529.826893][T18358] kernel_stack 2912256 [ 529.826893][T18358] slab 15441920 [ 529.826893][T18358] sock 0 [ 529.826893][T18358] shmem 0 [ 529.826893][T18358] file_mapped 0 [ 529.826893][T18358] file_dirty 135168 [ 529.826893][T18358] file_writeback 0 [ 529.826893][T18358] anon_thp 251658240 [ 529.826893][T18358] inactive_anon 262144 [ 529.826893][T18358] active_anon 270749696 [ 529.826893][T18358] inactive_file 4096 [ 529.826893][T18358] active_file 69632 [ 529.826893][T18358] unevictable 0 [ 529.826893][T18358] slab_reclaimable 2568192 [ 529.826893][T18358] slab_unreclaimable 12873728 [ 529.826893][T18358] pgfault 34584 [ 529.826893][T18358] pgmajfault 0 [ 529.826893][T18358] workingset_refault 0 [ 529.826893][T18358] workingset_activate 0 [ 529.826893][T18358] workingset_nodereclaim 0 [ 529.826893][T18358] pgrefill 479 [ 529.826893][T18358] pgscan 1692 [ 529.826893][T18358] pgsteal 1390 [ 529.949374][T18358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10853,uid=0 [ 529.965041][T18358] Memory cgroup out of memory: Killed process 10853 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:29:57 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:57 executing program 5: 06:29:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x4924924}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ffffff7f0000}], 0x8d9, 0x0) 06:29:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xfffffff0}], 0x8d9, 0x0) 06:29:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x7ffffffff000}], 0x8d9, 0x0) 06:29:58 executing program 5: 06:29:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x100000000000000}], 0x8d9, 0x0) [ 530.482577][T18397] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 530.507926][T18397] CPU: 1 PID: 18397 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 530.516314][T18397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.526381][T18397] Call Trace: [ 530.529685][T18397] dump_stack+0x11d/0x181 [ 530.534025][T18397] dump_header+0xaa/0x449 [ 530.538456][T18397] oom_kill_process.cold+0x10/0x15 [ 530.543607][T18397] out_of_memory+0x231/0xa00 [ 530.548261][T18397] mem_cgroup_out_of_memory+0x128/0x150 [ 530.553830][T18397] try_charge+0xb5c/0xbe0 [ 530.558177][T18397] ? __rcu_read_unlock+0x66/0x3c0 [ 530.563265][T18397] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 530.568815][T18397] __memcg_kmem_charge+0xde/0x240 [ 530.573854][T18397] __alloc_pages_nodemask+0x26c/0x310 06:29:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x200000000000000}], 0x8d9, 0x0) 06:29:58 executing program 5: [ 530.579393][T18397] alloc_pages_current+0xd1/0x170 [ 530.584440][T18397] pte_alloc_one+0x18/0x50 [ 530.588877][T18397] __pte_alloc+0x2d/0x220 [ 530.593229][T18397] copy_page_range+0x151a/0x1a80 [ 530.598244][T18397] ? __read_once_size.constprop.0+0x12/0x20 [ 530.604263][T18397] dup_mm+0x74a/0xba0 [ 530.608340][T18397] copy_process+0x36f3/0x3b50 [ 530.613050][T18397] _do_fork+0xfe/0x6e0 [ 530.617140][T18397] ? __read_once_size+0x5a/0xe0 [ 530.622058][T18397] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 530.627808][T18397] ? _copy_to_user+0x84/0xb0 06:29:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8efff7f00000000}], 0x8d9, 0x0) [ 530.632415][T18397] __x64_sys_clone+0x12b/0x160 [ 530.637202][T18397] do_syscall_64+0xcc/0x370 [ 530.641721][T18397] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 530.647612][T18397] RIP: 0033:0x45a679 [ 530.651907][T18397] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 530.671919][T18397] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 530.680375][T18397] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 530.688357][T18397] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.696333][T18397] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 530.704418][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 530.712493][T18397] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 530.738196][T18397] memory: usage 307200kB, limit 307200kB, failcnt 512 [ 530.745343][T18397] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 530.756562][T18397] Memory cgroup stats for /syz1: [ 530.756843][T18397] anon 270815232 [ 530.756843][T18397] file 49152 [ 530.756843][T18397] kernel_stack 2875392 [ 530.756843][T18397] slab 15441920 [ 530.756843][T18397] sock 0 [ 530.756843][T18397] shmem 0 [ 530.756843][T18397] file_mapped 0 [ 530.756843][T18397] file_dirty 135168 [ 530.756843][T18397] file_writeback 0 [ 530.756843][T18397] anon_thp 251658240 [ 530.756843][T18397] inactive_anon 262144 [ 530.756843][T18397] active_anon 270815232 [ 530.756843][T18397] inactive_file 4096 [ 530.756843][T18397] active_file 69632 [ 530.756843][T18397] unevictable 0 [ 530.756843][T18397] slab_reclaimable 2568192 [ 530.756843][T18397] slab_unreclaimable 12873728 [ 530.756843][T18397] pgfault 34683 [ 530.756843][T18397] pgmajfault 0 [ 530.756843][T18397] workingset_refault 0 [ 530.756843][T18397] workingset_activate 0 [ 530.756843][T18397] workingset_nodereclaim 0 [ 530.756843][T18397] pgrefill 479 [ 530.756843][T18397] pgscan 1692 [ 530.756843][T18397] pgsteal 1390 [ 530.860346][T18397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10371,uid=0 [ 530.876214][T18397] Memory cgroup out of memory: Killed process 10371 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 530.983276][T18407] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 530.998411][T18407] CPU: 0 PID: 18407 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 531.006776][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.016881][T18407] Call Trace: [ 531.020186][T18407] dump_stack+0x11d/0x181 [ 531.024530][T18407] dump_header+0xaa/0x449 [ 531.028913][T18407] oom_kill_process.cold+0x10/0x15 [ 531.034056][T18407] out_of_memory+0x231/0xa00 [ 531.038795][T18407] mem_cgroup_out_of_memory+0x128/0x150 [ 531.044429][T18407] try_charge+0xb5c/0xbe0 [ 531.049165][T18407] ? __rcu_read_unlock+0x66/0x3c0 [ 531.054306][T18407] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 531.059765][T18407] __memcg_kmem_charge+0xde/0x240 [ 531.064873][T18407] __alloc_pages_nodemask+0x26c/0x310 [ 531.070695][T18407] alloc_pages_current+0xd1/0x170 [ 531.075767][T18407] pte_alloc_one+0x18/0x50 [ 531.080575][T18407] __pte_alloc+0x2d/0x220 [ 531.084896][T18407] copy_page_range+0x151a/0x1a80 [ 531.089878][T18407] ? __read_once_size.constprop.0+0x12/0x20 [ 531.095864][T18407] ? __vma_link_rb+0x3f4/0x440 [ 531.100667][T18407] dup_mm+0x74a/0xba0 [ 531.104681][T18407] copy_process+0x36f3/0x3b50 [ 531.109510][T18407] _do_fork+0xfe/0x6e0 [ 531.113571][T18407] ? __read_once_size+0x5a/0xe0 [ 531.118416][T18407] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 531.124126][T18407] ? _copy_to_user+0x84/0xb0 [ 531.128891][T18407] __x64_sys_clone+0x12b/0x160 [ 531.133678][T18407] do_syscall_64+0xcc/0x370 [ 531.138224][T18407] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.144106][T18407] RIP: 0033:0x45a679 [ 531.148009][T18407] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.167614][T18407] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 531.176016][T18407] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 531.185812][T18407] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.193850][T18407] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 531.201811][T18407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 531.209861][T18407] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 531.224643][T18407] memory: usage 307200kB, limit 307200kB, failcnt 541 [ 531.231532][T18407] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 531.241483][T18407] Memory cgroup stats for /syz1: [ 531.241706][T18407] anon 270831616 [ 531.241706][T18407] file 49152 [ 531.241706][T18407] kernel_stack 2875392 [ 531.241706][T18407] slab 15441920 [ 531.241706][T18407] sock 0 [ 531.241706][T18407] shmem 0 [ 531.241706][T18407] file_mapped 0 [ 531.241706][T18407] file_dirty 135168 [ 531.241706][T18407] file_writeback 0 [ 531.241706][T18407] anon_thp 251658240 [ 531.241706][T18407] inactive_anon 262144 [ 531.241706][T18407] active_anon 270831616 [ 531.241706][T18407] inactive_file 4096 [ 531.241706][T18407] active_file 69632 [ 531.241706][T18407] unevictable 0 [ 531.241706][T18407] slab_reclaimable 2568192 [ 531.241706][T18407] slab_unreclaimable 12873728 [ 531.241706][T18407] pgfault 34683 [ 531.241706][T18407] pgmajfault 0 [ 531.241706][T18407] workingset_refault 0 [ 531.241706][T18407] workingset_activate 0 [ 531.241706][T18407] workingset_nodereclaim 0 [ 531.241706][T18407] pgrefill 479 [ 531.241706][T18407] pgscan 1692 [ 531.241706][T18407] pgsteal 1390 [ 531.336772][T18407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18394,uid=0 [ 531.352461][T18407] Memory cgroup out of memory: Killed process 18394 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:29:59 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:29:59 executing program 5: 06:29:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x4000000000000}], 0x8d9, 0x0) 06:29:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3700000000000000}], 0x8d9, 0x0) 06:29:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x5000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:29:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:29:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3f00000000000000}], 0x8d9, 0x0) 06:29:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ff7f00000000}], 0x8d9, 0x0) 06:29:59 executing program 5: [ 531.580256][T18440] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 531.676938][T18440] CPU: 0 PID: 18440 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 531.685338][T18440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.695632][T18440] Call Trace: [ 531.699023][T18440] dump_stack+0x11d/0x181 [ 531.703397][T18440] dump_header+0xaa/0x449 [ 531.707788][T18440] oom_kill_process.cold+0x10/0x15 [ 531.712986][T18440] out_of_memory+0x231/0xa00 [ 531.717622][T18440] mem_cgroup_out_of_memory+0x128/0x150 [ 531.723232][T18440] try_charge+0xb5c/0xbe0 [ 531.727588][T18440] ? __rcu_read_unlock+0x66/0x3c0 [ 531.732658][T18440] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 531.738240][T18440] __memcg_kmem_charge+0xde/0x240 [ 531.743487][T18440] __alloc_pages_nodemask+0x26c/0x310 [ 531.748945][T18440] alloc_pages_current+0xd1/0x170 [ 531.754016][T18440] __vmalloc_node_range+0x2d7/0x4c0 [ 531.759275][T18440] ? kvm_dev_ioctl+0x6de/0xca0 [ 531.764110][T18440] __vmalloc_node_flags_caller+0x6b/0x90 [ 531.769754][T18440] ? kvm_dev_ioctl+0x6de/0xca0 [ 531.774521][T18440] kvmalloc_node+0xea/0x100 [ 531.779031][T18440] kvm_dev_ioctl+0x6de/0xca0 [ 531.783629][T18440] ? kvm_put_kvm+0x650/0x650 [ 531.788230][T18440] do_vfs_ioctl+0x991/0xc60 [ 531.792822][T18440] ? tomoyo_file_ioctl+0x34/0x40 [ 531.797769][T18440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.804039][T18440] ksys_ioctl+0xbd/0xe0 [ 531.808325][T18440] __x64_sys_ioctl+0x4c/0x60 [ 531.812971][T18440] do_syscall_64+0xcc/0x370 [ 531.817560][T18440] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 531.823496][T18440] RIP: 0033:0x45a679 [ 531.827401][T18440] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.847015][T18440] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.855502][T18440] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 531.863686][T18440] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 06:29:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ffffff7f0000}], 0x8d9, 0x0) 06:29:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x100000000000000}], 0x8d9, 0x0) 06:29:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x200000000000000}], 0x8d9, 0x0) [ 531.871665][T18440] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 531.879656][T18440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 531.887725][T18440] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 531.992618][T18440] memory: usage 307200kB, limit 307200kB, failcnt 583 [ 532.002072][T18440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 532.017477][T18440] Memory cgroup stats for /syz1: [ 532.017735][T18440] anon 270856192 [ 532.017735][T18440] file 49152 [ 532.017735][T18440] kernel_stack 2875392 [ 532.017735][T18440] slab 15441920 [ 532.017735][T18440] sock 0 [ 532.017735][T18440] shmem 0 [ 532.017735][T18440] file_mapped 0 [ 532.017735][T18440] file_dirty 135168 [ 532.017735][T18440] file_writeback 0 [ 532.017735][T18440] anon_thp 251658240 [ 532.017735][T18440] inactive_anon 262144 [ 532.017735][T18440] active_anon 270856192 [ 532.017735][T18440] inactive_file 4096 [ 532.017735][T18440] active_file 69632 [ 532.017735][T18440] unevictable 0 [ 532.017735][T18440] slab_reclaimable 2568192 [ 532.017735][T18440] slab_unreclaimable 12873728 [ 532.017735][T18440] pgfault 34749 [ 532.017735][T18440] pgmajfault 0 [ 532.017735][T18440] workingset_refault 0 [ 532.017735][T18440] workingset_activate 0 [ 532.017735][T18440] workingset_nodereclaim 0 [ 532.017735][T18440] pgrefill 479 [ 532.017735][T18440] pgscan 1692 [ 532.017735][T18440] pgsteal 1390 [ 532.120212][T18440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12710,uid=0 [ 532.136461][T18440] Memory cgroup out of memory: Killed process 12710 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 532.156363][ T1069] oom_reaper: reaped process 12710 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 532.169785][T18438] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 532.182954][T18438] CPU: 1 PID: 18438 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 532.191302][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.201408][T18438] Call Trace: [ 532.204708][T18438] dump_stack+0x11d/0x181 [ 532.209048][T18438] dump_header+0xaa/0x449 [ 532.213398][T18438] oom_kill_process.cold+0x10/0x15 [ 532.218595][T18438] out_of_memory+0x231/0xa00 [ 532.223228][T18438] mem_cgroup_out_of_memory+0x128/0x150 [ 532.228852][T18438] try_charge+0x7f5/0xbe0 [ 532.233335][T18438] ? __rcu_read_unlock+0x10/0x3c0 [ 532.238440][T18438] mem_cgroup_try_charge+0xd2/0x260 [ 532.243687][T18438] mem_cgroup_try_charge_delay+0x3a/0x80 [ 532.249402][T18438] __handle_mm_fault+0x17ab/0x2c70 [ 532.254560][T18438] handle_mm_fault+0x21b/0x530 [ 532.259338][T18438] __do_page_fault+0x456/0x8d0 [ 532.264113][T18438] do_page_fault+0x38/0x194 [ 532.268726][T18438] page_fault+0x34/0x40 [ 532.272896][T18438] RIP: 0033:0x411e6f [ 532.276930][T18438] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 532.296831][T18438] RSP: 002b:00007ffde2f6f960 EFLAGS: 00010206 [ 532.303005][T18438] RAX: 00007fdd6be42000 RBX: 0000000000020000 RCX: 000000000045a6ca [ 532.311265][T18438] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 532.319262][T18438] RBP: 00007ffde2f6fa40 R08: ffffffffffffffff R09: 0000000000000000 [ 532.327229][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde2f6fb30 [ 532.335233][T18438] R13: 00007fdd6be62700 R14: 0000000000000001 R15: 000000000075bfd4 [ 532.357462][T18438] memory: usage 305036kB, limit 307200kB, failcnt 583 [ 532.366944][T18438] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 532.374618][T18438] Memory cgroup stats for /syz1: [ 532.374859][T18438] anon 268742656 [ 532.374859][T18438] file 49152 [ 532.374859][T18438] kernel_stack 2875392 [ 532.374859][T18438] slab 15441920 [ 532.374859][T18438] sock 0 [ 532.374859][T18438] shmem 0 [ 532.374859][T18438] file_mapped 0 [ 532.374859][T18438] file_dirty 135168 [ 532.374859][T18438] file_writeback 0 [ 532.374859][T18438] anon_thp 249561088 [ 532.374859][T18438] inactive_anon 262144 [ 532.374859][T18438] active_anon 268742656 [ 532.374859][T18438] inactive_file 4096 [ 532.374859][T18438] active_file 69632 [ 532.374859][T18438] unevictable 0 [ 532.374859][T18438] slab_reclaimable 2568192 [ 532.374859][T18438] slab_unreclaimable 12873728 [ 532.374859][T18438] pgfault 34749 [ 532.374859][T18438] pgmajfault 0 [ 532.374859][T18438] workingset_refault 0 [ 532.374859][T18438] workingset_activate 0 [ 532.374859][T18438] workingset_nodereclaim 0 [ 532.374859][T18438] pgrefill 479 [ 532.374859][T18438] pgscan 1692 [ 532.374859][T18438] pgsteal 1390 [ 532.470385][T18438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12287,uid=0 [ 532.485996][T18438] Memory cgroup out of memory: Killed process 12287 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 532.505313][ T1069] oom_reaper: reaped process 12287 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 06:30:00 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8efff7f00000000}], 0x8d9, 0x0) 06:30:00 executing program 5: 06:30:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x400e002000000000}], 0x8d9, 0x0) 06:30:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x6000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:00 executing program 5: 06:30:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8dffffff00000000}], 0x8d9, 0x0) 06:30:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3700000000000000}], 0x8d9, 0x0) 06:30:00 executing program 5: 06:30:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xeffdffff00000000}], 0x8d9, 0x0) 06:30:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3f00000000000000}], 0x8d9, 0x0) 06:30:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ffffff00000000}], 0x8d9, 0x0) 06:30:01 executing program 5: socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:30:01 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x400e002000000000}], 0x8d9, 0x0) 06:30:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x7000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xff03000000000000}], 0x8d9, 0x0) 06:30:01 executing program 5: socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:30:01 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x8dffffff00000000}], 0x8d9, 0x0) 06:30:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xffffff7f00000000}], 0x8d9, 0x0) 06:30:01 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x16d) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) dup3(r1, r2, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) 06:30:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xeffdffff00000000}], 0x8d9, 0x0) [ 534.154239][T18573] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 06:30:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x2}], 0x8d9, 0x0) 06:30:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xf0ffffff00000000}], 0x8d9, 0x0) 06:30:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x8000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:02 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xff03000000000000}], 0x8d9, 0x0) 06:30:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x4}], 0x8d9, 0x0) 06:30:02 executing program 5: socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:30:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0xffffff7f00000000}], 0x8d9, 0x0) 06:30:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x37}], 0x8d9, 0x0) [ 534.867300][T18599] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 534.891324][T18599] CPU: 0 PID: 18599 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 534.899722][T18599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.909773][T18599] Call Trace: [ 534.913076][T18599] dump_stack+0x11d/0x181 [ 534.917505][T18599] dump_header+0xaa/0x449 [ 534.922062][T18599] oom_kill_process.cold+0x10/0x15 [ 534.927248][T18599] out_of_memory+0x231/0xa00 [ 534.931974][T18599] mem_cgroup_out_of_memory+0x128/0x150 [ 534.937547][T18599] try_charge+0xb5c/0xbe0 [ 534.941922][T18599] ? __rcu_read_unlock+0x10/0x3c0 [ 534.946966][T18599] mem_cgroup_try_charge+0xd2/0x260 [ 534.952209][T18599] mem_cgroup_try_charge_delay+0x3a/0x80 [ 534.957860][T18599] wp_page_copy+0x322/0x1120 [ 534.962535][T18599] ? __read_once_size+0x41/0xe0 06:30:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x3700}], 0x8d9, 0x0) [ 534.967498][T18599] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 534.973640][T18599] do_wp_page+0x192/0x11f0 [ 534.978318][T18599] __handle_mm_fault+0x1ab1/0x2c70 [ 534.983474][T18599] handle_mm_fault+0x21b/0x530 [ 534.988294][T18599] __do_page_fault+0x456/0x8d0 [ 534.993083][T18599] do_page_fault+0x38/0x194 [ 534.997663][T18599] page_fault+0x34/0x40 [ 535.001813][T18599] RIP: 0033:0x40cea8 [ 535.005820][T18599] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 68 2c 00 00 8b 05 62 b1 32 00 48 8b 15 d3 57 66 00 83 c0 01 <89> 05 52 b1 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 535.025424][T18599] RSP: 002b:00007ffde2f6f9e0 EFLAGS: 00010206 [ 535.031496][T18599] RAX: 0000000000000005 RBX: 0000001b329237cc RCX: 0000001b33920000 [ 535.039696][T18599] RDX: 0000001b32920000 RSI: 0000000000001993 RDI: ffffffffee5c7993 [ 535.047749][T18599] RBP: 0000001b329237d0 R08: 00000000ee5c7993 R09: 00000000ee5c7997 [ 535.055740][T18599] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 0000001b329237d4 06:30:02 executing program 5: socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) [ 535.063809][T18599] R13: 00000000000828f4 R14: 000000000075bf20 R15: 000000000075bf2c [ 535.088307][T18599] memory: usage 307200kB, limit 307200kB, failcnt 617 [ 535.125121][T18599] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x2}], 0x8d9, 0x0) [ 535.289638][T18599] Memory cgroup stats for /syz1: [ 535.289764][T18599] anon 269312000 [ 535.289764][T18599] file 49152 [ 535.289764][T18599] kernel_stack 2985984 [ 535.289764][T18599] slab 15917056 [ 535.289764][T18599] sock 0 [ 535.289764][T18599] shmem 0 [ 535.289764][T18599] file_mapped 0 [ 535.289764][T18599] file_dirty 135168 [ 535.289764][T18599] file_writeback 0 [ 535.289764][T18599] anon_thp 249561088 [ 535.289764][T18599] inactive_anon 262144 [ 535.289764][T18599] active_anon 269312000 [ 535.289764][T18599] inactive_file 4096 [ 535.289764][T18599] active_file 69632 [ 535.289764][T18599] unevictable 0 [ 535.289764][T18599] slab_reclaimable 2703360 [ 535.289764][T18599] slab_unreclaimable 13213696 [ 535.289764][T18599] pgfault 35244 [ 535.289764][T18599] pgmajfault 0 [ 535.289764][T18599] workingset_refault 0 [ 535.289764][T18599] workingset_activate 0 [ 535.289764][T18599] workingset_nodereclaim 0 [ 535.289764][T18599] pgrefill 479 [ 535.289764][T18599] pgscan 1692 [ 535.289764][T18599] pgsteal 1390 [ 535.387967][T18599] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12061,uid=0 [ 535.469964][T18599] Memory cgroup out of memory: Killed process 12061 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:30:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x3f00}], 0x8d9, 0x0) 06:30:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 535.694342][T18607] debugfs: Directory '18607-4' with parent 'kvm' already present! 06:30:03 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:03 executing program 5: socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:30:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x24499204}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x4}], 0x8d9, 0x0) 06:30:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xff03}], 0x8d9, 0x0) 06:30:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x37}], 0x8d9, 0x0) 06:30:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x40000}], 0x8d9, 0x0) 06:30:04 executing program 5: socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) 06:30:04 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xf0ff7f}], 0x8d9, 0x0) 06:30:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x3700}], 0x8d9, 0x0) 06:30:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x1000000}], 0x8d9, 0x0) 06:30:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0xff000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x3f00}], 0x8d9, 0x0) 06:30:04 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:04 executing program 5: pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 06:30:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x2000000}], 0x8d9, 0x0) 06:30:04 executing program 5: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xff03}], 0x8d9, 0x0) 06:30:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x8efff7f}], 0x8d9, 0x0) 06:30:05 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x40000}], 0x8d9, 0x0) [ 537.530762][T18762] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 537.555548][T18762] CPU: 0 PID: 18762 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 537.563926][T18762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.574088][T18762] Call Trace: [ 537.577449][T18762] dump_stack+0x11d/0x181 [ 537.581815][T18762] dump_header+0xaa/0x449 [ 537.586181][T18762] oom_kill_process.cold+0x10/0x15 [ 537.591302][T18762] out_of_memory+0x231/0xa00 [ 537.595956][T18762] mem_cgroup_out_of_memory+0x128/0x150 [ 537.601621][T18762] try_charge+0xb5c/0xbe0 [ 537.605967][T18762] ? __rcu_read_unlock+0x66/0x3c0 [ 537.611035][T18762] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 537.616577][T18762] __memcg_kmem_charge+0xde/0x240 [ 537.621682][T18762] __alloc_pages_nodemask+0x26c/0x310 [ 537.627065][T18762] alloc_pages_current+0xd1/0x170 [ 537.632098][T18762] pte_alloc_one+0x18/0x50 [ 537.636534][T18762] __pte_alloc+0x2d/0x220 [ 537.640928][T18762] copy_page_range+0x151a/0x1a80 [ 537.645928][T18762] ? __vma_link_rb+0x3f4/0x440 [ 537.650709][T18762] dup_mm+0x74a/0xba0 [ 537.654752][T18762] copy_process+0x36f3/0x3b50 [ 537.659444][T18762] _do_fork+0xfe/0x6e0 [ 537.663543][T18762] ? __read_once_size+0x5a/0xe0 [ 537.668441][T18762] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 537.674238][T18762] ? _copy_to_user+0x84/0xb0 [ 537.678828][T18762] __x64_sys_clone+0x12b/0x160 [ 537.683593][T18762] do_syscall_64+0xcc/0x370 [ 537.688090][T18762] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 537.693971][T18762] RIP: 0033:0x45a679 [ 537.697864][T18762] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 537.717461][T18762] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 537.726021][T18762] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 537.734138][T18762] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.742145][T18762] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 537.750281][T18762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 537.758255][T18762] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 537.785674][T18762] memory: usage 307200kB, limit 307200kB, failcnt 670 [ 537.793401][T18762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 537.801075][T18762] Memory cgroup stats for /syz1: [ 537.801304][T18762] anon 267821056 [ 537.801304][T18762] file 49152 [ 537.801304][T18762] kernel_stack 3096576 [ 537.801304][T18762] slab 16216064 [ 537.801304][T18762] sock 0 [ 537.801304][T18762] shmem 0 [ 537.801304][T18762] file_mapped 0 [ 537.801304][T18762] file_dirty 135168 [ 537.801304][T18762] file_writeback 0 [ 537.801304][T18762] anon_thp 247463936 [ 537.801304][T18762] inactive_anon 262144 [ 537.801304][T18762] active_anon 267821056 [ 537.801304][T18762] inactive_file 4096 [ 537.801304][T18762] active_file 69632 [ 537.801304][T18762] unevictable 0 [ 537.801304][T18762] slab_reclaimable 2703360 [ 537.801304][T18762] slab_unreclaimable 13512704 [ 537.801304][T18762] pgfault 35673 [ 537.801304][T18762] pgmajfault 0 [ 537.801304][T18762] workingset_refault 0 [ 537.801304][T18762] workingset_activate 0 [ 537.801304][T18762] workingset_nodereclaim 0 [ 537.801304][T18762] pgrefill 512 [ 537.801304][T18762] pgscan 1692 [ 537.801304][T18762] pgsteal 1390 06:30:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x20000e40}], 0x8d9, 0x0) 06:30:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xf0ff7f}], 0x8d9, 0x0) [ 537.933244][T18762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10840,uid=0 [ 537.997245][T18762] Memory cgroup out of memory: Killed process 10840 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:30:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x37000000}], 0x8d9, 0x0) 06:30:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x1000000}], 0x8d9, 0x0) 06:30:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x3f000000}], 0x8d9, 0x0) 06:30:06 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x2000000}], 0x8d9, 0x0) 06:30:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x2}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x400e0020}], 0x8d9, 0x0) 06:30:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x8efff7f}], 0x8d9, 0x0) 06:30:06 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x7fffef08}], 0x8d9, 0x0) 06:30:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x7ffff000}], 0x8d9, 0x0) 06:30:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x3}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x20000e40}], 0x8d9, 0x0) 06:30:07 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x8dffffff}], 0x8d9, 0x0) 06:30:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x37000000}], 0x8d9, 0x0) [ 539.636469][T18863] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 539.673678][T18863] CPU: 0 PID: 18863 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 539.682047][T18863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.692299][T18863] Call Trace: [ 539.695595][T18863] dump_stack+0x11d/0x181 [ 539.699940][T18863] dump_header+0xaa/0x449 [ 539.704288][T18863] oom_kill_process.cold+0x10/0x15 [ 539.709535][T18863] out_of_memory+0x231/0xa00 [ 539.714579][T18863] mem_cgroup_out_of_memory+0x128/0x150 [ 539.720141][T18863] try_charge+0xb5c/0xbe0 [ 539.724537][T18863] ? __rcu_read_unlock+0x10/0x3c0 [ 539.729707][T18863] mem_cgroup_try_charge+0xd2/0x260 [ 539.734925][T18863] mem_cgroup_try_charge_delay+0x3a/0x80 [ 539.740683][T18863] wp_page_copy+0x322/0x1120 [ 539.745451][T18863] ? __read_once_size+0x41/0xe0 [ 539.750304][T18863] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 539.756274][T18863] do_wp_page+0x192/0x11f0 [ 539.760707][T18863] __handle_mm_fault+0x1ab1/0x2c70 [ 539.765843][T18863] handle_mm_fault+0x21b/0x530 [ 539.770782][T18863] __do_page_fault+0x456/0x8d0 [ 539.775636][T18863] do_page_fault+0x38/0x194 [ 539.780146][T18863] page_fault+0x34/0x40 [ 539.784302][T18863] RIP: 0033:0x40cea8 [ 539.788354][T18863] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 68 2c 00 00 8b 05 62 b1 32 00 48 8b 15 d3 57 66 00 83 c0 01 <89> 05 52 b1 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 539.808047][T18863] RSP: 002b:00007ffde2f6f9e0 EFLAGS: 00010206 [ 539.814116][T18863] RAX: 0000000000000005 RBX: 0000001b32923c48 RCX: 0000001b33920000 [ 539.822144][T18863] RDX: 0000001b32920000 RSI: 00000000000016af RDI: fffffffff559b6af [ 539.830145][T18863] RBP: 0000001b32923c4c R08: 00000000f559b6af R09: 00000000f559b6b3 [ 539.838109][T18863] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 0000001b32923c50 [ 539.846186][T18863] R13: 0000000000083b9d R14: 000000000075bfc8 R15: 000000000075bfd4 [ 539.855958][T18863] memory: usage 307200kB, limit 307200kB, failcnt 707 [ 539.871286][T18863] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 539.898369][T18863] Memory cgroup stats for /syz1: [ 539.898502][T18863] anon 266477568 [ 539.898502][T18863] file 49152 [ 539.898502][T18863] kernel_stack 3170304 [ 539.898502][T18863] slab 16846848 [ 539.898502][T18863] sock 0 [ 539.898502][T18863] shmem 0 [ 539.898502][T18863] file_mapped 0 [ 539.898502][T18863] file_dirty 135168 [ 539.898502][T18863] file_writeback 0 [ 539.898502][T18863] anon_thp 245366784 [ 539.898502][T18863] inactive_anon 262144 [ 539.898502][T18863] active_anon 266477568 06:30:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xeffdffff}], 0x8d9, 0x0) [ 539.898502][T18863] inactive_file 4096 [ 539.898502][T18863] active_file 69632 [ 539.898502][T18863] unevictable 0 [ 539.898502][T18863] slab_reclaimable 2838528 [ 539.898502][T18863] slab_unreclaimable 14008320 [ 539.898502][T18863] pgfault 36069 [ 539.898502][T18863] pgmajfault 0 [ 539.898502][T18863] workingset_refault 0 [ 539.898502][T18863] workingset_activate 0 [ 539.898502][T18863] workingset_nodereclaim 0 [ 539.898502][T18863] pgrefill 512 [ 539.898502][T18863] pgscan 1725 [ 539.898502][T18863] pgsteal 1390 06:30:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x4}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 540.081373][T18863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10868,uid=0 [ 540.160688][T18863] Memory cgroup out of memory: Killed process 10868 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:30:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xf0ffffff}], 0x8d9, 0x0) 06:30:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x3f000000}], 0x8d9, 0x0) 06:30:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xff030000}], 0x8d9, 0x0) 06:30:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x400e0020}], 0x8d9, 0x0) 06:30:08 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x7fffef08}], 0x8d9, 0x0) 06:30:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xfffffdef}], 0x8d9, 0x0) 06:30:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x5}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xffffff7f}], 0x8d9, 0x0) 06:30:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x7ffff000}], 0x8d9, 0x0) 06:30:09 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xffffff8d}], 0x8d9, 0x0) 06:30:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0x8dffffff}], 0x8d9, 0x0) 06:30:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xfffffff0}], 0x8d9, 0x0) 06:30:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x6}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xeffdffff}], 0x8d9, 0x0) 06:30:09 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0x6) 06:30:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x2) 06:30:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xf0ffffff}], 0x8d9, 0x0) 06:30:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x4) 06:30:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xff030000}], 0x8d9, 0x0) 06:30:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:10 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='vcan0\x00', 0x2, 0x5, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) r4 = dup3(r2, r3, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r0, r5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}], 0xffffffffffffff91) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7c, &(0x7f0000000240)={r11, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000140)={r11, @in={{0x2, 0x4e20, @rand_addr=0x8}}, 0x5920, 0x6, 0xfffffff9, 0x6, 0x200}, &(0x7f0000000200)=0x98) setns(r6, 0x0) 06:30:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xfffffdef}], 0x8d9, 0x0) 06:30:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x37) 06:30:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3700) 06:30:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xffffff7f}], 0x8d9, 0x0) 06:30:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x7}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3f00) 06:30:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xffffff8d}], 0x8d9, 0x0) [ 543.285934][T19030] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 543.343362][T19030] CPU: 1 PID: 19030 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 543.351747][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.361808][T19030] Call Trace: [ 543.365185][T19030] dump_stack+0x11d/0x181 [ 543.369530][T19030] dump_header+0xaa/0x449 [ 543.373914][T19030] oom_kill_process.cold+0x10/0x15 [ 543.379061][T19030] out_of_memory+0x231/0xa00 [ 543.383668][T19030] mem_cgroup_out_of_memory+0x128/0x150 [ 543.389243][T19030] try_charge+0xb5c/0xbe0 [ 543.393582][T19030] ? __rcu_read_unlock+0x10/0x3c0 [ 543.399322][T19030] mem_cgroup_try_charge+0xd2/0x260 [ 543.404649][T19030] __add_to_page_cache_locked+0x163/0x780 [ 543.410418][T19030] ? __read_once_size.constprop.0+0x20/0x20 [ 543.416579][T19030] add_to_page_cache_lru+0xc4/0x260 [ 543.421820][T19030] generic_file_read_iter+0xf30/0x1440 [ 543.427448][T19030] ext4_file_read_iter+0xfa/0x240 [ 543.432478][T19030] generic_file_splice_read+0x35c/0x500 [ 543.438039][T19030] do_splice_to+0xf2/0x130 [ 543.442470][T19030] ? add_to_pipe+0x1a0/0x1a0 [ 543.447180][T19030] ? add_to_pipe+0x1a0/0x1a0 [ 543.453202][T19030] splice_direct_to_actor+0x1a1/0x510 [ 543.458617][T19030] ? generic_pipe_buf_nosteal+0x20/0x20 [ 543.464261][T19030] do_splice_direct+0x161/0x1e0 [ 543.469131][T19030] do_sendfile+0x384/0x7f0 [ 543.473572][T19030] __x64_sys_sendfile64+0x12a/0x140 [ 543.478902][T19030] do_syscall_64+0xcc/0x370 [ 543.483425][T19030] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 543.489331][T19030] RIP: 0033:0x45a679 [ 543.493407][T19030] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.513487][T19030] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 543.521929][T19030] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 543.529941][T19030] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 543.537932][T19030] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 543.545894][T19030] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 543.553928][T19030] R13: 00000000004c8f16 R14: 00000000004e0a30 R15: 00000000ffffffff [ 543.624788][T19030] memory: usage 307200kB, limit 307200kB, failcnt 1054 [ 543.635642][T19030] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 543.660721][T19030] Memory cgroup stats for /syz1: [ 543.660971][T19030] anon 264970240 [ 543.660971][T19030] file 49152 [ 543.660971][T19030] kernel_stack 3244032 [ 543.660971][T19030] slab 17387520 [ 543.660971][T19030] sock 0 [ 543.660971][T19030] shmem 0 [ 543.660971][T19030] file_mapped 0 [ 543.660971][T19030] file_dirty 0 [ 543.660971][T19030] file_writeback 0 [ 543.660971][T19030] anon_thp 243269632 [ 543.660971][T19030] inactive_anon 262144 [ 543.660971][T19030] active_anon 264970240 [ 543.660971][T19030] inactive_file 0 [ 543.660971][T19030] active_file 69632 [ 543.660971][T19030] unevictable 0 [ 543.660971][T19030] slab_reclaimable 2838528 06:30:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x0, 0xfffffff0}], 0x8d9, 0x0) 06:30:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xff03) 06:30:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 543.660971][T19030] slab_unreclaimable 14548992 [ 543.660971][T19030] pgfault 36564 [ 543.660971][T19030] pgmajfault 0 [ 543.660971][T19030] workingset_refault 165 [ 543.660971][T19030] workingset_activate 0 [ 543.660971][T19030] workingset_nodereclaim 0 [ 543.660971][T19030] pgrefill 512 [ 543.660971][T19030] pgscan 3776 [ 543.660971][T19030] pgsteal 1594 [ 543.827429][T19030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12724,uid=0 [ 543.866143][T19030] Memory cgroup out of memory: Killed process 12724 (syz-executor.1) total-vm:72580kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 544.000354][T19020] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 544.033050][T19020] CPU: 1 PID: 19020 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 544.041420][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.051500][T19020] Call Trace: [ 544.054858][T19020] dump_stack+0x11d/0x181 [ 544.059226][T19020] dump_header+0xaa/0x449 [ 544.063566][T19020] oom_kill_process.cold+0x10/0x15 [ 544.068695][T19020] out_of_memory+0x231/0xa00 [ 544.073320][T19020] mem_cgroup_out_of_memory+0x128/0x150 [ 544.079505][T19020] try_charge+0x7f5/0xbe0 [ 544.083844][T19020] ? __rcu_read_unlock+0x10/0x3c0 [ 544.088895][T19020] mem_cgroup_try_charge+0xd2/0x260 [ 544.094124][T19020] mem_cgroup_try_charge_delay+0x3a/0x80 [ 544.099815][T19020] wp_page_copy+0x322/0x1120 [ 544.104501][T19020] ? __read_once_size+0x41/0xe0 [ 544.109360][T19020] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 544.115275][T19020] do_wp_page+0x192/0x11f0 [ 544.119719][T19020] __handle_mm_fault+0x1ab1/0x2c70 [ 544.124971][T19020] handle_mm_fault+0x21b/0x530 [ 544.129755][T19020] __do_page_fault+0x456/0x8d0 [ 544.134557][T19020] do_page_fault+0x38/0x194 [ 544.139085][T19020] page_fault+0x34/0x40 [ 544.143287][T19020] RIP: 0033:0x4418f9 [ 544.147205][T19020] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 [ 544.166973][T19020] RSP: 002b:00007ffde2f6fa48 EFLAGS: 00010202 [ 544.173094][T19020] RAX: 00000000207e2ff8 RBX: 0000000000000000 RCX: 0030656c69662f2e [ 544.181057][T19020] RDX: 0000000000000008 RSI: 00000000007600f8 RDI: 00000000207e2ff8 [ 544.189107][T19020] RBP: 00000000007600d8 R08: 00000000007600d8 R09: ffffffffffffffff [ 544.197158][T19020] R10: 00007ffde2f6fb10 R11: 0000000000000246 R12: 000000000075bf20 [ 544.205198][T19020] R13: 0000000000000004 R14: 00000000007600e0 R15: 000000000075bf2c [ 544.225117][T19020] memory: usage 305228kB, limit 307200kB, failcnt 1056 [ 544.235093][T19020] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 544.244286][T19020] Memory cgroup stats for /syz1: [ 544.244657][T19020] anon 262787072 [ 544.244657][T19020] file 319488 [ 544.244657][T19020] kernel_stack 3244032 [ 544.244657][T19020] slab 17387520 [ 544.244657][T19020] sock 0 [ 544.244657][T19020] shmem 0 [ 544.244657][T19020] file_mapped 0 [ 544.244657][T19020] file_dirty 0 [ 544.244657][T19020] file_writeback 0 [ 544.244657][T19020] anon_thp 241172480 [ 544.244657][T19020] inactive_anon 262144 [ 544.244657][T19020] active_anon 262787072 [ 544.244657][T19020] inactive_file 270336 [ 544.244657][T19020] active_file 69632 [ 544.244657][T19020] unevictable 0 [ 544.244657][T19020] slab_reclaimable 2838528 [ 544.244657][T19020] slab_unreclaimable 14548992 [ 544.244657][T19020] pgfault 36564 [ 544.244657][T19020] pgmajfault 0 [ 544.244657][T19020] workingset_refault 198 [ 544.244657][T19020] workingset_activate 0 [ 544.244657][T19020] workingset_nodereclaim 0 [ 544.244657][T19020] pgrefill 512 [ 544.244657][T19020] pgscan 3776 [ 544.244657][T19020] pgsteal 1594 [ 544.346497][T19020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17751,uid=0 [ 544.365940][T19020] Memory cgroup out of memory: Killed process 17751 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x2) 06:30:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x40000) 06:30:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x8}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:12 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x5, 0x5, 0x80, 0x7}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)=0x3) setns(r3, 0x0) 06:30:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x4) 06:30:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ff7f) 06:30:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x1000000) 06:30:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x37) 06:30:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x300}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x2000000) 06:30:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3700) [ 545.365419][ T26] audit: type=1800 audit(1575354613.134:115): pid=19104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16752 res=0 06:30:13 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r4, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080022}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@setneightbl={0x30, 0x43, 0x100, 0x70bd28, 0x25dfdbfb, {0x2}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_THRESH3={0x8, 0x4, 0xba}, @NDTA_THRESH3={0x8, 0x4, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 06:30:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8efff7f) 06:30:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3f00) 06:30:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x20000e40) 06:30:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:13 executing program 1: unshare(0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = shmget(0x2, 0x4000, 0x78001850, &(0x7f0000ffc000/0x4000)=nil) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4}}, &(0x7f00000000c0)=0xe8) r7 = timerfd_create(0x0, 0x0) fstat(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r8) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x3ff, r4, r5, r6, r8, 0x148}, 0x7fffffff, 0x8000, 0x9, 0x8, r9, r10, 0x4}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r11, 0x0) 06:30:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xff03) 06:30:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x37000000) 06:30:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x500}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x40000) 06:30:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3f000000) 06:30:14 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) ptrace(0x10, 0x0) 06:30:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ff7f) 06:30:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x400e0020) 06:30:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:14 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x81482, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x80000000, @remote, 0x4}, {0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1a}, 0x1ffe000}, 0x3, [0x1000, 0x7fffffff, 0x0, 0x2, 0x5d0e, 0x200, 0x8001, 0x1f]}, 0x5c) 06:30:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x1000000) 06:30:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x7fffef08) [ 547.303207][T19232] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 547.328819][T19232] CPU: 0 PID: 19232 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 547.337316][T19232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.347375][T19232] Call Trace: [ 547.350729][T19232] dump_stack+0x11d/0x181 [ 547.355080][T19232] dump_header+0xaa/0x449 [ 547.359454][T19232] oom_kill_process.cold+0x10/0x15 [ 547.364578][T19232] out_of_memory+0x231/0xa00 [ 547.369271][T19232] mem_cgroup_out_of_memory+0x128/0x150 [ 547.374897][T19232] try_charge+0xb5c/0xbe0 [ 547.379309][T19232] ? __rcu_read_unlock+0x66/0x3c0 [ 547.384360][T19232] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 547.389835][T19232] __memcg_kmem_charge+0xde/0x240 [ 547.394945][T19232] __alloc_pages_nodemask+0x26c/0x310 [ 547.400528][T19232] alloc_pages_current+0xd1/0x170 [ 547.405566][T19232] pte_alloc_one+0x18/0x50 [ 547.409990][T19232] __pte_alloc+0x2d/0x220 [ 547.414463][T19232] copy_page_range+0x151a/0x1a80 [ 547.419514][T19232] ? __read_once_size.constprop.0+0x12/0x20 [ 547.425605][T19232] ? __vma_link_rb+0x3f4/0x440 [ 547.430399][T19232] dup_mm+0x74a/0xba0 [ 547.434469][T19232] copy_process+0x36f3/0x3b50 [ 547.439258][T19232] _do_fork+0xfe/0x6e0 [ 547.443432][T19232] ? __read_once_size+0x5a/0xe0 [ 547.448485][T19232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 547.454223][T19232] ? _copy_to_user+0x84/0xb0 [ 547.458829][T19232] __x64_sys_clone+0x12b/0x160 [ 547.464333][T19232] do_syscall_64+0xcc/0x370 [ 547.468862][T19232] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 547.474753][T19232] RIP: 0033:0x45a679 [ 547.478743][T19232] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:30:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x7ffff000) 06:30:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8dffffff) 06:30:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x600}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 547.498356][T19232] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 547.506829][T19232] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 547.514934][T19232] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.523198][T19232] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 547.531316][T19232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 547.539277][T19232] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:30:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x2000000) [ 547.584601][T19232] memory: usage 307200kB, limit 307200kB, failcnt 1135 [ 547.594488][T19232] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 547.613027][T19232] Memory cgroup stats for /syz1: [ 547.613240][T19232] anon 263499776 [ 547.613240][T19232] file 0 [ 547.613240][T19232] kernel_stack 3391488 [ 547.613240][T19232] slab 17989632 [ 547.613240][T19232] sock 0 [ 547.613240][T19232] shmem 0 [ 547.613240][T19232] file_mapped 0 [ 547.613240][T19232] file_dirty 0 [ 547.613240][T19232] file_writeback 0 [ 547.613240][T19232] anon_thp 241172480 [ 547.613240][T19232] inactive_anon 262144 [ 547.613240][T19232] active_anon 263499776 [ 547.613240][T19232] inactive_file 0 [ 547.613240][T19232] active_file 69632 [ 547.613240][T19232] unevictable 0 [ 547.613240][T19232] slab_reclaimable 3108864 [ 547.613240][T19232] slab_unreclaimable 14880768 [ 547.613240][T19232] pgfault 37158 [ 547.613240][T19232] pgmajfault 0 06:30:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xeffdffff) [ 547.613240][T19232] workingset_refault 330 [ 547.613240][T19232] workingset_activate 0 [ 547.613240][T19232] workingset_nodereclaim 0 [ 547.613240][T19232] pgrefill 578 [ 547.613240][T19232] pgscan 4297 [ 547.613240][T19232] pgsteal 2103 06:30:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8efff7f) 06:30:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 547.822295][T19232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19130,uid=0 [ 547.879457][T19232] Memory cgroup out of memory: Killed process 19130 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ffffff) [ 547.993762][ T1069] oom_reaper: reaped process 19130 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 06:30:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 548.181201][T19229] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 548.229722][T19229] CPU: 1 PID: 19229 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 548.238265][T19229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.248415][T19229] Call Trace: [ 548.251719][T19229] dump_stack+0x11d/0x181 [ 548.256158][T19229] dump_header+0xaa/0x449 [ 548.260562][T19229] oom_kill_process.cold+0x10/0x15 [ 548.265844][T19229] out_of_memory+0x231/0xa00 [ 548.270570][T19229] ? __const_udelay+0x36/0x40 [ 548.275336][T19229] ? __udelay+0x10/0x20 [ 548.279530][T19229] mem_cgroup_out_of_memory+0x128/0x150 [ 548.285210][T19229] try_charge+0xb5c/0xbe0 [ 548.289653][T19229] ? __rcu_read_unlock+0x10/0x3c0 [ 548.294886][T19229] mem_cgroup_try_charge+0xd2/0x260 [ 548.300191][T19229] mem_cgroup_try_charge_delay+0x3a/0x80 [ 548.305974][T19229] wp_page_copy+0x322/0x1120 [ 548.310709][T19229] ? __read_once_size+0x41/0xe0 [ 548.315583][T19229] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 548.321503][T19229] do_wp_page+0x192/0x11f0 [ 548.326029][T19229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.332292][T19229] __handle_mm_fault+0x1ab1/0x2c70 [ 548.337527][T19229] handle_mm_fault+0x21b/0x530 [ 548.342365][T19229] __do_page_fault+0x456/0x8d0 [ 548.347166][T19229] do_page_fault+0x38/0x194 [ 548.351774][T19229] page_fault+0x34/0x40 [ 548.356012][T19229] RIP: 0033:0x40cea8 [ 548.359942][T19229] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 68 2c 00 00 8b 05 62 b1 32 00 48 8b 15 d3 57 66 00 83 c0 01 <89> 05 52 b1 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 548.379552][T19229] RSP: 002b:00007ffde2f6f9e0 EFLAGS: 00010206 [ 548.385893][T19229] RAX: 0000000000000005 RBX: 0000001b32923444 RCX: 0000001b33920000 [ 548.393973][T19229] RDX: 0000001b32920000 RSI: 0000000000001468 RDI: ffffffff3c919468 [ 548.402253][T19229] RBP: 0000001b32923448 R08: 000000003c919468 R09: 000000003c91946c [ 548.410228][T19229] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 0000001b3292344c [ 548.418221][T19229] R13: 0000000000085ca9 R14: 000000000075bf20 R15: 000000000075bf2c [ 548.433660][T19229] memory: usage 307064kB, limit 307200kB, failcnt 1169 [ 548.440864][T19229] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 548.448838][T19229] Memory cgroup stats for /syz1: [ 548.449058][T19229] anon 263499776 [ 548.449058][T19229] file 0 [ 548.449058][T19229] kernel_stack 3391488 [ 548.449058][T19229] slab 17989632 [ 548.449058][T19229] sock 0 [ 548.449058][T19229] shmem 0 [ 548.449058][T19229] file_mapped 0 [ 548.449058][T19229] file_dirty 0 [ 548.449058][T19229] file_writeback 0 [ 548.449058][T19229] anon_thp 241172480 [ 548.449058][T19229] inactive_anon 262144 [ 548.449058][T19229] active_anon 263499776 [ 548.449058][T19229] inactive_file 0 [ 548.449058][T19229] active_file 69632 [ 548.449058][T19229] unevictable 0 [ 548.449058][T19229] slab_reclaimable 3108864 [ 548.449058][T19229] slab_unreclaimable 14880768 [ 548.449058][T19229] pgfault 37191 [ 548.449058][T19229] pgmajfault 0 [ 548.449058][T19229] workingset_refault 330 [ 548.449058][T19229] workingset_activate 0 [ 548.449058][T19229] workingset_nodereclaim 0 [ 548.449058][T19229] pgrefill 578 [ 548.449058][T19229] pgscan 4297 [ 548.449058][T19229] pgsteal 2103 [ 548.552227][T19229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17554,uid=0 [ 548.582294][T19229] Memory cgroup out of memory: Killed process 17554 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 548.667681][T19232] debugfs: Directory '19232-4' with parent 'kvm' already present! 06:30:16 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TIMERSLACK(0x1d, 0x2c57) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x20000e40) 06:30:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xff030000) 06:30:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x700}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x37000000) 06:30:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xfffffdef) 06:30:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:16 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x400c100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)='/dev/kvm\x00', 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:30:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3f000000) 06:30:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xffffff7f) 06:30:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:17 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x184838c4db2e6931, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x5) 06:30:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xffffff8d) 06:30:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x400e0020) 06:30:17 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0xff00}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xfffffff0) 06:30:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x7fffef08) 06:30:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x7ffffffff000) 06:30:17 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40200, 0x0) setns(r6, 0x2000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae64, 0x0) dup3(r7, r8, 0x0) ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000040)={0x0, 0x1, 0x7fffffff, 0x4, 0x5}) 06:30:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x7ffff000) 06:30:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x4000000000000) 06:30:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8dffffff) 06:30:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x1000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xeffdffff) 06:30:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ff7f00000000) 06:30:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ffffff) 06:30:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ffffff7f0000) 06:30:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xff030000) 06:30:19 executing program 1: unshare(0x20000000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x100780, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x20, 0x7, 0x2, 0x0, 0x42, 0x10, 0xeeb1452d7a502fe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x20000, 0x9, 0x0, 0x5, 0x401, 0x3e5c82a2, 0x7fff}, r0, 0x3, r1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r4, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000001c0)) 06:30:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x2000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x100000000000000) 06:30:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xfffffdef) 06:30:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x200000000000000) 06:30:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xffffff7f) [ 551.756066][T19474] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 551.814406][T19474] CPU: 1 PID: 19474 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 551.822874][T19474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 551.832930][T19474] Call Trace: [ 551.836246][T19474] dump_stack+0x11d/0x181 [ 551.840596][T19474] dump_header+0xaa/0x449 [ 551.844941][T19474] oom_kill_process.cold+0x10/0x15 [ 551.850163][T19474] out_of_memory+0x231/0xa00 [ 551.855023][T19474] mem_cgroup_out_of_memory+0x128/0x150 [ 551.860589][T19474] try_charge+0xb5c/0xbe0 [ 551.865032][T19474] ? __rcu_read_unlock+0x10/0x3c0 [ 551.870074][T19474] mem_cgroup_try_charge+0xd2/0x260 [ 551.875296][T19474] mem_cgroup_try_charge_delay+0x3a/0x80 [ 551.881122][T19474] wp_page_copy+0x322/0x1120 [ 551.885722][T19474] ? __read_once_size+0x41/0xe0 [ 551.890580][T19474] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 551.896483][T19474] do_wp_page+0x192/0x11f0 [ 551.900897][T19474] ? record_times+0x16/0x90 [ 551.905415][T19474] __handle_mm_fault+0x1ab1/0x2c70 [ 551.910630][T19474] handle_mm_fault+0x21b/0x530 [ 551.915402][T19474] __do_page_fault+0x456/0x8d0 [ 551.920185][T19474] do_page_fault+0x38/0x194 [ 551.924702][T19474] page_fault+0x34/0x40 [ 551.929469][T19474] RIP: 0033:0x41127b [ 551.933458][T19474] Code: 87 7a ff ff ff e9 09 ff ff ff e8 d0 17 01 00 53 48 89 fb 48 81 ec 90 00 00 00 48 89 7c 24 08 0f 31 48 c1 e2 20 89 c0 48 09 d0 <64> 48 89 04 25 20 06 00 00 48 c7 c0 d8 fe ff ff 48 8d 97 b8 06 00 [ 551.953142][T19474] RSP: 002b:00007fdd6be40d20 EFLAGS: 00010202 06:30:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8efff7f00000000) [ 551.959230][T19474] RAX: 00000128ae87802a RBX: 00007fdd6be41700 RCX: 000000000045d049 [ 551.967207][T19474] RDX: 0000012800000000 RSI: 00007fdd6be40db0 RDI: 00007fdd6be41700 [ 551.975197][T19474] RBP: 0000000000000000 R08: 00007fdd6be41700 R09: 00007fdd6be41700 [ 551.983168][T19474] R10: 00007fdd6be419d0 R11: 0000000000000202 R12: 0000000000000000 [ 551.991222][T19474] R13: 00007ffde2f6f9cf R14: 00007fdd6be419c0 R15: 000000000075c07c [ 552.006616][T19474] memory: usage 307200kB, limit 307200kB, failcnt 1471 [ 552.039604][T19474] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 552.063981][T19474] Memory cgroup stats for /syz1: [ 552.064185][T19474] anon 262057984 [ 552.064185][T19474] file 49152 [ 552.064185][T19474] kernel_stack 3502080 [ 552.064185][T19474] slab 18481152 [ 552.064185][T19474] sock 0 [ 552.064185][T19474] shmem 0 [ 552.064185][T19474] file_mapped 0 [ 552.064185][T19474] file_dirty 135168 [ 552.064185][T19474] file_writeback 0 [ 552.064185][T19474] anon_thp 239075328 [ 552.064185][T19474] inactive_anon 262144 [ 552.064185][T19474] active_anon 262057984 [ 552.064185][T19474] inactive_file 94208 [ 552.064185][T19474] active_file 0 [ 552.064185][T19474] unevictable 0 [ 552.064185][T19474] slab_reclaimable 3108864 [ 552.064185][T19474] slab_unreclaimable 15372288 [ 552.064185][T19474] pgfault 37752 [ 552.064185][T19474] pgmajfault 0 [ 552.064185][T19474] workingset_refault 792 [ 552.064185][T19474] workingset_activate 99 [ 552.064185][T19474] workingset_nodereclaim 0 [ 552.064185][T19474] pgrefill 931 [ 552.064185][T19474] pgscan 5591 [ 552.064185][T19474] pgsteal 3110 [ 552.169916][T19474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17388,uid=0 06:30:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xffffff8d) [ 552.189640][T19474] Memory cgroup out of memory: Killed process 17388 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3700000000000000) [ 552.240602][T19472] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 552.296617][T19472] CPU: 1 PID: 19472 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 552.305009][T19472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.315155][T19472] Call Trace: [ 552.318490][T19472] dump_stack+0x11d/0x181 [ 552.322906][T19472] dump_header+0xaa/0x449 [ 552.327346][T19472] oom_kill_process.cold+0x10/0x15 [ 552.332465][T19472] out_of_memory+0x231/0xa00 [ 552.337174][T19472] mem_cgroup_out_of_memory+0x128/0x150 [ 552.342787][T19472] try_charge+0x7f5/0xbe0 [ 552.347177][T19472] ? __rcu_read_unlock+0x10/0x3c0 [ 552.352229][T19472] mem_cgroup_try_charge+0xd2/0x260 [ 552.357454][T19472] mem_cgroup_try_charge_delay+0x3a/0x80 [ 552.363083][T19472] wp_page_copy+0x322/0x1120 [ 552.368075][T19472] ? __read_once_size+0x41/0xe0 [ 552.372955][T19472] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 552.379006][T19472] do_wp_page+0x192/0x11f0 [ 552.383450][T19472] ? record_times+0x16/0x90 [ 552.388039][T19472] __handle_mm_fault+0x1ab1/0x2c70 [ 552.393181][T19472] handle_mm_fault+0x21b/0x530 [ 552.397955][T19472] __do_page_fault+0x456/0x8d0 [ 552.402714][T19472] do_page_fault+0x38/0x194 [ 552.407279][T19472] page_fault+0x34/0x40 [ 552.411437][T19472] RIP: 0033:0x40421e [ 552.415392][T19472] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d4 00 00 00 85 c0 0f 85 cc 00 00 00 [ 552.435004][T19472] RSP: 002b:00007fdd6be61c90 EFLAGS: 00010217 06:30:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xfffffff0) [ 552.441258][T19472] RAX: 0000000000000000 RBX: 0000000000000564 RCX: 000000000045a679 [ 552.449535][T19472] RDX: 00000000004041d6 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.457656][T19472] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 552.465802][T19472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 552.473769][T19472] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 552.558427][T19472] memory: usage 304920kB, limit 307200kB, failcnt 1471 [ 552.565536][T19472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 552.574286][T19472] Memory cgroup stats for /syz1: [ 552.574452][T19472] anon 259887104 [ 552.574452][T19472] file 49152 [ 552.574452][T19472] kernel_stack 3502080 [ 552.574452][T19472] slab 18481152 [ 552.574452][T19472] sock 0 [ 552.574452][T19472] shmem 0 [ 552.574452][T19472] file_mapped 0 [ 552.574452][T19472] file_dirty 135168 [ 552.574452][T19472] file_writeback 0 [ 552.574452][T19472] anon_thp 236978176 [ 552.574452][T19472] inactive_anon 262144 [ 552.574452][T19472] active_anon 259887104 [ 552.574452][T19472] inactive_file 94208 [ 552.574452][T19472] active_file 0 [ 552.574452][T19472] unevictable 0 [ 552.574452][T19472] slab_reclaimable 3108864 [ 552.574452][T19472] slab_unreclaimable 15372288 [ 552.574452][T19472] pgfault 37752 [ 552.574452][T19472] pgmajfault 0 [ 552.574452][T19472] workingset_refault 792 [ 552.574452][T19472] workingset_activate 99 [ 552.574452][T19472] workingset_nodereclaim 0 [ 552.574452][T19472] pgrefill 931 [ 552.574452][T19472] pgscan 5591 [ 552.574452][T19472] pgsteal 3110 [ 552.703725][T19472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17305,uid=0 [ 552.720325][T19472] Memory cgroup out of memory: Killed process 17305 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 552.860064][T19454] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 552.873267][T19454] CPU: 0 PID: 19454 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 552.881703][T19454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.891864][T19454] Call Trace: [ 552.895183][T19454] dump_stack+0x11d/0x181 [ 552.899495][T19454] dump_header+0xaa/0x449 [ 552.903808][T19454] oom_kill_process.cold+0x10/0x15 [ 552.908985][T19454] out_of_memory+0x231/0xa00 [ 552.913684][T19454] mem_cgroup_out_of_memory+0x128/0x150 [ 552.919385][T19454] try_charge+0x7f5/0xbe0 [ 552.923699][T19454] ? __rcu_read_unlock+0x10/0x3c0 [ 552.928897][T19454] mem_cgroup_try_charge+0xd2/0x260 [ 552.934081][T19454] mem_cgroup_try_charge_delay+0x3a/0x80 [ 552.939795][T19454] wp_page_copy+0x322/0x1120 [ 552.944443][T19454] ? __read_once_size+0x41/0xe0 [ 552.949320][T19454] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 552.955202][T19454] do_wp_page+0x192/0x11f0 [ 552.959616][T19454] __handle_mm_fault+0x1ab1/0x2c70 [ 552.964721][T19454] handle_mm_fault+0x21b/0x530 [ 552.969504][T19454] __do_page_fault+0x456/0x8d0 [ 552.974337][T19454] do_page_fault+0x38/0x194 [ 552.978849][T19454] page_fault+0x34/0x40 [ 552.983033][T19454] RIP: 0033:0x415d03 [ 552.987031][T19454] Code: e9 4c 89 e2 ff 74 24 48 4c 8b 4c 24 10 89 ee 4c 8b 44 24 18 48 89 df e8 cb f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 48 f7 d8 <64> 89 04 25 d4 ff ff ff 48 83 c8 ff c3 48 81 ec 98 00 00 00 31 ff [ 553.006715][T19454] RSP: 002b:00007ffde2f6fa48 EFLAGS: 00010213 [ 553.013818][T19454] RAX: 000000000000006e RBX: 00000000000003e8 RCX: 000000000045a679 [ 553.021848][T19454] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075c07c [ 553.029801][T19454] RBP: 000000000000002d R08: ffffffffffffffff R09: ffffffffffffffff [ 553.037808][T19454] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 000000000075c070 [ 553.045842][T19454] R13: 0000000000086b15 R14: 0000000000086b42 R15: 000000000075c07c [ 553.055496][T19454] memory: usage 302756kB, limit 307200kB, failcnt 1471 [ 553.062560][T19454] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 553.069423][T19454] Memory cgroup stats for /syz1: [ 553.069735][T19454] anon 257835008 [ 553.069735][T19454] file 49152 [ 553.069735][T19454] kernel_stack 3502080 [ 553.069735][T19454] slab 18481152 [ 553.069735][T19454] sock 0 [ 553.069735][T19454] shmem 0 [ 553.069735][T19454] file_mapped 0 [ 553.069735][T19454] file_dirty 135168 [ 553.069735][T19454] file_writeback 0 [ 553.069735][T19454] anon_thp 234881024 [ 553.069735][T19454] inactive_anon 262144 [ 553.069735][T19454] active_anon 257835008 [ 553.069735][T19454] inactive_file 94208 [ 553.069735][T19454] active_file 0 [ 553.069735][T19454] unevictable 0 [ 553.069735][T19454] slab_reclaimable 3108864 [ 553.069735][T19454] slab_unreclaimable 15372288 [ 553.069735][T19454] pgfault 37752 [ 553.069735][T19454] pgmajfault 0 [ 553.069735][T19454] workingset_refault 792 [ 553.069735][T19454] workingset_activate 99 [ 553.069735][T19454] workingset_nodereclaim 0 [ 553.069735][T19454] pgrefill 931 [ 553.069735][T19454] pgscan 5591 [ 553.069735][T19454] pgsteal 3110 [ 553.164800][T19454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17123,uid=0 [ 553.180342][T19454] Memory cgroup out of memory: Killed process 17123 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 553.199795][T19460] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 553.201711][ T1069] oom_reaper: reaped process 17123 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 553.227507][T19460] CPU: 0 PID: 19460 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 553.236008][T19460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.246086][T19460] Call Trace: [ 553.249393][T19460] dump_stack+0x11d/0x181 [ 553.253816][T19460] dump_header+0xaa/0x449 [ 553.258176][T19460] oom_kill_process.cold+0x10/0x15 [ 553.263293][T19460] out_of_memory+0x231/0xa00 [ 553.267992][T19460] mem_cgroup_out_of_memory+0x128/0x150 [ 553.273893][T19460] try_charge+0x7f5/0xbe0 [ 553.278228][T19460] ? __rcu_read_unlock+0x10/0x3c0 [ 553.283262][T19460] mem_cgroup_try_charge+0xd2/0x260 [ 553.288508][T19460] mem_cgroup_try_charge_delay+0x3a/0x80 [ 553.294324][T19460] wp_page_copy+0x322/0x1120 [ 553.298914][T19460] ? __read_once_size+0x41/0xe0 [ 553.303759][T19460] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 553.309648][T19460] do_wp_page+0x192/0x11f0 [ 553.314262][T19460] ? record_times+0x16/0x90 [ 553.319215][T19460] __handle_mm_fault+0x1ab1/0x2c70 [ 553.324422][T19460] handle_mm_fault+0x21b/0x530 [ 553.329364][T19460] __do_page_fault+0x456/0x8d0 [ 553.334176][T19460] do_page_fault+0x38/0x194 [ 553.338685][T19460] page_fault+0x34/0x40 [ 553.342953][T19460] RIP: 0033:0x40421e [ 553.346858][T19460] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d4 00 00 00 85 c0 0f 85 cc 00 00 00 [ 553.367851][T19460] RSP: 002b:00007fdd6be82c90 EFLAGS: 00010213 [ 553.373932][T19460] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 000000000045a679 [ 553.382172][T19460] RDX: 00000000004041d6 RSI: 000000000000ae01 RDI: 0000000000000004 [ 553.390374][T19460] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 553.398814][T19460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 553.406868][T19460] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 553.423277][T19460] memory: usage 300728kB, limit 307200kB, failcnt 1471 [ 553.430222][T19460] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 553.440379][T19460] Memory cgroup stats for /syz1: [ 553.440662][T19460] anon 255639552 [ 553.440662][T19460] file 49152 [ 553.440662][T19460] kernel_stack 3428352 [ 553.440662][T19460] slab 18481152 [ 553.440662][T19460] sock 0 [ 553.440662][T19460] shmem 0 [ 553.440662][T19460] file_mapped 0 [ 553.440662][T19460] file_dirty 135168 [ 553.440662][T19460] file_writeback 0 [ 553.440662][T19460] anon_thp 232783872 [ 553.440662][T19460] inactive_anon 262144 [ 553.440662][T19460] active_anon 255639552 [ 553.440662][T19460] inactive_file 94208 [ 553.440662][T19460] active_file 0 [ 553.440662][T19460] unevictable 0 [ 553.440662][T19460] slab_reclaimable 3108864 [ 553.440662][T19460] slab_unreclaimable 15372288 [ 553.440662][T19460] pgfault 37752 [ 553.440662][T19460] pgmajfault 0 [ 553.440662][T19460] workingset_refault 792 [ 553.440662][T19460] workingset_activate 99 [ 553.440662][T19460] workingset_nodereclaim 0 [ 553.440662][T19460] pgrefill 931 [ 553.440662][T19460] pgscan 5591 [ 553.440662][T19460] pgsteal 3110 [ 553.537579][T19460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16599,uid=0 [ 553.553766][T19460] Memory cgroup out of memory: Killed process 16599 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 553.573536][T19479] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 553.574133][ T1069] oom_reaper: reaped process 16599 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 553.597537][T19479] CPU: 0 PID: 19479 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 553.605866][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.615918][T19479] Call Trace: [ 553.619293][T19479] dump_stack+0x11d/0x181 [ 553.623727][T19479] dump_header+0xaa/0x449 [ 553.628064][T19479] oom_kill_process.cold+0x10/0x15 [ 553.634660][T19479] out_of_memory+0x231/0xa00 [ 553.639534][T19479] mem_cgroup_out_of_memory+0x128/0x150 [ 553.645270][T19479] try_charge+0x7f5/0xbe0 [ 553.650105][T19479] ? __rcu_read_unlock+0x66/0x3c0 [ 553.655225][T19479] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 553.661460][T19479] __memcg_kmem_charge+0xde/0x240 [ 553.668705][T19479] __alloc_pages_nodemask+0x26c/0x310 [ 553.674177][T19479] alloc_pages_current+0xd1/0x170 [ 553.679639][T19479] pte_alloc_one+0x18/0x50 [ 553.684308][T19479] __handle_mm_fault+0x2966/0x2c70 [ 553.689677][T19479] handle_mm_fault+0x21b/0x530 [ 553.694730][T19479] __do_page_fault+0x456/0x8d0 [ 553.699658][T19479] do_page_fault+0x38/0x194 [ 553.704354][T19479] page_fault+0x34/0x40 [ 553.708522][T19479] RIP: 0033:0x45a679 [ 553.712532][T19479] Code: Bad RIP value. [ 553.716730][T19479] RSP: 002b:00007fdd6be61c78 EFLAGS: 00010246 [ 553.722874][T19479] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000045a679 [ 553.739896][T19479] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.754372][T19479] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 553.762932][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 553.772051][T19479] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 553.781769][T19479] memory: usage 300228kB, limit 307200kB, failcnt 1471 [ 553.791933][T19479] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 553.802801][T19479] Memory cgroup stats for /syz1: [ 553.802924][T19479] anon 255504384 [ 553.802924][T19479] file 49152 [ 553.802924][T19479] kernel_stack 3391488 [ 553.802924][T19479] slab 18481152 [ 553.802924][T19479] sock 0 [ 553.802924][T19479] shmem 0 [ 553.802924][T19479] file_mapped 0 [ 553.802924][T19479] file_dirty 135168 [ 553.802924][T19479] file_writeback 0 [ 553.802924][T19479] anon_thp 232783872 [ 553.802924][T19479] inactive_anon 262144 [ 553.802924][T19479] active_anon 255504384 [ 553.802924][T19479] inactive_file 94208 [ 553.802924][T19479] active_file 0 06:30:21 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0x0, 0x2, {0xf0a6}}, 0x18) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:30:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x3000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x7ffffffff000) 06:30:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3f00000000000000) [ 553.802924][T19479] unevictable 0 [ 553.802924][T19479] slab_reclaimable 3108864 [ 553.802924][T19479] slab_unreclaimable 15372288 [ 553.802924][T19479] pgfault 37752 [ 553.802924][T19479] pgmajfault 0 [ 553.802924][T19479] workingset_refault 792 [ 553.802924][T19479] workingset_activate 99 [ 553.802924][T19479] workingset_nodereclaim 0 [ 553.802924][T19479] pgrefill 931 [ 553.802924][T19479] pgscan 5591 [ 553.802924][T19479] pgsteal 3110 [ 553.914478][T19479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16474,uid=0 06:30:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x4000000000000) 06:30:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x400e002000000000) [ 554.113873][T19479] Memory cgroup out of memory: Killed process 16474 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 554.206040][ T1069] oom_reaper: reaped process 16474 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 06:30:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ff7f00000000) 06:30:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8dffffff00000000) 06:30:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x4000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ffffff7f0000) 06:30:22 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000040)='net/ip_vs\x00') 06:30:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xeffdffff00000000) 06:30:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x100000000000000) 06:30:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x200000000000000) 06:30:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ffffff00000000) 06:30:23 executing program 1: unshare(0x20000000) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x800) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000140)={"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"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) dup3(r4, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r5, 0x0) 06:30:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8efff7f00000000) 06:30:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xff03000000000000) 06:30:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x4924924}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3700000000000000) 06:30:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xffffff7f00000000) 06:30:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 555.851350][T19608] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 555.921541][T19608] CPU: 0 PID: 19608 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 555.930445][T19608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.940594][T19608] Call Trace: [ 555.943911][T19608] dump_stack+0x11d/0x181 [ 555.948252][T19608] dump_header+0xaa/0x449 [ 555.952698][T19608] oom_kill_process.cold+0x10/0x15 [ 555.958009][T19608] out_of_memory+0x231/0xa00 [ 555.962636][T19608] mem_cgroup_out_of_memory+0x128/0x150 06:30:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 555.968224][T19608] try_charge+0xb5c/0xbe0 [ 555.972577][T19608] ? __rcu_read_unlock+0x66/0x3c0 [ 555.978173][T19608] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 555.983738][T19608] __memcg_kmem_charge+0xde/0x240 [ 555.989085][T19608] __alloc_pages_nodemask+0x26c/0x310 [ 555.995602][T19608] alloc_pages_current+0xd1/0x170 [ 556.000730][T19608] pte_alloc_one+0x18/0x50 [ 556.005457][T19608] __pte_alloc+0x2d/0x220 [ 556.009948][T19608] copy_page_range+0x151a/0x1a80 [ 556.015503][T19608] ? __read_once_size.constprop.0+0x12/0x20 06:30:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x2, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) [ 556.021803][T19608] ? __vma_link_rb+0x3f4/0x440 [ 556.026666][T19608] dup_mm+0x74a/0xba0 [ 556.030755][T19608] copy_process+0x36f3/0x3b50 [ 556.035538][T19608] _do_fork+0xfe/0x6e0 [ 556.039738][T19608] ? __read_once_size+0x5a/0xe0 [ 556.044792][T19608] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 556.050572][T19608] ? _copy_to_user+0x84/0xb0 [ 556.055688][T19608] __x64_sys_clone+0x12b/0x160 [ 556.061186][T19608] do_syscall_64+0xcc/0x370 [ 556.066380][T19608] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 556.072368][T19608] RIP: 0033:0x45a679 [ 556.076454][T19608] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 556.096357][T19608] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 556.104809][T19608] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 556.113053][T19608] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 556.121040][T19608] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 556.129121][T19608] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 556.137471][T19608] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 556.154659][T19608] memory: usage 307200kB, limit 307200kB, failcnt 1499 [ 556.182237][T19608] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 556.205343][T19608] Memory cgroup stats for /syz1: [ 556.205614][T19608] anon 262086656 [ 556.205614][T19608] file 0 [ 556.205614][T19608] kernel_stack 3465216 [ 556.205614][T19608] slab 18481152 [ 556.205614][T19608] sock 0 [ 556.205614][T19608] shmem 0 [ 556.205614][T19608] file_mapped 0 [ 556.205614][T19608] file_dirty 135168 [ 556.205614][T19608] file_writeback 0 [ 556.205614][T19608] anon_thp 239075328 [ 556.205614][T19608] inactive_anon 262144 [ 556.205614][T19608] active_anon 262086656 [ 556.205614][T19608] inactive_file 94208 [ 556.205614][T19608] active_file 0 [ 556.205614][T19608] unevictable 0 [ 556.205614][T19608] slab_reclaimable 3108864 [ 556.205614][T19608] slab_unreclaimable 15372288 [ 556.205614][T19608] pgfault 38115 [ 556.205614][T19608] pgmajfault 0 06:30:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x3f00000000000000) [ 556.205614][T19608] workingset_refault 792 [ 556.205614][T19608] workingset_activate 99 [ 556.205614][T19608] workingset_nodereclaim 0 [ 556.205614][T19608] pgrefill 964 [ 556.205614][T19608] pgscan 5591 [ 556.205614][T19608] pgsteal 3110 06:30:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x743c166d48fde888) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x400e002000000000) [ 556.474303][T19608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19541,uid=0 [ 556.540103][T19608] Memory cgroup out of memory: Killed process 19541 (syz-executor.1) total-vm:72712kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 06:30:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x5000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0x20000000}], 0x1, 0x30040014) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) 06:30:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x8dffffff00000000) 06:30:24 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x4000, 0x0) write$FUSE_POLL(r3, &(0x7f0000000280)={0x18, 0x0, 0x8, {0x8}}, 0x18) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x8) r4 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @rose}, [@default, @bcast, @rose, @rose, @netrom, @bcast, @default, @default]}, &(0x7f0000000080)=0x48) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1000}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup3(r0, r5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x78) setns(r7, 0x0) 06:30:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xeffdffff00000000) 06:30:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x94a00, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7c, &(0x7f0000000240)={r5, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x40}, &(0x7f0000000140)=0x8) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x434}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) clock_getres(0x5, &(0x7f00000000c0)) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r10, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x6, 0x0, 0x0, 0xfffffffe}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r11, 0x40206417, 0x0) ioctl$TCSETXF(r11, 0x5434, &(0x7f0000000540)={0xffff, 0x0, [0x40, 0x6, 0xa2, 0xa2d, 0x8], 0x8}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r10, 0x400, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x10001, 0x3ff, 0x2, 0xfffffffd}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1000) 06:30:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xf0ffffff00000000) 06:30:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xff03000000000000) 06:30:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x6000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0xffffff7f00000000) 06:30:25 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 06:30:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) 06:30:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x1f, 0x81}, {0x2, 0x4}], r2}, 0x18, 0x2) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0/file0\x00', 0x4000, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xc5, 0xda, &(0x7f00000000c0)="aadb13bbe5c24916de05340c54812c689ac9d93753425140f891660face9019921d12e4ef3b9efc388083081c64cfb944ebbc20d1595836844c935331f305e3b5deccb1e0b3215880138bf83cd4db77785e6b7ae74f212b6c456432332e12738582a03a6fda1e50f9f94be26b7942e3ca79893a4d2e6aa7191032da486c8e8aa96e690d6d7b87bac68a0f8c284078697a9aa390e9d4273cd18d43700d18cb16912606cf46e11f31433bafe2daf1691542069463cd8ae849c62b071e6f991b9b265f4a7959a", &(0x7f00000001c0)=""/218, 0x3f, 0x0, 0x33, 0x5c, &(0x7f00000002c0)="84b3e851c3223f298756d7c932ffd8cfc1771493a8f25317c0e2822b070f9b885387aa60e004defe8c43daa6b286e5c6e89d9d", &(0x7f0000000300)="db28110a02c6bf45786e1bb42f23bff7883c404e6478c3c7bb0c234357dd4ec226ab0fc83cd5a3cd395edcf682e5023fd95b16486063a1a3ddecb783f59ede8d55b5b719469496bfe4fed8c89e8b5c411962a0bb72984e8a6b81f7f3"}, 0x40) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 557.902533][ T26] audit: type=1800 audit(1575354625.674:116): pid=19684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16850 res=0 06:30:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="0b8baef54ebb83ed"}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = timerfd_create(0x0, 0x0) fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r6) getgroups(0x6, &(0x7f0000000080)=[0xffffffffffffffff, r6, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00]) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x2f, &(0x7f0000000dc0), 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r7}}}], 0x20}], 0x1, 0x0) 06:30:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000000)={0x80000000, 0x5, 0x6, 0x6, 0x8, 0x5d}) 06:30:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000001340)=""/4096) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae64, 0x0) dup3(r1, r2, 0x0) write(r2, &(0x7f0000000000)="a3d1860ff2915eaec173bd6bddd55f729a6a2dd4b724dbbeefb21ad204ab998eaaab56ca26f6c726eb87108dec39ab5072cd7ea94dea8a023d04cd04afd7943b44a4c66e6377544e6e0dd8c217aea41c27658bed54d133a91ae8cbbc12f563c25f589730b74db2663170a14ce083d23630f9a424017e8c30eba29f4c2af7c6987034bd9dccc3cef7f08199559f9a2430699ccae2b523efd699e6bb2bb04f5f104d73baad6d05ac3aa4f593863d45047cc17396cc5b97f511f453bc669ef77555f98288afb4", 0xc5) 06:30:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x7000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 558.715622][ T26] audit: type=1800 audit(1575354626.484:117): pid=19715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16815 res=0 06:30:26 executing program 1: unshare(0x20000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/\xe0\xf6}\xf1\xba\x89d_\xf9;\xe8CH\xc5f3\x8d\x1c\xe3\xe4h\xd6\x9f\x93g\xa0\v\x86\x00\x00\x00\x00\x00\x00\x00\x00') setns(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000000)={0x7fff, 0x401, 0xd4c, 0x2}) 06:30:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) mq_open(&(0x7f0000000040)='hash\x00', 0x0, 0x29, &(0x7f0000000080)={0x7f, 0x1, 0x1, 0x18c, 0x10000, 0x101, 0x75, 0x101}) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x16, 0x30, 0xbe}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r4, 0xa08, 0x2, [0x1, 0xf95f]}, 0xc) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000140), 0x5, &(0x7f0000000e40)}], 0x110, 0x2040) 06:30:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x173) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x109200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x2, @loopback, 0xc00}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0xcf9, @empty, 0x80000000}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x8}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x25}}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000}], 0xdc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="77bfa2872a6bf711f90af6be74b87d75616013a5c150b3563473f999be62e12a30c1cbea5ab6a7e91f321041411a436febb55c1c54113918e851ba36257385001883507d6073e686bef534b80c9cec9e42a3304c96e4a8af0997e0f1f40683510c96b83d024b3a32b04f3a60f0b1726cff3bdc4abd47720b4dda6ce5812db2309f8a3b3442bae2612692c09cf22d4270ff6267d8d69c1b2f078a44d0439e233211d164c1de3ac10a8ce8f51ca30121b32f6d2074cd62519b1582a4a1d77f6a151d4431c4b2ddb1f4f0b9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7c, &(0x7f0000000240)={r7, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16=r5], &(0x7f0000000100)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = timerfd_create(0x0, 0x0) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) r8 = getegid() r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) r12 = getegid() r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000000000)=0x20810, 0x4) getsockopt$XDP_MMAP_OFFSETS(r15, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r19, 0xae64, 0x0) dup3(r18, r19, 0x0) r20 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r21 = ioctl$KVM_CREATE_VM(r20, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r21, 0xae64, 0x0) dup3(r20, r21, 0x0) sendmmsg$unix(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=@abs={0x3, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="4dfcf35532095c6832c65a0db8bdd2174391da250df9d6d37043a7bd451dddf6ea8018caaaac2b758c3729004e5d922225455863eeef066becda4bfa843f794e9a1a9fe4b146c8f88e11c031b9f5e457fb335fdd30429fa3fff1fc271acfe04c2f04becab63a2d3623a6468b9065a2b9c52748db01b5f29343498e60267e", 0x7e}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}], 0x3, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}, @rights={{0x28, 0x1, 0x1, [r0, r17, r1, r0, r19, r20]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xc0, 0x10}], 0x1, 0x0) 06:30:27 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(0xffffffffffffffff, 0x21bcd65349d2bd54) 06:30:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x8000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000000)="86bc92e5e88443ce42df480901c3ddf4f4c429a4974916ec3f9340087a445754b777b2b8a10eb39e9b60ebfa2c20d07597536e45a4a6718f6c6677f2c86e077377cb2fd0017c90bcfdc1347f6c01acf4401d6c77f798d2eb", 0x58}, {&(0x7f0000000080)="d79064c779fcb1ac7b9d4b046ba63e4eb40415414510a765f1ec3f547f8fc5277bce9518d66c41103c4e7d25235ba137f6889c759f552239ed90c4ffbf51ad6e7e10ee552c2641d00492673478f75e02cc7c87eb88795da776a9c93b283dfcac22fa4936e09ab12fc5d5da4f38d7ffcc3a5305d8475e1fa0154d245ae57349e75fbc33ead56bf887af4f3bc5ed43ce49ee79382366d647ad9a6e86793b6566b1842b47be3f6d5f0b9ea9d05ba8194985901bda3849bebfb543287bf89b9d8eaad90ac509b735b5", 0xc7}, {&(0x7f0000000ac0)="9192fdaf4d3eb14cdba77045b34d0a36ec58fc7ee24037bb2a57de34e6ba094525e79c2e3b36bb20d2a234aef141beada601bafd4ba3566b2c815b1a8192adc11cc485acfa08ea887a63162ae9965cc5afb7ca9b8135aae4ed318aa8d730ae282f0b971f25abdb63a42214caa73202e07cc7f180381d7b119ef17b0fb349b02c3f7953375a20b03346d17a7e700667bf5324f1fa20884f972d3bdf758bd52523e9e437", 0xa3}, {&(0x7f0000000300)="35d652a7925ce90b98e5a37fa3139a6b60d057b51a6290c091510c1e390ab671ed4a02e8541d4174bd6984e45e646635878d2c27fb62e6ff0b4396a5de993277a5993b3c616bff695449939290ef866fdfd080002ae54f58c680383a362196fa14c653d720323eb7cee4bd6f419d8018d7ce2241fdcb9deffc73aabe39c1ccaaf605b4133f1eae40045278014b06aa", 0x8f}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f00000003c0)="2730bec9a76f7af11a1b36b9a08ae8ccc0994bc10a8a9a5ceb7840c678d60de740502395212ddd6a7f714497998e46b2dfa480136f5ff36d3cc3ce6503949d8e0dae1b10e33a99e661b8c6c3a7190383d456fbab3d325f9aebeee3fcec5105662b15ec7d3777e5b8cb64afc5acc968dc20ad6258750ed14d0afef8b9ad62ac2d5f455d35", 0x84}, {&(0x7f0000000c00)="62b5bf648f00a1b34667e2165b99f87aa9f52d842296a1924f0fe9af5663e78f759f22e6fbd88798bf64c5e88df78a7c05b0e782f432519f12d97a32185188963ac67200d5478dc139fa2cac6d42b89146a4898ab576b29595aaead68d9034de350ad9af67f4189fde9c0c7a133977b388d5a34fa8a7ca58ede5c24227faf7837e146d9f910c2f312efd0600d6fd32f085f29f2d477c12747904b1abeb51f4622a0aae3be1f6981db034fc4f3a08b1352d20ed77473729ada0fb1cd660090000001fa38e7b2dfb5e5e67f6f0992dbe87ba8c2b727788d55aeed9bbd6d6430b9fa863fb0cd9743e1fbf3c583ae8e47cbeb250b51d9060ad2ff533963fe16049a42cccb04f56c464a82df6592c30138689fdec14bd32a8", 0xd5}, {&(0x7f0000000580)="b8bfd4f1005449b3ea554a59e2a74b697af9b1915fbda6bfc0034f126a9d186a7d05e93b64a739f4bee6911fa8df60a98054938e699d8f1ac4367e0e0a3ca7874ac61aa5e11d713aa3582fb081d11b585584b6829b7239dc6db8250f2708f6b1ed0f445d9b19305fee38db301492ba6567211148f518b7804f209405dc45812be7a2ae8cc1f934dc51f03fe545f98c8337e103148b59969e751ff38af3aa45dc677945ecd3c869854277f044d28d57e7924f75ecc4b6c009eb42ba0caa6e5ebdbc13a6b3fb4e634200b1477c6bccee22347c5f74ea8cc00e2480ac5636013ac4", 0xe0}, {&(0x7f0000000680)="bf58eab4e4deabd3b781745b1d255f84f8b51117e2c79b9e70af058980858e26bf9709a7afa2d5c3e41302e7dea1510b96fc8aeea59e629611d1b8b432a9cb1c47b38c9b103e3248e6abf9e3cb492285fdabc39aa63181b4f6223d7ceeb62f6fa471a437767c7dfd42b5243f2b5ca1c1c5e2147d0b25923c2b9dd3d682836a7033ba1358f1a7d268ebbcf071d3d29b729cd2aaea7d6aec3195dd763ee7c4ac7f47eda3ee19360e8523067df9c893c9b80926b974ded27e74627be78cdb932190597772e80b3e9806ee", 0xc9}, {&(0x7f0000000780)="04412c62d3e45d446f3629f9e576232c69c10d828e3e4d4cfad05d439053383098b8e9bf14f5b3dfa9e6893bfcf31e6283cc1f53cf051e6bf518fe2f144b4ea11861", 0x42}], 0x1068, &(0x7f0000000e40)}], 0x1, 0x0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="7cde36b77d8c8ffcbdc9f92ca242030a61267660e253fcf7e8f0ec19b04c9e77076ad66566a51b564f65c2c8302ba990", 0x30, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r2, &(0x7f0000000940)='ceph\x00', &(0x7f0000000a00)={'syz', 0x2}, r3) [ 559.953531][T19813] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 559.977478][T19813] CPU: 1 PID: 19813 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 559.986328][T19813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.998257][T19813] Call Trace: [ 560.002466][T19813] dump_stack+0x11d/0x181 [ 560.011169][T19813] dump_header+0xaa/0x449 [ 560.016086][T19813] oom_kill_process.cold+0x10/0x15 [ 560.021996][T19813] out_of_memory+0x231/0xa00 [ 560.028471][T19813] mem_cgroup_out_of_memory+0x128/0x150 [ 560.034752][T19813] try_charge+0xb5c/0xbe0 [ 560.040784][T19813] ? __rcu_read_unlock+0x66/0x3c0 [ 560.047709][T19813] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 560.054826][T19813] __memcg_kmem_charge+0xde/0x240 [ 560.060750][T19813] ? __mod_memcg_state+0x9a/0x120 [ 560.066594][T19813] copy_process+0x11d2/0x3b50 [ 560.071555][T19813] ? record_times+0x16/0x90 [ 560.076825][T19813] ? psi_task_change+0x1ad/0x2d0 [ 560.082249][T19813] _do_fork+0xfe/0x6e0 [ 560.086349][T19813] ? preempt_count_add+0x48/0xb0 [ 560.091750][T19813] ? blkcg_maybe_throttle_current+0x472/0x610 [ 560.098198][T19813] ? percpu_ref_put_many+0x78/0xc0 [ 560.103758][T19813] __x64_sys_clone+0x12b/0x160 [ 560.109352][T19813] do_syscall_64+0xcc/0x370 [ 560.113903][T19813] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 560.119886][T19813] RIP: 0033:0x45d049 [ 560.123878][T19813] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 560.145538][T19813] RSP: 002b:00007ffde2f6f918 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 560.154806][T19813] RAX: ffffffffffffffda RBX: 00007fdd6be62700 RCX: 000000000045d049 [ 560.162771][T19813] RDX: 00007fdd6be629d0 RSI: 00007fdd6be61db0 RDI: 00000000003d0f00 [ 560.171568][T19813] RBP: 00007ffde2f6fb30 R08: 00007fdd6be62700 R09: 00007fdd6be62700 [ 560.179743][T19813] R10: 00007fdd6be629d0 R11: 0000000000000202 R12: 0000000000000000 [ 560.187982][T19813] R13: 00007ffde2f6f9cf R14: 00007fdd6be629c0 R15: 000000000075bfd4 06:30:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x24340, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 560.267627][T19813] memory: usage 307200kB, limit 307200kB, failcnt 1732 [ 560.292705][T19813] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 560.323545][T19813] Memory cgroup stats for /syz1: [ 560.323757][T19813] anon 260767744 [ 560.323757][T19813] file 77824 [ 560.323757][T19813] kernel_stack 3575808 [ 560.323757][T19813] slab 18915328 [ 560.323757][T19813] sock 0 [ 560.323757][T19813] shmem 0 [ 560.323757][T19813] file_mapped 0 [ 560.323757][T19813] file_dirty 135168 [ 560.323757][T19813] file_writeback 0 [ 560.323757][T19813] anon_thp 236978176 [ 560.323757][T19813] inactive_anon 262144 [ 560.323757][T19813] active_anon 260767744 [ 560.323757][T19813] inactive_file 208896 [ 560.323757][T19813] active_file 0 [ 560.323757][T19813] unevictable 0 [ 560.323757][T19813] slab_reclaimable 3108864 [ 560.323757][T19813] slab_unreclaimable 15806464 [ 560.323757][T19813] pgfault 38610 [ 560.323757][T19813] pgmajfault 0 [ 560.323757][T19813] workingset_refault 1122 [ 560.323757][T19813] workingset_activate 99 [ 560.323757][T19813] workingset_nodereclaim 0 [ 560.323757][T19813] pgrefill 997 [ 560.323757][T19813] pgscan 7011 [ 560.323757][T19813] pgsteal 4502 06:30:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 560.454580][T19813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19538,uid=0 [ 560.505088][T19813] Memory cgroup out of memory: Killed process 19538 (syz-executor.1) total-vm:72712kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 560.639978][ T1069] oom_reaper: reaped process 19538 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 06:30:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x10}, {0xffffffffffffffff, 0xc16c8f8b1d6e46e4}, {r2, 0x2400}], 0x3, 0xfffffffc) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000300)=0x0) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r12) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae64, 0x0) dup3(r13, r14, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae64, 0x0) dup3(r15, r16, 0x0) r17 = syz_open_dev$media(&(0x7f0000000880)='/dev/media#\x00', 0x5, 0x0) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r19, 0xae64, 0x0) dup3(r18, r19, 0x0) r20 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r21 = ioctl$KVM_CREATE_VM(r20, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r21, 0xae64, 0x0) r22 = dup3(r20, r21, 0x0) r23 = creat(&(0x7f0000000b40)='./bus\x00', 0x104) r24 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r25 = ioctl$KVM_CREATE_VM(r24, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r25, 0xae64, 0x0) dup3(r24, r25, 0x0) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r27) r29 = getgid() r30 = timerfd_create(0x0, 0x0) fstat(r30, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r31) r32 = getpid() sched_setscheduler(r32, 0x5, &(0x7f0000000380)) r33 = timerfd_create(0x0, 0x0) fstat(r33, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r34) r35 = socket$inet6_dccp(0xa, 0x6, 0x0) r36 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r37 = ioctl$KVM_CREATE_VM(r36, 0xae01, 0x0) r38 = ioctl$KVM_CREATE_VCPU(r37, 0xae64, 0x0) dup3(r36, r37, 0x0) r39 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r40 = ioctl$KVM_CREATE_VM(r39, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r40, 0xae64, 0x0) dup3(r39, r40, 0x0) r41 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r42 = ioctl$KVM_CREATE_VM(r41, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r42, 0xae64, 0x0) dup3(r41, r42, 0x0) r43 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r44 = ioctl$KVM_CREATE_VM(r43, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r44, 0xae64, 0x0) dup3(r43, r44, 0x0) r45 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r45, 0x40206417, 0x0) ioctl$VIDIOC_EXPBUF(r45, 0xc0405610, &(0x7f0000001580)={0xc, 0x1, 0x1000000, 0x0, 0xffffffffffffffff}) r47 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r48 = ioctl$KVM_CREATE_VM(r47, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r48, 0xae64, 0x0) dup3(r47, r48, 0x0) r49 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r50 = ioctl$KVM_CREATE_VM(r49, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r50, 0xae64, 0x0) dup3(r49, r50, 0x0) r51 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r52 = ioctl$KVM_CREATE_VM(r51, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r52, 0xae64, 0x0) dup3(r51, r52, 0x0) r53 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/video35\x00', 0x2, 0x0) r54 = getpid() sched_setscheduler(r54, 0x5, &(0x7f0000000380)) fstat(r38, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r56 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r57 = ioctl$KVM_CREATE_VM(r56, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r57, 0xae64, 0x0) dup3(r56, r57, 0x0) r58 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r59 = ioctl$KVM_CREATE_VM(r58, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r59, 0xae64, 0x0) dup3(r58, r59, 0x0) r60 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r61 = ioctl$KVM_CREATE_VM(r60, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r61, 0xae64, 0x0) dup3(r60, r61, 0x0) r62 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004340)='/dev/hwrng\x00', 0x40000, 0x0) r63 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r64 = ioctl$KVM_CREATE_VM(r63, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r64, 0xae64, 0x0) dup3(r63, r64, 0x0) r65 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r66 = ioctl$KVM_CREATE_VM(r65, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r66, 0xae64, 0x0) dup3(r65, r66, 0x0) r67 = getpid() sched_setscheduler(r67, 0x5, &(0x7f0000000380)) r68 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r69 = ioctl$KVM_CREATE_VM(r68, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r69, 0xae64, 0x0) dup3(r68, r69, 0x0) r70 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r71 = ioctl$KVM_CREATE_VM(r70, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r71, 0xae64, 0x0) dup3(r70, r71, 0x0) r72 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r73 = ioctl$KVM_CREATE_VM(r72, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r73, 0xae64, 0x0) dup3(r72, r73, 0x0) r74 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r75 = ioctl$KVM_CREATE_VM(r74, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r75, 0xae64, 0x0) dup3(r74, r75, 0x0) r76 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000004580)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r77 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r78 = ioctl$KVM_CREATE_VM(r77, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r78, 0xae64, 0x0) dup3(r77, r78, 0x0) r79 = dup(0xffffffffffffffff) r80 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r81 = ioctl$KVM_CREATE_VM(r80, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r81, 0xae64, 0x0) dup3(r80, r81, 0x0) r82 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r83 = ioctl$KVM_CREATE_VM(r82, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r83, 0xae64, 0x0) dup3(r82, r83, 0x0) r84 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r85 = ioctl$KVM_CREATE_VM(r84, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r85, 0xae64, 0x0) dup3(r84, r85, 0x0) r86 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r87 = ioctl$KVM_CREATE_VM(r86, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r87, 0xae64, 0x0) dup3(r86, r87, 0x0) r88 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r88, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r89) getresgid(&(0x7f00000045c0)=0x0, &(0x7f0000004600), &(0x7f0000004640)) sendmmsg$unix(r1, &(0x7f0000004740)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="1be61d977bb05c8c71104a3ddd90cc6ca0a4115fb9819addb1d12a18f22f16f02dd6eeabfcac8d1bf33a304df8d3b4a0d961e5507350afa4a21aa9732dccc90a18c24cd17d5f3f25a2f7292c4f641d682cfecb86225ca8d691271fd9a63784b6184d410a19441a940e04aba088689dcf9df6e0f3709b3a820862af0d87ea69825b35bbf62aab50"}], 0x0, &(0x7f0000000400)=[@cred={{0x0, 0x1, 0x2, {r3, r6, r8}}}], 0x0, 0x41000}, {&(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="2bb5ff07485460586072c634e2f52203a2cad36c5af701586b72cee20c9f25929192255062b9f619a3e7a22e1c16ab9c67cce4da34e7fedeb9586ca919"}, {&(0x7f0000000500)="59dd445c613b96875d296a79072347ab7b85b2de7745f5b9f87ecc3b63aad9ed87e7a35706155d05cc2512a474504f0e4cf005b87ac73b80d00c53675effdd55372327d598b742ecb3e4ba75938e94e25a7afc66304c34be7f645b3a87305c0d3181324798ff5e453630d919f487d88c3d2a46c1f5f7cd60abec4da364981bef33b764"}, {&(0x7f00000005c0)="fc558ab7eebb2e9dfa7b6d4b47def6cfa6a075dfa1457cb1a93adff5ac62cf77698f716a75c93a42ea067cc6224d4c926d95d9ba08656664e60e7e9f4215a318b8205275060defb7e94e5730579db989ef41f905c58d451d1f2c027b0f291b47bf315617d22392c9b4ae9d9d4ea0af9665a1992e3d8f37cd461f0c281603494cd13dd63269f909878f66b9ad687c4d37b9ffffc5b80aa15b8c8a55c5dc9afd241fc8b7ced25ff6190b3be58dd153e10d2b53239e2b086cd3dd34cac6f161bcf7d00ec07eda50fa4af7d073632d424f52"}, {&(0x7f00000006c0)="901fc90285429c0dee8f818ce51458e5a4846af44fa399719c5a8941ca4be877995e851cbc"}, {&(0x7f0000000700)="5f3756df62f3afdcc81fca37cd60c7e19311fc"}, {&(0x7f0000000740)}, {&(0x7f0000000780)="81cd2b3b2a3ed0ac6e726621d6914ea0e6aa716a16a7c93e04f3bd7650da4cf94d43b41f451365f6a631f119c842922755aa5fca4626fd8c7f6c43cf14b3e2bfa08ff19e203e4c5ec0589d41780b31fd3607b7ca"}], 0x0, &(0x7f00000008c0)=[@cred={{0x0, 0x1, 0x2, {r10, 0xee00, r9}}}, @cred={{0x0, 0x1, 0x2, {r3, r12, r7}}}, @rights={{0x0, 0x1, 0x1, [r13, r15, r4]}}, @rights={{0x0, 0x1, 0x1, [r17, r18, r4]}}], 0x0, 0x20000040}, {&(0x7f0000000a00)=@file={0x1, './bus\x00'}, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a80)="6af67c3ea788c093edcf37f5a98e89cbd16898eb7ebf0eddd2c36b698be486e0fe9f96eb6b89fbd6abc62fc2716071c702b8a1e9347a5ecba6ba258de9b8a2f2c6cee736aa416d1fb69c270503e75b63569acd87641a5f229cdea80ef12c53f351fdad60d56d5f33a19c64848df7f0c040d604d4ec72329119aa8e0f467cb7ac63a4"}], 0x0, &(0x7f0000000b80)=[@rights={{0x0, 0x1, 0x1, [r21, r23, r0, r24]}}, @cred={{0x0, 0x1, 0x2, {r10, r27, r29}}}], 0x0, 0x20000001}, {&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e20}, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="6558b1b7acccfd3f70711cf28c0b9cc56ab73b05e167699f8d11832afd73c0ed19e78c68bc96016fe7780b07d92c90e29b8423b103a5fad192f1"}, {&(0x7f0000000c80)="d6bc721fd191a36e9265b3159607de39ee"}, {&(0x7f0000000cc0)="813bb13073a5736be20b8179468983a8493fe18ee733d140fbe32b385ed2c1bf02799f1cddeec308a6a247e5ae0120972531a4415ef75f20f3930dc844eecccaee6943a8be9de51c06c90fb24df5d602cd938f3ddc3d0a145c57189b089eb98ac452b86378c4175137d046257c22dbd4cdc0280b026e5060e56fb6fffca80e735a240b8756e289390d470c0a0de71330341e2e43fa5f241c05dace278d78e81981c9c3added1a8c3bab9358fecd7bf3a64f36f3c2ad8bc5a87421b77cb24538e079a1f5ec5e49e2c"}, {&(0x7f0000000dc0)="ae84ff532693209898528255b7ef697d848063426fc5e7a56f8fbad30771b7e5f4e404d96f8ef355d7633bcaaf9062"}, {&(0x7f0000000e00)="784374bbe1d9715706384ce41916ffe72c40bb6cbc1c8b9f03a9947803d8251bd31982d2481e8fa16e9f76390154c325d31d5b4bfd12e05f24c247cf7f6a30e5da541882bcd12fa0eb89a548477159867de0b0591eb4fb8f47eebb4a0552f8ed1b7122e82f8e9fdf8cd12e390c5f37d3e464"}, {&(0x7f0000000e80)="f4be4d7c90186a24d6b792a2382406943ee96a0e0fca99c74d13b2079393fd01fac9af01d806e13d7d07a127f3a8c1872c045537f1d7ea035546fb3edddc92e977c4e66dbe8c0505cba303ab9baa580691001fb5943a70ab71b315daf35ab1", 0xfffffffffffffe93}, {&(0x7f0000000f00)="6ebd28bbe922e7db6fe05db23bcdbf2646f6542eae097bf62143bd87"}, {&(0x7f0000000f40)="cc5174e26514c5037fc774aa4b3d4dca2fd1a8107b85aae597bbadde9c25738da66f9777a969d7a6219bad96f8f7719d83f43e91ba18a2014be509ec000f3a04b5901155178140db8053086fa27ffd00b8da30b6b41c7e9041ec58f926a9262a639453001fad2781605f244562eb0a4e28a003b3d0c6cb7e"}, {&(0x7f0000000fc0)="c4bb62cabe75d3b0cccc116544be0a95a367b32e7bd1ad118436bbb20985b9b33a5e56aad59ce1ca2f025ea68f92017ed281fd41a9b867951ddfcff1f0cbfd7729c13c50c408425f4b4e2f039e5de4b5c9a22e4b4cef88febff65d4b2a47c5df7f686a8011946f6f157aa927ab6e5b244e"}], 0x0, &(0x7f0000001100)=[@cred={{0x0, 0x1, 0x2, {r10, r6, r31}}}], 0x0, 0x2}, {&(0x7f0000001140)=@file={0x1, './bus\x00'}, 0x0, &(0x7f0000001480)=[{&(0x7f00000011c0)="27eb8f8fc73a5f617e2f7a9d2b914cadad3782fc2c04c1ff0526487a15debbcd3c6f4377507095c79537982729ee22ee2e37e3c548448cab5119a88d311bc73f6893f082d44ef64b552de4737883694c67f7d1d05de20859fdaad3ed6d0adb06216e79e5658f46ffb42ca970ed76d807271cf8242fb8503204bb238cb90a6ea0922980b1835bf15e55626fcba360065d4f192378235195a437553c63cab15c050c4fedece544e7ca6c31a522aa41fb0eb6e073445bb4d4e5f685222d4f2c1044886906804bf14b075a7dfa2faf29275a1aab0e4566ab478677027c5d5ca070455c0538c10ba2deed4977e047c58dce3096a163a0a1"}, {&(0x7f0000001340)="534b7026a88bb01b6ea523a63b9bb857418ecac4ab09c9751959e384eef8178adbbb9c0744aa2135b6f80c9b834b7431680816f73cb211a73dbf7476190ec2c017eb2bb678db5c6b299f9090e28c7c8b13bbe559239dfc5267b47b79b5776f6db4d12f91"}, {&(0x7f00000013c0)="b26b4866fc05256a0a9dbcede6bc19d6e93e71c0c754a88de504505cbab49079f6bd5ad027dcefaa1e255ad3619ac1ac0510cc7dc9c7b4b18468bb66eb6c29eb6bfe1e9defd08077632b7546f2190d1b4c6839d0e7669a75bac73d2dc77ad25dae7c916261c6a1cda48c17e6e7c2e0e314abf76587ce548126c2ec64e3cedbc3b46927e6eb896041b81b1e20a46ebfc1ec4707c5b8b7e0b3c9bde8c966639a97b3eb34ba6dec15feb79799a27ca6b5c26a42dfcc7616ec"}, {&(0x7f00000012c0)="cc145123e6d6a4f885cd12e144d92a2b"}], 0x0, &(0x7f0000001600)=[@cred={{0x0, 0x1, 0x2, {r32, 0xffffffffffffffff, r8}}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, r6, r34}}}, @rights={{0x383, 0x1, 0x1, [r35, r36, r40, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r42, 0xffffffffffffffff, r19, r43, r46, r48, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r50, r51, r22, r53]}}], 0x0, 0x20000000}, {&(0x7f00000016c0)=@abs={0x3, 0x0, 0x4e22}, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001740)="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"}, {&(0x7f0000002740)="1677f48fc13ac3fef23bba95a68c2be497c4b4a727afa169acfdc7f5a80f2c153f5e270c62b4faafcccbd9df34f066d8e528bc4376f8524d92ffec38e1f057f6e4a6ffc7abe366849bc0f41b77aa38a4782bd11748e6905f606543a0956691346f6e53e26f9790c4aa5464f632d0982676fbf3c45486b63946838fbc68b89656964817dd11e571a97edfbefd1db1"}, {&(0x7f0000002800)="966026c3f56b3bfc817c3048126f73e30316aa15ec5c7a76d5ea3e680b6a29be8abaa2e18e45cc063cd039f58487649f0f7f56c7d1103e45c022f5b0886c9f4d3e136218a36b1070b10cf836c9f40eb01204c7d21fb8c90aedddc7b8508e579d8385b29f08efd791d95f81c4ffd67bf44f83e9cacd9bcd437b44e168b7294e65fb2b91d14fb1674ce8321ae42932497f3ff37299e97ef559d2f28dea62570056214cb95c6ad1e42a486f79f0bf68f87f12dc6e6582a36dc967"}, {&(0x7f00000028c0)="db5f47c2e971b7d17c49daefa38734af639dc6740c716345818ad2c9c954befeb64584"}, {&(0x7f0000002900)="7954718e190d7a0779ab4a3417b97c183d6caae6bd49abad19b4e1443eca9cfd8e7816b61bc26a6abf828d5829218bde28939b1b501f2bd4c2bc82026ccbc7fa2ab4fac9945af3af6d05a65d31632546bc8f0e1718e72ec84703b5169fff140c1ab440c30d391afc25cdd247c27d3dc8400a2ab129a68134f29f376e537b8c7b040caea0d101291acbb487e25401e01fe5ac88e474075480663bdbdeb434248e3e52"}, {&(0x7f00000029c0)="1eb54755b3417ab486126fecbd11c3b2f31fd63802f973d7f33a210c4ac333fbb00df27e3f9bb331812ed0ecb36e428454471a06e7984cac3d490c2c6117e7744731990d9aa16a75beb77932f1957b3b16"}, {&(0x7f0000002a40)="c0da47358a28b39812e7eb37d091befcce2acc85e283c1052e4e205ae4e75a3b6912221a3f75bf8e35bff779bc36"}]}, {&(0x7f0000002b00)=@abs={0x0, 0x0, 0x4e22}, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b80)="260e23fa7bb663cb6a284db672da1ea969c245be73e9bfe9e13d9eccd42d56ea9a4345475e9c77eb31ff990bace816f11dff26ea42edf71719d6f18c0158de638b367665adab23b17d050eab5157923691f1692817a7eb6882d71fb0a1dfbc830074f154eab0d88e76ebc33f7ec3b37b550f62d5881140abf7de1fe1c7f29974888f28213463ff170c02f60723eaf802f42b028d3ee88dd4abcecef250b407e16ff4a2"}, {&(0x7f0000002c40)="b3c8df06be1341fbc032d7f9fde42aef8c1201c4c4f0d070e9484a81a3fdc82348c41d57f324c7757d9a4c8291dd440ac21ea85f252b23a72f3c1e6fff324ba354604bfbd10ba22d1ce32510d82cc0e0880c086a68539b1356813526baba"}], 0x0, 0x0, 0x0, 0x5c5f494531146044}, {&(0x7f0000002d00)=@file={0x0, '.\x00'}, 0x0, &(0x7f0000004240)=[{&(0x7f0000002d80)="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"}, {&(0x7f0000003d80)="dbbe92113803c785672d643ef2298e74f16209612df27499e88add1c62dbe23acf5d63d278ffccc9b2f9b33d68ddd3f763bc84ad003885a3eb41e55b43b70d8543a8a25955b9ceae3ea5327930a5dfe3ef8a653e5603814e5c3b6381926299948a55045f5826a9b452f8b75e7ba1adaa63468eadbb44674919e7aee98ac1cb8f4504292a4be015d09c705cf2c257142db5e110131da5183138c79b2641d85ea49cc92d8eb5afdb5e3d7c02a5215baffacd0b96d2b5024d8506818a36810c1604246cc186ac81e7c7995a0a433771475768"}, {&(0x7f0000003e80)="711bf218bd1ec74725ac791e92bf39188828e5e11f716d1f33d6c46f4a987ea484dca419497f0de6636b4c41ab4e58ada86d729e8a89afcd590ef0dc01f0da0d1615e77ce54252adc0aecf28fc3f1d318b95ba502671765bd71371d9328c254948f49e1d3ccdca9beb6cdfd5716b8236778f1b7fca9cc53a91dc3699ce794528ecfa39155b552717aa0e8fea79c7831975d09dd6486e564862aa768c9dcfcbcb20ff1b7c649708d2449d856dd546fcbeec78039543712d368b7a89383ba6f8", 0x12c}, {&(0x7f0000003f40)="ecef245d9c833040c513e14300b2a480b1e23aeab040c19cf9856f477d8a0fec8db15d535bc5be0d28ea1e91b7ac7dbcc98f2388b50500af69b7d4b1d071c0a266753078333fc33ca9ecb1938b"}, {&(0x7f0000003fc0)="3ed180f1e8acd0198374c3f7c3af75e05c703a4cdd5a5a346405eca1fa1323b3260c3e5e5409189d9b3af934bf71902bcf0ea195222520b484dc95f16e98a6e2fd9ba3221dd6ba6467768deddd8c1e85029ae5fcc464b5090fcec0fe9b06eb01fa93d9c40de8ae8e7745cf1dd1889721b6c2d0f691f88171ae1257618b7e2cb480a142c0941a403983804c8228b00cea698561258ab82444e546e900a143caecc9cd7617d571b01795e82a59f3fcf7721ceed628cc70ee99ffcce1deff4da9f9fb2a9557d7cd281023b59e478256b626cf0e1d9e6c43a25a3083da74a7d6b0b8a1e0a915b2d7666cb78b30ac3f72f0e505e277d2723fc7cc3e"}, {&(0x7f00000040c0)="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"}, {&(0x7f00000041c0)="2cebf47a4854a408fdb951047a54b4ee07683ec5976082109c365ceb4ba2ce754b2ad08d66624a5cd9c57eb32d67bb7b9465ec019cee4802b00cdef44cc4c72ff16bde005cb642ce95857fe57770762c7b0e58ed22e29ceb9c954054bd808c2c42d9f26a7baba2173a5c06"}], 0x0, &(0x7f0000004380)=[@cred={{0x0, 0x1, 0x2, {r54, r6, r55}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r57, r58, 0xffffffffffffffff, r61, r62, 0xffffffffffffffff, r64, r66]}}, @cred={{0x0, 0x1, 0x2, {r67, r6, r28}}}], 0x0, 0x2000c000}, {&(0x7f0000004400)=@abs={0x0, 0x0, 0x4e20}, 0x0, &(0x7f0000004540)=[{&(0x7f0000004480)="c19e83035427e2af8436913f87227b1b0a82e9d634dffd2b9be4781114d9aa5898ab05968e6bdda86d9bb9e6492016903c9acdf6afa6c15ec6cc76e6aed7a4bb8ace5bce100a47b358adbfbd10ef9fce334e63cdb5c59cfb26d1975ccf1ec121f5a39f762b1717795c33a3ef6c214cd89a5ac7e7f4a3d2b5a2f3e438ba9523cfbd"}], 0x0, &(0x7f0000004680)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r69, 0xffffffffffffffff, r71]}}, @rights, @rights={{0x0, 0x1, 0x1, [r73, r75, r76]}}, @rights={{0x0, 0x1, 0x1, [r77, r79]}}, @rights={{0x0, 0x1, 0x1, [r80, r33, r82, r22, r84, r86, r4]}}, @cred={{0x0, 0x1, 0x2, {0x0, r89, r90}}}], 0x0, 0x4c004}], 0x6e, 0x8050) r91 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r91, 0x4008af13, &(0x7f0000000040)={0x1, 0x8000}) 06:30:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x24499204}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:28 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1ff, 0x40) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:29 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_GET_FP_MODE(0x2e) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000000c0)={0xb, {0xffffcf25, 0x42, 0x4, 0x3}}) 06:30:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0xff000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 561.885169][ T26] audit: type=1800 audit(1575354629.654:118): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16921 res=0 06:30:29 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') getitimer(0x0, &(0x7f0000000000)) setns(r2, 0x0) 06:30:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0xd7) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x3c53351d2e0533cf) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, @hci={0x1f, 0x0, 0x3}, @hci, @in={0x2, 0x4e24, @empty}, 0x7, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000000c0)='vcan0\x00', 0xfffffffffffffffe, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'eql\x00', r6}) [ 562.282376][ T26] audit: type=1800 audit(1575354630.054:119): pid=19901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16898 res=0 06:30:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x3, r2, 0x1}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 562.584093][ T26] audit: type=1800 audit(1575354630.354:120): pid=19921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16900 res=0 06:30:30 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) getpgrp(r4) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/pid_for_children\x00') r6 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, 0x0) setns(r2, 0x2000000) 06:30:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, 0x8) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000240)="f996c29e6a53d22f6d0542d0f9ed1a79bd4731e66ca88a1787825afa4e328e09059d343585b11867e708b0f06bacd41943a9877d97632c2b17d789aa7aac1593111bbf5502f88e88c77e5ea66f77b810bd5e50095f8887a32dd1e6738e445696ed4e644b66234d65200bab1823eb4456ca15d0615e416af19a2122802060861bffa56377", 0x84}, {&(0x7f0000002340)="d813cd5657f83fbd039608abd4cea11c05eea54023d80675ec2a218de862a649977f0d766ca235fdf8bb952908b1f8912ac929574a1706beadaff952d541efaa7026b50f2f909d543b7313b76c91f3c19047080cf6f71a0a7fb344a6d0d5d88f8dd7a881dee21ca0bb559c882f6e39ab3de71dca0dad4019c52fc31f888f1f63e69099be5430d8e064b20875f6a43e3292a302fbefb16801ad65da0b17246670ceafb4d8f5a225ef5e7f5afc08125278b5f116dc365b51561a69eeb4934d367e1fcb2b4413d687ff64276265fdcbb909dc37873e3a670b6c7992d56486a841f9b4bc84c384f4729abd3add0f2bc19ce6c8495f735776b1b988b5601292c99eae743738424943463061f8c60893d7259c990ee9b7829da60a817c791a073846b18881a5a7f9d5f47eb56377e16d3c0013b5584cf4fea1200ce9c0dd363cc5534e67b88ec63f0ba6e5aae66425ebe6b485834a3b7955bb35b5e8767b43843d4a2db2aa337436401ffd2e0e8a18fa986c2a0b70579d4ac633596150b5ab180372bebb09251acb2c7a802a3ce5bed48c7584c74b14923ca871e82878e8a65e024755c23119d0776749886b03367123ddad3e324d5a57c40de10b9403248203b81f4130e1485c2e3027a7f986abf4f425f47a16900037a3cb830bf8faea01d0519de876e27958382881842ac0c3bcd02f32598036177f11b6837c9f5b6e1395ddda04ced1fa4fde044acbfd313ddeaaf6f6c9c54bc1e2bcf558da417db81b0b8c66ad63186c8f26f956b7c8dfcc837a90c0eade596819363e2b8a6b03c7c34791896534c0036517eae676d6fe913e947e3045e889db0ee79f92c2e5504adc14f2c88c9950a193729479384cf0224f122559501b57eb574c3cb60c284f9c727aa0e103aa18e6c43f80c32c14f77abe5c11949d88e5616f32d2ea2730238fbb00c337e6ab7d5b4323dafdad5b3c30553852c3d89ccb3e10c89271c83bb0aa0747fb6c3b15dbcf3839e1ae9c61308b53f03c635d294eab55096f49ecd7bca634831488db0ab04f54677bace8be016fe1a50e83308b79dd6809a0292fea05cbdbe0379f0009350e0d2137a6e1fcfa587725e7568ff5e4ae30aa2f5b6534ebe5d02be1751594f090d4b943f4bc02a4e2b6e7c49542e4eb57a6f63266cf499e44532bbb8974a6631dec0ea9d8e9c44913f384e47752af93345bdbc9a36e2c37102408332ca47c21cb24512ed0f3baac58deb3398e629a82082330189ffab4c60b2a8858d7e1d1c1ffe42d40bb6b709f310aaf7ab4965bf60de5655f8cacecf22eb783b05ffc5616aca07ad8b8950e94487aa1b449ba30e6f7b0ff5890e524d780b492837f7682d03f7450e88fa0d7c5c8a49fb32677ab6d7819ff6d3a0fec17dba45763fa1f664e69778284ef7328bc7b7ac1f9984f271f438cfdd963d561a6a8cee3ed634561a54955cf532895332176efb88e75d24e638cd31b02433ae5207c5b2f452986703e40dd60d2d754ece0dfdaf5205c8ca6952833a03d4fecb7eca5b30785ad0c255e448fce78b691900d5a14825d150aabbee22fa391267844335ca9d15fe84623a9e3135f2694a0a06915bb1afffdf2f03d048719a909117073c7636a19e6f27a07122e1d87cf68da814986ba4843b63b39db352259cb266f3863789b39e0e8575f5c24cf4bd663aa7e30c335b3f54885312493400d9b9ee558705d6c6a41e20ad1796a447891dcd6462792daecd39bce6d288bb106f4b7f07338424581b7d08f9131b79ac2994f0767d538b5ec018304c7be9b496dac1f97b7777c3ef8df43cd82626666fb86be1191fce020a7c500109fb612e7411b6445dd28bdea25c98bad1d9cc6b4c99fa46b70746d9893a253d51c944a4ca9beae11921563ee7dfc663cf6ea90ae4d250dee26cd4bc18bb5398502c74e2ff8a8a1965ce93a4b225e1f3fbacb03664a7222729cab829127eedd2ad2d98e43bb8bc98c853a419c8f1592e38012becb0d660bb65329ae28ff5ccbded1ae0860845719061ed4744143bde9195826e9defb429070832be85d138b8f7c8cba37ee73ba029bbba239f662587269505576c21000564a3e362496fbccdc6513f5aa82e37346a3e270afebb1cda55ccd5256cc6c726457217ee7bdfa1712c79d779717276f8641351e59e815e85799b06838740202bab4e032193187b2102ac53262bff6e1aa9692468e64a01d48d1501407fa76e2f32a0e82c871109c74f826379b33efd88cbc4715ccd093b209a13e9416ce3c1de66b8d0cd65c86cd23858082e769112286b496f5b03924d117decf5797a1588edbc20d4ba2c9c1f5ad82cc8de606a9855743eff8dac7bbae5f1b6aaf3a601a0f78aa6c602f62f81bbc270bb3b3fb1afa1df85b063134d50c812922617d811715e727603357d2574e69a8fb87ca7a057387c4cd2cfd474559af385f9f1a5d82145a6bb077bd38f35448af6ed86f20cb2271c911a2a03d7dee47e377411232524c4dc7ec682af82e6708df380274af9893e19cba9a19209ee26f7223c246e3ed8a1a0472f8530ddd5e6e89be44a9460fa0e812253d9e84726abde2a42f77db50d3b7f1bd24207a383bebb5f9dbc60dee2ed2676251c84928e12c062addd25ecd3ee0f3917fcbb8d216b7d160dadd847b5bb59ee3094ace3cca9ba6e8e6e8e3f0d03418b0771557ff25e1b694e13fd9bdbcd3b8ebcb36c7924ca2cb1f9242afa54ef0c8b75c916e6a0e837cb0b5fbe41ec9200abfcf4ead5e5f58b2119b62002128e844c5a7c8bde90e9183f070907529b9ac44109b7f7931768e2373ffed14ed27e6246f4fbd243623838112ede2d5e94ca0e0a5f2134c4e8537c9c22ca37d86d7d8c5f3c0cba09948cc199180a297896c526c9c61aa6eb61880610521e170f2280365c8a2f72cac2d5efb2c5ab0ba9df025d6a7acefb5654fc7bedf3406b94665ea274949d39a514ecfd0d74eb25b4e96769a616d10d148dd98b90750a8327f5385f4e54a0ec2603ba9c97dc2f5f9ce53801611ea68e0a02ab0673a984ee087351095d0fd3ad2814df460d94ba5dfc49b67c65e3fdbb67547f632cb9bdbb6bbb0e7e23bb33c46630645c902bac63188310a37dd842d242074b0c210c68437010535ae17952cd57b81e5d834f9057423a8dc7f3976e0ed8e00ed60db8712e903047bb98fb264406edef95ab15a069699456ad61c4a1779d3963fee304c4dfde561f60d40d5540c680aad437c7527be77a4cf34cc25f4a1ad1a72ef7a0e02baac7093b39ff33302bc1fc07ce8d09ce7e479ecd091c5ea3c855c66be9b47b833cef85bd64d64e5e30aaeff36974e55d1dcb82ffccaea86508998324712e98004a79c5d62038b653f3951bdd0bc7cff41c661f03f8efe6bada5d0adcc8bc4a5e383e858f20f65f8463e0eb36eabe3df5d80704835d36f81ad3c3e2f98905026f5b27c8c24eb7eba14f160fdf00d91a9cae48e174a3303fc6428900d70a7d419936f69259bb7a93cff3ad746109cee4aff93b6a318b76264699f1627cebf1ddcf64558c08df64fcedf1270b782411a60cfa6d7bd6784c579f68d11a918ecf309ace5890d2232adb881875612efa32c306bc7066bb5dd8e82b26cc0bcbedfdf7649e660e895db94e2deaf3e9e63600b842c7359b4a34e1e6c65784a43347cd6e4890ecb9d5c204fea205f09dd78ab7d1ca17f6fd801c961b133694177c2623bcbdba9b47e23bd958b209955b1c4c8b5800a70fa08f9c4aefa1c57bab2c3f19dedf169cac6b8e2862b17da03ccda273c7e42d3a9bfff9efe1a5d9606cd93a3b19d25c36a97917ea70ad2fc0c0e06e742ac748c2917ed91fc5002f18a1a0540b6c4291d6982fc9442c65d9fd15a8b329ccee7e6ef7f36862089dc2aeb3f80a9ebced135a34c7415f234e5b69477011965fda092ac1e1fccd205432709a2831e1dd11c7f8dbaf91ac10cddfdd3daacd3b32592deefc1eba65fd2d9f6371923b527643271fcb4824b0963fd345199f1b7e55399f1c3e0210cbc8270de9d9f79eb72f48831ef134456b35fdb4372a5f58e826d7dce79a1baa637c8bdb79ef70ec5f97b0102757c19d61d6e193d1685f4388af9438078e94a48b236383b0b452bd3ca6f2d7a04ada7ecf7b0b63c18369b938d84d16b569a587ecdc2b07341c26721df6f4d3b2e800c6383e2250c963c65e1f88379def367617c05f7936b2f5421f068475311ea8c1a79f73b8954af5ad6813ff78a8b0ea911fb00ef6b2d4c9ee550d77f52d03fe28e9b7e66c8ebde5aeb6488494f417dd91fe3979f7123e62d07513f5ab01d1ed00a9e87e6f6a424f9b014c8e7b5aa97d7eefc1625356e0b448181ed4694fb038b7994e35f0db03c48b6110027f7e914146be5af7303145c1f580f93db98f2b250d671da9c94e09620e1944c419a60ee569809d0aaececed8a92e9982e5207dc9cd3685eb85014ca8e9b3bf66442086e2b59a759d0dadafad464d3afd3e0a4680ec5df2b90e676d96fa63658f6e3872fa7fbc6595d2901804cb2717717939d09b2bba869ed22ba51ba6de43e80eebd1330496e15b64b6683589ea0acd42c2e5c1624f7072691e91cf31dd67172b84e19e350c87313934406724c736f31615551c68b972617ca6ff926c522cf1a52fb8f3e808db6dcfccfb971fd9c02ae0cb9d90f58c6ed6a9c7e32ed154afdb4e7d9340c6106ee89d880be293966d9f1051e2d946c30c374c506c896761e4fd42d847b3912991ebf8af8f0bdf1a1e0d25c9b35882a5e1a9429988b5d39bd0c346d4411d21ca8761ec39e82193efe6568c1281ae7705916ada7c0c79a5e450e2a0c41c9c843333b37af882eed43c39f28d63fbcf177630b57052b73eb8c492748c5a3848a1a81619b6f8316525a182be027d29a74fdaf2534a09ba775db35def5e50d3ec459f27127a5c1b2607f66604083643a2c0767dc2ef462ec7891299aef54a518a75ed62d3f619d2e48c6e8459fedbcfbc1d048792a4fac7aa105daf8419cb8f0aa45585ad78b0c316148a4911c55817b9ca2046fdbe9920b1e52f6207c8c00213b8c5ebe80d5cbd354dd7d9151c6d1654e86584178de87db94ab795e647d13c73f8f6d202ea212a4aee64e9da1a56c6609d59000e7ab6852db227aeb2f14da75556cc1fe8bb80fc593af7918bd518c151b70a48e6dc3e897322e06e61a13580009e4877f4b1bb304491c4b8ca3260fcd425d269348e8ebd0e4ff44ea9711ea5427d626d60f6b624bccfb2024c03a77f35afbf51df67c05a3f7e7a65ac5411629327dce5912218e26395e736331fcc2a9122db7abc13b6f4f4d9b75cba348f19094d46138b608ee37504c40fc7a94bdb4dd86896714b63a0cd47f1edf29271d64f7872aa5a22ccff92d137cf18cdea66bab52af467d91ddc69f46862580da69b1c50ab7bbbb426debaabeffcb4dabe916453293845069f2bef02a4ff0499fdfb5b517fa6cd5bde4f927081babc0b9ceda53d6b684eb9d9c3969d0b569f09d34abe7978c6dfdb664d950782428f7e9eeeacd1c592b9a09ebfddaddad2e0096859877225f2d66ee8212d19907f8ec3941ed6c39a7fb4551e44a7b676c20b927a249dfdc7be61d41d8a9c286e017473347737e86f0bb00a7f7bf848a085492054b4a10037114e194ff1fe2f64d0e1bed5cfe998c947b01d2e829847e6c9e6f73c58aec4568ef5a49695d93103b9ea1e204e307f7e0b83de17cdac39a7389c11d1848ce5fe825d697cc8d66edaaff07fbc19161a6ac5e463ed345d462f271d7991c6ac49dc3d6ec3e433e46", 0x1000}, {&(0x7f0000000300)="a9e51496b92ce6e5af1e2ee57cd359ef20f3c391751c60d3e5ed983a85d870efde069ba086fd9124bc813786fe02015c4878a97920ac318d10f7cffd810e62d2bf7219d14dec06675690c1822b4799a0b5f80a29762bdbda0165dc3fdb586efef4d1fcd41ecf64d80cedc917bd4bf86c75ff01807cd95ad69d57f69230c9050ec6268eab1f70dd62918594b4cb3c71102b22a89cdf40847c74106d8a6ffda3c5a61e1a67bab491dfd7c92c324de9dd682274ee65e3210bdf97b4d73245d00a10c57f4008e713", 0xffe3}, {&(0x7f0000000400)="461a4e5cd7fbd2af8c362cb92eceef249f2c49d5e3bf34c439107244c47cdfa1dc3bc4740c476f411e24f40f30ffbe80d4640da347c6236e99432e977b4984115b8e91d9bcd1490e9b76a86a1a649cee9e557f32bdd0d383dda7a117ff8374891ff96db9a4b79916fb6a9227b0a334518c7a659a7bf38e3aeee354cbcff3ae1feebe6e430834e2ac2824dedb04a7c2aac37b6c412a13e64b9f0e505c0aaf2b44f324cd692a48b89ed386b2ec183c3995f1e7f120d8f6b82544da5457325e467439916062e633f5abfbd17642abddda18f55ee42cef6469f9", 0xd8}, {&(0x7f0000000140)="b9396c1e86600d47671c2ba35c2cb7918919e2f8cd59dcfdcb54e2c9a163615b9f8b1d50317bfe5299b1f1c43867c81fe563f9f6f2b0efdcd53cee4306f6ffb5b2aaeace971b5fb1d3de38513910832075b6d85e73a1fb1ebbc11b625d9d1cbe80a3ac009169fee98b10e6359634243074ff6ba3ce7b", 0x76}, {&(0x7f0000000500)="155a732c137e7da04bd2a27e6b781919a64691f09b2676000024590c56ac605a63a4be95d88dcc39d40fe97225d14ec88cedcb275658a7f28ea5dfed632c0574e9cedec8c1bedd0bc2ea57e0d8a9f83f9a1933da0f30836cbcdd9518dc2daaa5d91a27bf3a740cb07d3df8bacd77e5f321353f30cebdfa0188c06f3d4337126fc4b9f267c5cc1e634912346ada788a2cc5901961044384a295136d84639fe89fd61b", 0xa2}, {&(0x7f00000005c0)="00d661edf2eee696719948c4c057c8a3e4de35fa61bba8270e2f1c9ebfb7eac613e78fc3c58a7c8665ba18464d1a66af93dff536265fdf04a5ceae77a3df7053773ed50795af289fd34807982a3ed74c0300e08c8343b568", 0x58}, {&(0x7f0000003340)="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", 0xffffffffffffffac}], 0x9}, 0x20040830) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae64, 0x0) dup3(r4, r5, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000700)='y\x00', 0x2, 0x1) 06:30:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 562.906796][T19939] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 563.081268][T19939] CPU: 0 PID: 19939 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 563.089649][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.099704][T19939] Call Trace: [ 563.103009][T19939] dump_stack+0x11d/0x181 [ 563.107356][T19939] dump_header+0xaa/0x449 [ 563.111855][T19939] oom_kill_process.cold+0x10/0x15 [ 563.117331][T19939] out_of_memory+0x231/0xa00 [ 563.121933][T19939] mem_cgroup_out_of_memory+0x128/0x150 [ 563.127504][T19939] try_charge+0xb5c/0xbe0 [ 563.131967][T19939] ? __rcu_read_unlock+0x66/0x3c0 [ 563.137007][T19939] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 563.142572][T19939] __memcg_kmem_charge+0xde/0x240 [ 563.147615][T19939] __alloc_pages_nodemask+0x26c/0x310 [ 563.153191][T19939] alloc_pages_current+0xd1/0x170 [ 563.158271][T19939] pte_alloc_one+0x18/0x50 [ 563.162726][T19939] __pte_alloc+0x2d/0x220 [ 563.167068][T19939] copy_page_range+0x151a/0x1a80 [ 563.172045][T19939] ? __vma_link_rb+0x3f4/0x440 [ 563.176889][T19939] dup_mm+0x74a/0xba0 [ 563.181094][T19939] copy_process+0x36f3/0x3b50 [ 563.185809][T19939] _do_fork+0xfe/0x6e0 [ 563.189901][T19939] ? __read_once_size+0x5a/0xe0 [ 563.194859][T19939] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 563.200595][T19939] ? _copy_to_user+0x84/0xb0 [ 563.206027][T19939] __x64_sys_clone+0x12b/0x160 [ 563.210817][T19939] do_syscall_64+0xcc/0x370 [ 563.215350][T19939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 563.221271][T19939] RIP: 0033:0x45a679 06:30:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) r3 = syz_open_pts(r2, 0x101200) r4 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0xae, 0x54e02) r5 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x100, 0x425b3fac9326669c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae64, 0x0) r9 = dup3(r6, r7, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae64, 0x0) r12 = dup3(r10, r11, 0x0) r13 = getpid() r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r16) lstat(&(0x7f0000000940)='./bus\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r19, 0xae64, 0x0) r20 = dup3(r18, r19, 0x0) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r22 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r22, 0xae64, 0x0) dup3(r21, r22, 0x0) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r24, 0xae64, 0x0) dup3(r23, r24, 0x0) r25 = socket$key(0xf, 0x3, 0x2) r26 = socket$rxrpc(0x21, 0x2, 0xa) r27 = syz_open_dev$loop(&(0x7f00000010c0)='/dev/loop#\x00', 0x10000, 0x440) r28 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r30) r32 = timerfd_create(0x0, 0x0) fstat(r32, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r34) r35 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r36 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r37 = ioctl$KVM_CREATE_VM(r36, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r37, 0xae64, 0x0) dup3(r36, r37, 0x0) r38 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r39 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r40 = ioctl$KVM_CREATE_VM(r39, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r40, 0xae64, 0x0) dup3(r39, r40, 0x0) r41 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001440)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r42 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r43 = ioctl$KVM_CREATE_VM(r42, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r43, 0xae64, 0x0) dup3(r42, r43, 0x0) r44 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r45 = ioctl$KVM_CREATE_VM(r44, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r45, 0xae64, 0x0) r46 = dup3(r44, r45, 0x0) r47 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r48 = ioctl$KVM_CREATE_VM(r47, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r48, 0xae64, 0x0) dup3(r47, r48, 0x0) r49 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)={&(0x7f0000001480)='./file0/file0\x00', 0x0, 0x88f8771b4b01a333}, 0x10) r50 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r51 = ioctl$KVM_CREATE_VM(r50, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r51, 0xae64, 0x0) dup3(r50, r51, 0x0) r52 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r53 = ioctl$KVM_CREATE_VM(r52, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r53, 0xae64, 0x0) dup3(r52, r53, 0x0) r54 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r54, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r55) r56 = getpid() sched_setscheduler(r56, 0x5, &(0x7f0000000380)) r57 = geteuid() r58 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r59 = ioctl$KVM_CREATE_VM(r58, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r59, 0xae64, 0x0) dup3(r58, r59, 0x0) r60 = syz_open_dev$usbmon(&(0x7f0000001500)='/dev/usbmon#\x00', 0x80, 0x40000) r61 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r62 = ioctl$KVM_CREATE_VM(r61, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r62, 0xae64, 0x0) dup3(r61, r62, 0x0) r63 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r64 = ioctl$KVM_CREATE_VM(r63, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r64, 0xae64, 0x0) dup3(r63, r64, 0x0) ioctl$TIOCGPGRP(r46, 0x540f, &(0x7f0000001b40)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0}, &(0x7f0000001bc0)=0xc) r67 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r67, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r68) fstat(r27, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r70 = getpid() sched_setscheduler(r70, 0x5, &(0x7f0000000380)) r71 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r71, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r72) r73 = timerfd_create(0x0, 0x0) fstat(r73, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r74) getsockopt$inet6_IPV6_IPSEC_POLICY(r20, 0x29, 0x22, &(0x7f0000001c80)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001d80)=0xe8) r76 = timerfd_create(0x0, 0x0) fstat(r76, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r77) r78 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r79 = ioctl$KVM_CREATE_VM(r78, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r79, 0xae64, 0x0) r80 = socket$unix(0x1, 0x1, 0x0) dup3(0xffffffffffffffff, r80, 0x0) r81 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r82 = ioctl$KVM_CREATE_VM(r81, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r82, 0xae64, 0x0) dup3(r81, r82, 0x0) r83 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/rfkill\x00', 0x40, 0x0) r84 = getpid() sched_setscheduler(r84, 0x5, &(0x7f0000000380)) r85 = timerfd_create(0x0, 0x0) fstat(r85, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r86) [ 563.225187][T19939] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.245236][T19939] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 563.253795][T19939] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 563.261871][T19939] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.269856][T19939] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 sendmmsg$unix(r1, &(0x7f00000024c0)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000240)="f1ed6963c32f0219917c218155a4e6c5262338a9b686e32eccd2a8f512552618b8c74c6362949be65ff4590f1153ecb50ef14ec895388ab3f7674ccf678f8ef127ddde7f4ee89f2f7075f5ae7042364d6f8ad5a4b0f4748d778a6d9656a3d525b76d0f12843c0c20d4b465a21db8f1c48ac13fc995c3859624a0ec23a25ac964b7559921ff859e11ac28f7df9f378fcbfc2f42385d2aa4cd4030fb38af4e4b8a1357259ba25cc064050ce1e157e0f0e0a46722f7d83926f410ab165a2df992e3e07694adce336334706b26e027d744bd56e655c9d1a30a3e939e1e4518feaf8eaae48bc89d9e2351b150f20c447c", 0xee}, {&(0x7f0000000340)="0009bdd8192ecf661b9cff63cc48f20d38cb3c9337734309468c5d7ed72a57aa0ae73051fb1c13545cf4553e3a442afc43efc575a4eba07ccc6dd9e613556a9465fd7af5d99874d5c17943e6f03f6fd6a021e02358af2731d09dc23147311f94d10d8ed1a47a9f941cf43378d06967376bfe5a7cbef8b0d3e74d29b337e19d9f99da9660f95d21197e17e7ed448583226d6e819cf09ba603845849c74a2bd6ea4ba4f5abf928e5bd31", 0xa9}, {&(0x7f0000000140)="c9b14f6d180a43", 0x7}, {&(0x7f0000000400)="52e9351feeecf55f02838605966efb2c2b86bc67dc1a71884c096fe0d70193a49e919dd682d0d227c3f62cc3b2970e77a70b982dca1b1ec7aab296caf7ce3fc6099f3d1a1c8ddc9a8d4501269e51b195a3b2dc", 0x53}], 0x4, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [r1, r3, r4, r5, r6, r11, r0]}}], 0x30, 0x44000}, {&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="3ce285c371a9ba25ab774eaa4f741e62df70df8a15a7671615581c00e3590f081b59ffd0e98b6bea2c4f42e3aed23f956c947019ccc6c59d4f9cea4830c7b198b9443592f67ca998c65cbcba21cf1b55d7ff54128df6f0d3d966e9dd4f59a31f8eea36801b5de3f852620cc612738b03d22fb9df0bea500ea0e823d8499f7c01f3b7e60f5faba7c8afcea0065cbe10c7d76f68e9de3363bbfffc0d7d03ba28ed95d8464b13e4e4532b0a5eb966fee25b490d45ced5", 0xb5}, {&(0x7f0000000680)="6617cd7686aa787171a9723ec8abe30e5334bc49ddb284244e2f36051f0a9d70c4daa605df52d020bfbbd07255903cfd703a58b7c3ca099bae275a9cd967683606268cbf453e525dfddbe3ca89b7dc5927936d979255b44263bc0e512a9bbf7671ce4d00cadc0c6c412bcd648a590054168e27bf15046da7b83e009d5d32c2214c246f76fcf8cddfce6a2cf71e2394f69dd83a05b1dd66960d9f67a47dc6924fafb654d101dfe7f9dd29af606c2341858046f9511cf931879e1e91", 0xbb}, {&(0x7f0000000740)="b077518de77afe056394ac446fd5842f1c9ff084c854b86ac52091eff5483f51c61be77511f2c50ed76b375b36b62c0338bda15743758e6b1cf4ca6da1d09d3d17b0c3bb9a1fe1626092c3538b094657c2480466aec2a22f18a5b06ab93323c2ef8243d4c7cd406d1a3c21676919e5b0aefd252ffb24ca9bd22ce66590230896e1ea22182e9ec096226a37cc81", 0x8d}, {&(0x7f0000000800)="f9bc442e4f83a809e57a7f66d05bc03567a0938032f8893e6b1bc8c7c3dd4ef4b1ca935f34e600a5da3a04cf6a947076b332fccc063affdfe44c82fc8d1f3ffacf7658da8fcb7d3505c86dfb21b8af2a61fd68089d924a8a93a2799263d94d38ec3dc7fe61a4461f41c76abcb4c508d43a57dd9c46ddaa2b014de19dee7a491378ddc69371964c3d9ad0291c5e3b9b4acc6b3bdbcdf81b69037e65c782ebc4e8ea8d77a42f32c1e064af6b8b6ec3ac1cd711238a3492ce318babdf01edbc2e80356a13cf82ac936c6533c27c3397f396656330283ff7621f300c5d977a18dfca8a9e50e4da248c5035f2ac8950474c496cadfa33adffdef38867042db1a408", 0xff}, {&(0x7f0000000900)="f480d2949ca3f16b777c9a57", 0xc}, {&(0x7f0000000a00)="5fd311a4d62d207a5623f2a59906a444bad44fc910ab0d63ba4bfecde2e8ec6476a439641439d0c699f5d542c025ad73236d5584c905097b9273dd996687a831d59ce599d509d09203a450c6ab708b838990d5a030e8fecdf65f88e48d740daf5d0b15fe2b81528b83f337203e1e082950e6045b5be118d2b98be13b4cac0b35c50136096d8e1a1c683b55147c5f30406a4375e17fd68200101ecc6b00b256389943cc763012a8da41d81becdae7eea157571ddc518b00b829c970", 0xbb}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000003b30c4c57a0000000000ecffff00000000", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x840}, {&(0x7f0000000c00)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c80)="a84d182047f87c5dfc057f3fd8dd43f1ad1a76afd5364685d32bcacda8152f3d2921c193a0f6092bc6bdf136a574888e734fd22c7b7ed5418a38551cf160f5bc8b092dd08792db8d4039f94dfe05ead651f29ffc3c9b1f58286aab687cfe7378cd4c84be14721a8c1114775647b52bd720fe1e11f9e3a270f83bad23e7ecb3ca9815b788a3a5c81effe267a76a3c630cf0c73057a37b6b7b4c4d28495f2dd6cc03b8d46076fa012722e80e3d28f056e77c1e740764a42929ab", 0xb9}, {&(0x7f0000000d40)="ed5365a7d0b8d6c6ca7d5649f8297891390e2a548b808cc8fa99bd16cf697bb31b70ca7351ded5cf010bfa36e05a1ab9528a2282133b48926b95f25ec767f15b1b75e86133c7cbbf6f54a50dc186dc42b927956fd5fdba124080cb247cbe7371c13ae1667e977acfc13a9e5bb803e4fb935c55b5480d375aa77b294b1e36976f134e6f175d3055d482728a069ba02eb9d78774861cdba71a7d0e3cf91d0000a7101ae075bd4b85a03f2d0656b9f3408121d2a49e239d5ab26cafa82829b8a72c3573e635f3ddb59ea95fe786a4241c48e339b49a46", 0xd5}], 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000140000f9ff200001000000", @ANYRES32, @ANYRES32=r8, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r20, @ANYRES32=r19, @ANYRES32=r22, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x80}, {&(0x7f0000000f00)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)="159628d309e855302b810b42c39d81e7a933bfa6dcdcb7e4eca4c0b56b5ac5297be45d7c9f85931d28aaf0494ca7f86cda2bd5641a8b8ec9871c889e6762b7cfdce9df325274ee740703a0c40cefdfab0e4893f45e978624ca69306687845964db494533d637574d3de946bf363335bbe253caeb6785372f6a6781de82c55848ae1514940466bc73325c7fee5e796c2dacdddb2cddbe7b2a8077146ee77a6dc9222c9299570be599f5e5320194f64e43d7366947d6a564af602ffa0e4e72ca225bc824fef97be9cc9f19bf", 0xcb}], 0x1, &(0x7f0000001140)=[@rights={{0x20, 0x1, 0x1, [r24, r9, r23, r27]}}, @cred={{0x1c, 0x1, 0x2, {r15, r30, r34}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r35, r18]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r12]}}, @cred={{0x1c, 0x1, 0x2, {r84, 0xffffffffffffffff, r86}}}], 0xa8, 0x2001010}, {&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001340)="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", 0xff}, {&(0x7f0000001280)="b43813c5b4ab0c2511", 0x9}], 0x2, &(0x7f0000001540)=[@rights={{0x38, 0x1, 0x1, [r41, r42, 0xffffffffffffffff, r44, r47, r49, r50, r38, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r15, r33, r34}}}, @rights={{0x1c, 0x1, 0x1, [r12, r38, r53]}}, @cred={{0x1c, 0x1, 0x2, {r29, r55, r34}}}, @cred={{0x1c, 0x1, 0x2, {r56, r57, r34}}}, @rights={{0x28, 0x1, 0x1, [r58, r60, r61, 0xffffffffffffffff, r63, 0xffffffffffffffff]}}], 0xe0, 0x800}, {&(0x7f0000001640)=@abs={0x77dbb5afff74c358, 0x0, 0x2}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f00000016c0)="4883a30213dbda", 0x7}, {&(0x7f0000001700)="bb3918729866b5c16926fa51c9bbdd1f69e69420735c18556d01d25164a5a93a8172346b01708f3fc7d8b6b7cf1080c2f98d3669199834b94ab9d7472932e840bf69c7211810ae0daff7685b86ec7bd3f788503b08d8f3cfba49f15883f3c834a206995cc68e96e21a246dea661f4d91cb5ee1", 0x73}, {&(0x7f0000001780)="0fb58ef5b4d080e3442ff84b304d748949602bf51b4c347f0561dabde795f150dace4165ec35d4c7e89b94c632b929b892ead1608bcd699db51e7a1ebaac16865e8d47757cd36babf7d0b69d0885541d8582745bb33369a7a5534b8e8f93241e13ff91e45bccb2063a78b93c3c5e6a3c860016165411c9ed321b9b4a886979d953309c48a5c7fa9b07110dde36e307a67d14d61cda6c33ad6434936427c7ba4065865ef8578d98e89b54519912f487e734fb4cba5698ed572f6cc92f4500c64fdf5af8f94b2c2bffdc05623e9b996274476cd6d7920f481516b4d5b0c857821f2330276c13adba7cb094cfd3f423", 0xee}, {&(0x7f0000001880)="159d60cc625f67c752f72fa6a34ff338f39377757cabf0d7c1809ba5fb75236e28b12d0d9be2d37287c0a8dac49ddb7d4f74256412d9da189365e2f7210a0ca03111f0597da52c8b57d1e3e08a80b7766f9b0c4fa3e71753b835f3aa69ccdd601d6d133fb975a7f8abe0914fe06ed1a141fd1745d6e5910a6d3321d40e17ea44fcb47508ea4913aef486f6e08282af9d97a002b500fd5f91679910936e4676c185788cb28410da0ac6ea21e7f0011922f6c12a78eb373641cc7a248796cb06c59761884c4df1c80d57559e66147a5d6f404a2b1c9b286c98dad863", 0xdb}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="e949ffbfdb243f42f33bd6fba0abf7eb6feab36df71a88d2eded2261be38e08d5622bedd68979b197a64f46880199548176fb1300809a248c42c9ba713df3200cb4a2f458c2cb3d14fb704bf94a9dcb8e1887536ceca1432f188c9f3d54ce92d47dd80eafe55ae0f1bb61e00fafddb5b7a0349dd706e612d5d6a40a7191799909308f7b6c235a91f16160f0d57db93ef1221e3bf9dbad7f0f611dfc469b832cd3618647a55ebf2e42b1ab7c65ff2b88661a1aadcb231ae42bbb9b0093b149a6ff72cd01f9eb27d0b8653bcaaf5a40309fbf45f1e3007abc164f2a63b0e869b9651755ee192dd898d5a09b7acb4de05567cbc54fe53", 0xf5}], 0x6, &(0x7f0000001e00)=[@cred={{0x1c, 0x1, 0x2, {r65, r66, r31}}}, @cred={{0x1c, 0x1, 0x2, {r56, r68, r69}}}, @cred={{0x1c, 0x1, 0x2, {r70, r72, r74}}}, @cred={{0x1c, 0x1, 0x2, {r15, r75, r77}}}, @rights={{0x28, 0x1, 0x1, [r0, r4, r79, r82, r83, 0xffffffffffffffff]}}], 0xa8, 0x8004}, {&(0x7f0000001ec0)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001f40)="6647a87a87b8f5dce7eff51ebd7f4e689b2975c7ebc99c6fc74f43180b240bc617ff6623ff8f1d70647610ca7b61b49e331667b6f716c5816753c11135bcdf41a6c97b76b45c67b5c7a18ae50dccf901ec0db0fe4a6d05acfaaa090607211249076c27a38d07d90eb08cff45a8f51b813adeeaf66bde269dda810cfe74376174f5eb815be47a5ebd0f11f7e191026079201733d1747937f03f68bc0d7d1ad4fdc30093d1d94225734db27acf1ce31e5c72516b26c25ab906667499aaf3a4b4d7418f93cfd7639f7a5efb52b8d3962fc0cd350baf93ed5afbd2", 0xd9}, {&(0x7f0000002040)="740a2e235c4673488e1f5e4ee9e08c351bfbeee5f7abc256a62ed81c00cc6d17a80072d4ae3c2773bdc18f09f47aa16864f2db9c0f0df380046825fae8fb9898d646835df5a4e031bd75b5256787c55a14f5b48a6dbfb2d1635e292ee57b698d8c4ab2541c69dfbaa191ef063e95c79385235fca011732e2f26ce4999feb98bb090d5cd1ec6862a4582e8b7f676d82a07623b327f037b8809d35109784c59c0cc2db3c24d458eddf41a4de52761a3803e04806c1e234babb", 0xb8}, {&(0x7f0000002100)="53e25955031ac1da88c36b42b2c5be1f8fb373069d65f37f589f1d06235fad31c54d7eefa94597e617d0fb4f9553bc86e1c02b6d90ed7559fd53bc9aa2c7e81ea3915f74cefb46e0998a8ca92304ff4617f03702861f9a806d3306b4b4e974a54b52f646d1683f6cf0ad90f61e2b680af9fe7ad302bf858f7e55180b5d3b249b607a2dff906e0f8929ff19b18eb188", 0x8f}, {&(0x7f00000021c0)="a7312f7762910c0086a15714604d9a3519da2e332b95b864", 0x18}, {&(0x7f0000002200)="98088d8f2d18c32c7ce51897dfc4abba51679ae8718f2c1748b1fdc612aa92ba9ae849cb889509563b5776f7fb612f4e6ef59e52ceaa868dc581e9cb27565bb80fbba6740e9590186e76796f3a3c0ee4f6072646a5382c6ec0c089ad8a5eab6f178d7d56f46c3e62d013c2c695736a8c20ca6b1a3abd790ebe773c86c5c6c1932b38bce2524cc4979e611921f5baf1bb7479596162cd2ae1c84fea4ee8", 0x9d}], 0x5, 0x0, 0x0, 0x8084}, {&(0x7f0000002340)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000002480)=[{&(0x7f00000023c0)="f398436ec6d88ef70fe8f2feccc663b4869bde4119b6b879e46f716e9725c6a7735cd00de9e8e2c1da9efa5ccce6d3269dcf565e0bc8457c0c84f69c1c5fa53aa686ed5274cf2f7773ae377bc24ff52922118d64263521cc71258e5c9a306c2cefbac6d40738697ce0708e6212f89109244e0cd3052a9722bfe231c7202ddf9dbeb56b9cdb92ecc3231a05d993059b83790c568ad927bf1639e98cf077231c62", 0xa0}], 0x1, 0x0, 0x0, 0x10000000}], 0x8, 0x0) r87 = socket$inet6(0xa, 0x400000000001, 0x0) close(r87) r88 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r88, 0x200004) sendfile(r87, r88, 0x0, 0x80001d00c0d0) getsockname$unix(r88, &(0x7f0000000000), &(0x7f0000000080)=0x6e) [ 563.277849][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 563.285992][T19939] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:30:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) read(r0, &(0x7f0000000340)=""/231, 0xe7) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @loopback}, {0x306}, 0x4, {0x2, 0x4e21, @rand_addr=0x8}, 'bpq0\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x402900, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000040)=0xffffff9d) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = semget(0x2, 0x2, 0x40) semctl$GETPID(r5, 0x2, 0xb, &(0x7f0000000180)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x30502, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000180)=0x64) sendmmsg$unix(r6, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000280)=""/30, 0x2009000, 0x2000, 0x18}, 0x18) syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@locktable={'locktable', 0x3d, 'selfsystemmd5sum$lotrusted\\+vmnet0\'posix_acl_accesswlan1eth0\'{eth0keyringf}vmnet1\\-[('}}, {@lockproto_nolock='lockproto=lock_nolock'}]}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x80, 0x0) write$P9_RREMOVE(r9, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x7) [ 563.369033][T19939] memory: usage 307200kB, limit 307200kB, failcnt 1774 [ 563.376095][T19939] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 563.417278][T19939] Memory cgroup stats for /syz1: [ 563.417526][T19939] anon 259407872 [ 563.417526][T19939] file 77824 [ 563.417526][T19939] kernel_stack 3649536 [ 563.417526][T19939] slab 19361792 [ 563.417526][T19939] sock 0 [ 563.417526][T19939] shmem 0 [ 563.417526][T19939] file_mapped 0 [ 563.417526][T19939] file_dirty 135168 [ 563.417526][T19939] file_writeback 0 [ 563.417526][T19939] anon_thp 234881024 [ 563.417526][T19939] inactive_anon 262144 [ 563.417526][T19939] active_anon 259407872 [ 563.417526][T19939] inactive_file 208896 [ 563.417526][T19939] active_file 0 [ 563.417526][T19939] unevictable 0 [ 563.417526][T19939] slab_reclaimable 3244032 [ 563.417526][T19939] slab_unreclaimable 16117760 [ 563.417526][T19939] pgfault 39039 [ 563.417526][T19939] pgmajfault 0 [ 563.417526][T19939] workingset_refault 1122 [ 563.417526][T19939] workingset_activate 99 [ 563.417526][T19939] workingset_nodereclaim 0 [ 563.417526][T19939] pgrefill 997 [ 563.417526][T19939] pgscan 7044 [ 563.417526][T19939] pgsteal 4502 [ 563.523137][T19939] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19704,uid=0 [ 563.542629][T19939] Memory cgroup out of memory: Killed process 19704 (syz-executor.1) total-vm:72976kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 563.616525][T19962] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: Trying to join cluster "lock_nolock", "selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e" 06:30:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x2}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 563.677544][T19962] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: Now mounting FS... [ 563.689329][T19962] gfs2: not a GFS2 filesystem [ 563.694558][T19962] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: can't read superblock [ 563.712093][T19962] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: can't read superblock: -22 [ 563.876714][T19936] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 563.921378][T19936] CPU: 1 PID: 19936 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 563.929757][T19936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.939839][T19936] Call Trace: [ 563.943213][T19936] dump_stack+0x11d/0x181 [ 563.947750][T19936] dump_header+0xaa/0x449 [ 563.952091][T19936] oom_kill_process.cold+0x10/0x15 [ 563.957210][T19936] out_of_memory+0x231/0xa00 [ 563.961840][T19936] mem_cgroup_out_of_memory+0x128/0x150 [ 563.967405][T19936] try_charge+0xb5c/0xbe0 [ 563.971771][T19936] ? __rcu_read_unlock+0x66/0x3c0 [ 563.976936][T19936] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 563.982423][T19936] __memcg_kmem_charge+0xde/0x240 [ 563.987473][T19936] __alloc_pages_nodemask+0x26c/0x310 [ 563.992873][T19936] alloc_pages_current+0xd1/0x170 [ 563.997914][T19936] __vmalloc_node_range+0x2d7/0x4c0 [ 564.003124][T19936] ? kvm_dev_ioctl+0x6de/0xca0 [ 564.007901][T19936] __vmalloc_node_flags_caller+0x6b/0x90 [ 564.013530][T19936] ? kvm_dev_ioctl+0x6de/0xca0 [ 564.018294][T19936] kvmalloc_node+0xea/0x100 [ 564.022969][T19936] kvm_dev_ioctl+0x6de/0xca0 [ 564.027562][T19936] ? kvm_put_kvm+0x650/0x650 [ 564.032231][T19936] do_vfs_ioctl+0x991/0xc60 [ 564.036729][T19936] ? tomoyo_file_ioctl+0x34/0x40 [ 564.041672][T19936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.047902][T19936] ksys_ioctl+0xbd/0xe0 [ 564.052143][T19936] __x64_sys_ioctl+0x4c/0x60 [ 564.056724][T19936] do_syscall_64+0xcc/0x370 [ 564.061226][T19936] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 564.067122][T19936] RIP: 0033:0x45a679 [ 564.071056][T19936] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.090885][T19936] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.099450][T19936] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 564.107420][T19936] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 564.115389][T19936] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 564.123352][T19936] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 564.131327][T19936] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff 06:30:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x8000) [ 564.254614][T19978] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: Trying to join cluster "lock_nolock", "selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e" [ 564.397443][T19978] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: Now mounting FS... [ 564.408374][T19936] memory: usage 307196kB, limit 307200kB, failcnt 1841 [ 564.425795][T19978] gfs2: not a GFS2 filesystem [ 564.436402][T19936] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:30:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 564.442395][T19978] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: can't read superblock [ 564.495405][T19978] gfs2: fsid=selfsystemmd5sum$lotrusted\+vmnet0'posix_acl_accesswlan1eth0'{e: can't read superblock: -22 06:30:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0xffffffffffffffb6) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 564.651138][T19936] Memory cgroup stats for /syz1: [ 564.651555][T19936] anon 259407872 [ 564.651555][T19936] file 77824 [ 564.651555][T19936] kernel_stack 3649536 [ 564.651555][T19936] slab 19361792 [ 564.651555][T19936] sock 0 [ 564.651555][T19936] shmem 0 [ 564.651555][T19936] file_mapped 0 [ 564.651555][T19936] file_dirty 135168 [ 564.651555][T19936] file_writeback 0 [ 564.651555][T19936] anon_thp 234881024 [ 564.651555][T19936] inactive_anon 262144 [ 564.651555][T19936] active_anon 259407872 [ 564.651555][T19936] inactive_file 208896 [ 564.651555][T19936] active_file 0 [ 564.651555][T19936] unevictable 0 [ 564.651555][T19936] slab_reclaimable 3244032 [ 564.651555][T19936] slab_unreclaimable 16117760 [ 564.651555][T19936] pgfault 39072 [ 564.651555][T19936] pgmajfault 0 [ 564.651555][T19936] workingset_refault 1122 [ 564.651555][T19936] workingset_activate 99 [ 564.651555][T19936] workingset_nodereclaim 0 [ 564.651555][T19936] pgrefill 997 [ 564.651555][T19936] pgscan 7044 [ 564.651555][T19936] pgsteal 4502 06:30:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x3}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 564.790415][T19936] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19841,uid=0 [ 564.812066][T19936] Memory cgroup out of memory: Killed process 19841 (syz-executor.1) total-vm:72712kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 564.837672][ T1069] oom_reaper: reaped process 19841 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 06:30:32 executing program 1: unshare(0x20000000) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x101001) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f00000002c0)=0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1c, r3, 0x1, 0xfb, 0x6, @dev={[], 0xa}}, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup3(r4, r5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r7, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000240)=""/104) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x1d, 0x2, @thr={&(0x7f0000000080)="db432ac3885b2b6a51ce7a053af1a79b8e09abb18fb2975ab39400b290865cbadf728c73c216b4af91a5cbf64de04b654ba713d507d673271408271abaa10f36", &(0x7f0000000140)="08eeee66f85d72c518a77b1cf2745376f2de054c40f6a7e6b9d8ed18c69e7d81840d031661c2e755483262a77070f85b338e549fe4bd0d621f72ee8904392ae438ba5c62be35edb18b60d4de3adc07a787b0dda417f6296d319fd775370440897f129329389c56b27bb99ce052b861f1fac4869a7a91ea1f99ee5136d6ff41"}}, &(0x7f0000000200)=0x0) timer_delete(r8) 06:30:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xe5, 0x1f, 0x80, 0x5, 0xff00}) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00', 0x7}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) 06:30:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0x4000}], 0x1, 0x0) 06:30:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = clone3(&(0x7f0000000240)={0x6949d5188460d95c, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0x3c, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/52, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x50) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000400)={0x9000, 0x2, 0x81, 0x1, 0x1}) r5 = timerfd_create(0x0, 0x0) fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r6) getgroups(0x2, &(0x7f0000000300)=[0x0, r6]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) r9 = getegid() sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, r9}}}], 0x40}], 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$UI_GET_SYSNAME(r10, 0x8040552c, &(0x7f0000000040)) 06:30:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0xffffffffffffffe4, &(0x7f0000000340), 0x5, &(0x7f0000000e40)}], 0x1, 0x4) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) r3 = accept$unix(r2, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = clone3(&(0x7f0000000340)={0x10000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), 0x4, 0x0, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000240)=""/143, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, r4, r5, 0xffffffffffffffff, 0x0], 0x6}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae64, 0x0) dup3(r7, r8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae64, 0x0) dup3(r9, r10, 0x0) gettid() sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000003a40)={0x173c, 0x2, 0xa, 0x221, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x8}, [@nested={0x54, 0x1d, [@typed={0x8, 0x64, @fd=r3}, @generic="4dfa60bee29edbd127d39b6d25df22aeadbe21cd3c1e7c4b9eb38dbf864384055efec2396a810e2241ff32a9526c52ede2eba3732c7d8ad26ab788929c8deae3d1fafdae393f"]}, @typed={0x10, 0x5f, @str='wlan0proc\x00'}, @typed={0x8, 0x60, @pid=r6}, @nested={0x78, 0x4bba, [@typed={0x8, 0x8b, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @typed={0x8, 0x1c, @fd=r7}, @generic="787c7fda489b463c14260d8462cb2bf58db25de0eb9590ac51befff2359d355746d560523d2e9b430acb138c6a513cff2e792d40848e6bec2e770b43512e3f642d4f6fd977ecc187d3938e179e0fcbb9208e0c483baf3073c040fc5829c78437b846f270"]}, @nested={0x1d0, 0x25, [@typed={0x8, 0x79, @fd}, @typed={0x8, 0x3a, @fd=r0}, @typed={0x8, 0x28, @fd=r9}, @generic="f73adf9e426d954f6c38ede7367999e384ef584522adbefc7253fb0afa8672bc58ee5629867ee38ecf54075a7bb58064d87a1764a0394ecaa12b2f952f4e90b9e40fafee8151ca84c2b7b0b2569c69906d660b8131f0d23eefa3158c0da92c6fe9c99095c6a6bc014949b46cd17d09edf42ace1273c0bfa48beee1e41c642ab2", @generic="202e6fad00b1eef00fc80991760e8dd27fcde185cc3e6c16d8b588c732841e506364b00862e708b9ba6a61489fd4b6a0c2bb2fc51ed408979074031ec78e7ea0e9462cb20c0346dac613acfc62b337d2f89d0069968beb6fbf6dba09ffe7c45473e8f57cfb5f7f2784c45a596fca8e9a5d234242575020066244f7eec0a73602e9e5ab6ea1aac663504d244abdcb1660f2a0f69e747be0514ea56cb52d37a5265ded67de3838e43f04dc6b187606677a43f4f7beb1476a0c519afa", @typed={0xc, 0x7c, @str='hash\x00'}, @generic="4223234c999b4a7289e5dd485d17c1676386df0d51610345af7745ab49522d914e7f55dccc7b82fe64c2c77121fc20ee5db25d7f7d62b3b07b28cbd5440f2505287b81e415ef296659c6c03fd5eb050d94a7395fc1a7391bff18a19f8171de70", @typed={0xc, 0x70, @u64=0xd49}]}, @generic="1c828b6d84aa7a4ace259c3d41fe69665f25ca6ce0e408d6ae981b8f9b0e283c97d737f6551a90e58a83fdcab6bac73d5134dfc8027371257fbf029051b59893c3a4b1dbd0cede05d61d3efa6ff5af0e917862bf66fda182f5e79997b1d7e3c0d106927e5841bfc3c9ee44aa04425ae87dae5cc6b90573cac29516120b92ddf20a6fb1fdf40e47cd404496c2ff28df5ec4821b04408f6cd22beb13310ea123425b5d9e782c1801a9e5e45eac2a474f046afd1549648552b8feab14a6e2030a5fafd8bba76581d7a3708b3aa85d8356f6eeb8b9252aecbbfc6c5a4f0268b333433cf2881c10035a6fdebceaaf50b7907af2b95d1507013f5d915a93ee3fd3bb4002c06a27ac15361ae0a2ca9109ee5a0efa15e0c72bb743f11f9e5017fdfa074e881a45f8dc8de4bac59ea7e4982c8537ca6a5705d7dbe6ce52a05cb2537eed4c5ca29744780ad6582d397a6cf29a546c4963676d0b95edb20d6eaeb3fe8dbc3e8c3161a9eb1809a4c8d0aeac44ae3996f7a4fe307ec1d74bae38adb1640d4241acd12144bb3501d34ae91ada6d6502a780a4ccd440376597ee47a7dbb9ede88694c66b01b0af3016998f3b6156595fee59bb4f3e6ecb8c7c8a36330418e07586aa915a03b043be8a9d3eaff012fb7911c6291baf9f24331e0e7ddcd4a2d5c6efce88c6ebcb5badc188f5e93962abd65690d68ed38f99e937b83cd4ab17b33d6f87431a615ab7788408dbacc17f8e53111dcf3bed2610d7fe8b029eeb7f67a0b78d77779478a6df0ec663ad751d257689339d0a6e5f3554a5f99a8aadf12cd3be968c119120d7f3886dd4123b23dc0c20faa450c43436c2519b6593e969e71670efd4d1eb1785e0bbd7aaabefb268f41b63569e428df4efb73de45f49bb6debd16d2f9a544a0fa762cfac03646c2c4b93768c9924b82c5a81924c7a6c8f05f8c54b31809ca31e3c3cb52c4216d069fb7afef786d2fe513126fe3226ed38391931f5ec39a7802e8e556acee1384672c8f23406571309240d801fb350bb83efed838077270fbee6f17462a53fdcfc82338a72ea8c077a372dd8ad9c27f8da85ee31b42e4ebbeb9043ce1c16e8fef367b8a86c9d8c7ee7ad7077301c828fc489ee02e9d877a06ffeb44889c5aafc6fd55e8e70479ca28133a34c69156516285169b27cbbba1a72b9a53261e34adb6482a7c578f4a118925f3485e201c2520ede1d0fe065ccfdd96b50a3f365f69dd7c4f51085cf9bfca25a76ff5a27c2a9e9bab67c36a94f7ad072afb456e5c8f87640a4b53cc534723031ddfa032b5f56e35978a7360ed0112e8f8588bb0db96d06e3724129b39e8b3290d149aa63e040a48da888ab60a072eb08f6faf6addf6b9c72cf11d5f41cb86957793d8e1880464688b475c3564b13480af7586a3a8dbe2085966e284d4c6846247edfbb0980f9cae508c851deeb3cb7aa4ec668e8fd7d51397447ec036dbd86770dcd05501a00df68ed6339c7a03dc1a5370db5e00d948a3e9ab42c048816c5a21cc2c566994dd135c52c16363268fd2ef52c42534fc8c1ffa7fa890a8e4ab35bf15e6f358f628ea2f12f099256fcd00ae43c608fc241e162f03ade1b53f30db169dca592517605787b8388fd6413a382693d62089ddfcf6043ea1a4017aeb02417a84fe192b9254aff3b414d56554a23b94bce15668233ef7a734c87d20448f1e020ee4ef723541d536115fa9fb611134ca8f3565392a898a90bdf4aa22e67dac033de56f69ad887443d41704967c711ba48e9927dec72911b2a015c7a0440a38b89a5e4a61dc4184be2a0a8eaef878260340cfd1f5162c56007bfd7b0ea8ee9d04df98fd535b66b6a6a3326abedeb15cd789ce6886073a85b226991daaa61cf2557c0069b908478c21b2c541346fdb6167e68054396d004bf3717a33eac9f2a07a2c8694b294eaf315b29d7c57adbf62a0d74573482c9474a5ecc95113da940821459e31e87cbcf64d91356bcc2f1c1f9f3a1508ec04c6306ebca259fe54646cfd253c81ec6303912c0a5d45a8a685656788c99bcf63ccc0f7730e366e8b47ea99c4c9068756151fe5ad91884ab709894d486e5eccfe74a2ed931b0f742108712a6d0b5003d4c5e15dfb42ec472a0168f1618a64e6ddb7d3d800275e27998a50cbd7348e86046eb395238d16ea993c62b47975e51ac01365974953f341c8058cc0b98ec3dc3de0a4e0b67604a9bf284e3c7fad9fa71a8857d405e4fde154564535c911d2dcee8271d1e78b5a523b458278f914ec5bc151ae6ea6879bc5a6a7b96d288e8fe0d7cd8cd101502e0f656eef16f8ac5e69d63c2f61d5f96954cf2e8c42f5e8f5814ebb6aa83266dd3d3e2e14d37f56678a9c6658491de9b6c81650d84bf5a3b9e5ff512901d22fd8d9d143c731125a290dfc5d8339ccb341e0ee659b4c6ae1bfc4b982efb190a86df36f398bb0a2b0fd249d7518bdd752c0c915dd9753966d85cf14763cdb6d696c49ac579c575ae6e95cf9d90482f20ccdd7596b7bedff8aa6073b7dbb97ece58ca2c9d52f0dad3daca1c4fc05f85d90ad6b69a73e71a958e82a6ca55986f6f35f54530cc01bf62eb7fe55c88162d560a8eb176b2b7c11df173d3f9ecc3beb0a8b7a527ffad3cee0e0a9f6004521e7bf2b9e5c640e2cc74386c89d560fd8793526844dccbb0a3cfa73a61d3dce08ce8c6ec6edf273cebfe60fb9c08ce2c29440b848062bf616116e6f0cbbc46d81414001735a308390e3e90f6fc218881b0e5f2e269377c8cecc49dd16e64b54aa7c061aa2dc81bde3b7b71ccde8ff6345d7390aefa051067291de39ec593e28cc8af1bc4897775ad15ed4a969d183c2a9e3331eefd5357cc168af498a8544d4f98db767b0be1944c183dcc34c509b050ee047b5745cbed304a78b5a19c40c752e96134417fab46ef3d6b3b502b6d4e1b389e5db6464f2e486dff815d6af0f82eca20667705cc4272d1756228cc447167cb5c1a7c2fc706c9d0686c5e4f50366dc6349221504b33bc2184d76f508b99578aefea9c4cabf287792bc6e46dc02ed593c6c76fe89ca9d648900d6b196c21e848ed3262dff3c2ef37c4f9d2a422850e8b792220cae5b51cf27f44b5d8f3d96551c9b923cc8dca97cb5d034d0c170873e92aa24c4ce5ce4e14d5c3aa4e4732c560aaa057011bb98b6901610e2fa1851493f408dda1e2ca40c5b876f7897b3d66b23682efa66ac4ada27b65f35c039ccd083a9fb3530bd716275228548ebae46a729669138f4754a672bbceacfa9e3d4c1b23238a3d9f7fb3df6674013aca3be05d70416b341867501a4c3e85277cf92b9164abef141fc468ae455b72a4cdbdaf0560e4003c7f91b8203f0a32c55c8da187973a8f13e786e5c27bc8df162a0ab53b1fffbfbea23b0e8ffb4ff3bf11ea1f3095c6a136c0920c1d08ad6caec2589e44c8bc0c9fb59d6839330ff3c7a1824f3e527ce3d892ab840c2938cccc91e644be3430c847c993f10a0189e315dd45f7e144829fea0d70970c03c98d226d148f073c93e6291795711ebc10247d2a27bfae26960f362858a589cafdfe17feceaf589f78893f60432c57aca842b3d054517bb34db792afa3d3ec33726114e5844db3fa1c08ead097c4dbc42496b943048b2bd34096dbab269021e387ad3bf0d29abfacd21d8f4e07a8d1c2043a941d57048f7834cae2aac67c3d65e3db9e63a7975ec353a8426becdbf3a3de03c7f21c568a7bdbefe2d1cbaaf6ed74d03b75ad7ca503ee805b0017d15e771d651fdd7cf31770607e6b0491787acb4b7b610d2d22be8e4c0cf06508000b9f65175da7f122beaa40c2d9e2276fde9b5bdb3739084dab58cfababde5b7bec7988871d02feac78515580137b86b476e270da6faf35d0e7cbe0cf4bdc94eac3d2e8374d5142a856ceab7c83d2eedd012b2729909f126face0887602f8178f6a839da1219d0c5a287bbf426ff57d36ab9b6181358c36a51b35d71a455c476f30f0817e781d596d78554769eeb81eab9a9f6f72ddeb096536cb2b41b29536909183f2b74ec005668ec88973005a8ecc6148b98eb6d1840a3a1267db34a75769f8a2583fdf3b31b0d2fe76a7b31a82132e1bf76cbeab5c8fecf38e6b3736773d65c4996e6e78c1c99fc98d2c1fdab4f638d27957305bbdd96358dc9597d355acc4b85073f85a38be87697d602cb5ceb74666120ae51a56f682a3ab7c416b9a47afe9cd2038c5da90e5e6e8e29232c31df7b5589eb127b839cb771114234e8915b0c6d62fec59ce6565ad6c1690dee8b2f2713e97f9a5ef877013db4b31203b2710101eefca13ee50c228c46108ad7d24b8a24f693207e1cb8e5943070c02e78837357f765f7b8417ea9ed4c127b5f45372fa7da3ec8dac60aa0b3c7080832a3c67aac4ed9c05aab78bccdb616a0a3bc05a8e8209b51d705e050752c9d44386e678098a6c5e0a23ffbe87c9fa8ad87a439c6a046d256389e4aaee0761774bdf5ed852b1b1afc33787622c8a6a165dc79920ec72d45f4113817571e61c7a268385b83c0d0d75875f4d529823be3f5d509212a794efd79ff29781da12bfcb1891c15a256ad9fc0271e1715e938d4d0d15903423b90996e5418093d46644e3aa032195141a787b2e1bcfaa2bf57d19b5c703e1fc41373c197c8df3b2ba5d7c98dff45158889b3eebc8ae31b1d5b42e589019c36cec5628d3619aa991d4703f6329699d40296d6c30b3591ce4d9578292b75d6aa70fee25944b6ce2ca6d209dbca0b8255a31caf42e35032e5687bf426f602b678fd3558cae7457981343de5a8199a543f72fa3a7c17798d9c54ac2be517a3281da8ac0f994b03e3495a20f57d247ab331ee97d8a7ed1013af257f51a96f779fd47c58f9db8286d538e6d3cff4ded581d13a3c09564a7a249ffe4e67709f3e4cd72cbc3dff9929a5fba73586697c648356be7732a084fc495f782c6d94e2cbfdc5291298559915dd500cacac4c54a7a55ce92288257aee1492100861f97a13bf40e6b4ad439077f2886c08d506e628cbc326f399274d703f67012e6134a4f255b63626eb694e14a51dd2d161fc9a04003918d241b02634680927367a20381201ef6deda95246a7ed02ef8fca50ca8672340d6fb47f4fab11a4fe0fdfe866e922964f12b6fe4b6a61609a1b8e07e97713c867e9e687bfe37805d744b8bd7a65247936162aa888d06f21ccc56c5a5d9b1680050e93b7eac9adc0956c9c54b25baa5b1c1d50b37de7b0c7662d87844d25f23c13461944770b43a2ff0d7463a0d48e79f1c59de05c2aca99cc8b82afeef6cee58de2acd03f8502229b4fe30e0db63b339d90dd7b4edfab39c58fa11b8ac04128e0341edbce1f48a5f6be0288b5f6b67c7a2f16996d824522f3e7baca21d5978011ce1d234865a174b4400eaa0007434502147d8840b58de0930deffa40baa4ac53c5f70287653a9e46b7b233459d464bd9b23095d83f71be7d65611a6251734396f5a09b0f414aac6ab11b26d10896365781314c381ed63d4ad5d96dd7abfeab20030163892e857ebbdd01070985bdd28dca671c916a8c854cdb4afb54144937100cd935de2a9eacb734fe97c03435977ee767e87eb8f654a2af48565034b14d67bb604403a0dd29335a548d96f3aeef717c110099f09c87e0d4b59e0df50401742c41a569e9c71f45e870aa43170467818d8bf7e422de5c4380bd0788b0e819cb7648ba9b527ec0b9172900932a94cd71da0fa162a3582f79b6b2d15e47d7e0b883756113822233716b585a087ebcc43c5fcda64cee515", @nested={0x470, 0x48, [@generic="49a15060cf0a2c2b64e8fcdcefc1b901854b5473af30416eafafa2f6e51d7ab83ecc181c6df5eeb2", @generic="a083449310301c9a6b54fc8014f9ccbbd39e0a88ecc7785e75bbc0a7e603d5234d20b7c5f882", @generic, @generic="b0b09bec6a4cf8a9d410973a3cbb70b831d55f3a724c96f2fddcb3d8e3c8195c91e327843073366a783805de4648297af3f72cb00601eb9abae75116734c1623df4aacc06d957f3c0f401f663dc99923003327e3a179ed4ca85c90b83e4a232de3569971976254566b191f373c8dfd57f63330c04372c29b6a25c29e4fe40ab76268566b8139b2e86aca656472cfe2a53b5ecb1c9b64663d18", @typed={0x4, 0x63}, @generic="ffd3b4f10ec98ad48b72159c70b8299c003d23fd3da95ae1c3d8307676001ddd7e9bf50fabbf54d7bca1da167745e74fb453dc91fc57981a980b0c5a1c438156781a6b4868df6b3e9c80882d1ddd1a778e9445a5818f54ba64b3904e9b60ad90df3b4b2cc931012612f2851558888d56552ccc2c7e1093cc16dd490a99aacc5547e712877a84f57a876c1b468cfc4388f9ec", @generic="8ba3df06f4b3e2deb03618232da23f3cd4435d86bc3b28d49d13064953b7087334f1794e6444c698e46f0c4b2f52475c2c8d349f3027af11600ee1db42fa7e69623012625b4147073bf97703d677f756d4f52ce3279d564e824249bb877492e372bd29c3858b9ee25f5f7fbcdcb42ed61d73fae6e4e553ee5c832c1141019ab547d55b4d17819638271cb446b6651008ce1cebeaf5827d4e94a017f3a9d17807462a82eda01e5822ff7d3d60ec75ffc9130c1dba1ff6d89ee13f5cba47ff80d30c8b02f085b76849e22a6aa0d8359506519980e6c99b8d2a8a21", @typed={0xc8, 0x66, @binary="a2280b3ea6080e94f9e548eb05817ff9f86faa1dee60667704adf2ce80758f8039d71a2a06cb74c064c411954b4ac50ac9d630ff68fb10a61168c53fb2dd0d375728922195bddb5aeaf1452fa5aaaa23c47e38e47a620a27e22a2a2546eac68357acdf849679591447d9c4b28baa065a87f14e09269332ea278e6ba2ea190c2ed35ec4e3027f58fba6dad0ad0be029f6ad6f405c4dac27196c6d6d2141a1de3c7e57eb51b0da982b6039d643442c51804841daabeab81e6b78045fedd8d34e524c"}, @generic="468982be0f35ead729d0bd4b6c3bf48666bb561ecf34ebb954c091c7953a830b743e306f380e4a5ee0177505212721727f2aa7c3d5723f61335c59173f128d4867a0028875315ff34f1ee46fd8196ef38e5a5bea25f53ce0069d8d8b5315b32c73667ad1bf6c8d5d0d1df617ae57b534a2955fb966e6536650b0fd56596536de8f48375bd2da99", @generic="d0934db0b02078eaeaa8866801d8fcbc88f42e5d290439c2491caf5dae20a0cd56e1cae4a8230c9065bfb022646791929fb93d66a285214ac0d52a6463afff71d54756a7fbd8ea4cd210041a0fc22659446ebc4553af6998dc7960c99afa56e1d206eb8fb7f9328c1c92a9ca9b0755a78793c8507cd323ed8f9663ced85519bcfaeba99a7140d10110f651f2a8a801ec5648e94f9a540623970b4da5525fb43aa5771b839606388680310aee551fb92e2ef69c5a4e3d27c5e00dd3de415b4c1d52dc948e"]}, @typed={0x4, 0x2}]}, 0x173c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 06:30:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae64, 0x0) dup3(r4, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae64, 0x0) dup3(r6, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae64, 0x0) dup3(r8, r9, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r11 = getegid() sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000000)="ea2384130b0bc1afca92970020af9360acb4c5896b04ce43f2bcc6d585b2b0cca41070dc1651da0be0e519273c2b9beb90d7fb8469cb66d20e17194ca6b494ab6d8099363c729ab74aa5af06d67950d63c9f392b0f20a7610e6b6211cf6ebe00a88eee6ccbd7c4746adcc020f57fca0e46346f66afa835554f1d9dc7e6d91bea5dcea1a4e92f7695", 0xffffffffffffff0d}], 0x1, &(0x7f0000000140)=[@rights={{0x0, 0x1, 0x1, [r2, r5, r6, r8]}}, @cred={{0x0, 0x1, 0x2, {0x0, r10, r11}}}]}], 0x1, 0x0) 06:30:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x4}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:33 executing program 1: unshare(0x20000000) r0 = socket$inet6(0xa, 0x400000000001, 0x5) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r1, 0x9}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r2, r5, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r6, 0x0) 06:30:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae64, 0x0) dup3(r4, r5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) r7 = timerfd_create(0x0, 0x0) fstat(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r9) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r11, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) r14 = timerfd_create(0x0, 0x0) fstat(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r15) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000380)) r17 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r17, 0x40206417, 0x0) ioctl$NS_GET_OWNER_UID(r17, 0xb704, &(0x7f0000000700)=0x0) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r20) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000000)="ee9de6ba52d5817479e9372b7c5f2c2a8bb88485c4af84c54a6a1cb4c5e6e39b1676d1e769fc32bc4666b0e5f3def4f9db732481a13f7fed19ae01283d9a403b939a1c9b911ef5c7b9c5a9c5080661392ee9af0ecab9b214d905b422b937e30f75c54a178273bf06fb85b6f14a7e9e6fed5879ca3943aef458026b83ff6c009356ce1fbafda8c6b26b383e0c933e207d0b384201c3be7bd54585c59b5ec322912c6332329a38f05289ddc5934781b622bf855a79ed1a8c03412e7136250b78bef9945be38240defda61a95b8a9f5d6a7f7fa6a505b7b09221fe4"}, {&(0x7f0000000240)="54d372ae80b3390479fa476a71914bd6ebb8021b6ecf1af85fbdded36187c703aaf46ddee3648484eea52de0bbd1c14504dbfa0fafe86e8a5c7f614af01d74606e303b582649922d95a9eac095610035aa8e082f5b816267c542acd5ad1280f0ec293441f533435801d179ba281d3c25e6d138a7a3f4b00d481073f3fe6b703544ba0f82ac9aaa81c21ddd90f2492113f2c7199da099c251ca03b346a671831b8f7554d975dddeb9664762ae7fa85f2a7500ed922670656fdaf9841c457ae297e5e8432a1fd908cbf09ce066ee88306fe144f3ef17f4d9d7000539d87e1790f7fb350c2a499e083e"}, {&(0x7f0000000100)="a7b200627add9c4dc15e428f8b7c51e75ac3a56cae06e58a47da45b589ab37e8ff118eeeaa03b93fcd52e16ef1e1e0b35d9b2345ef4eafd53277cbce3fa797dfa88237eb2b218f9ba6e42e7a09b2ed90f1761ba5a852f3d41d69f7b28da7ac044433accc077586ce84c22a0041d8efa1169f584b61e3e09a02403bbf8abb8e1ab7a19c1e8f6c5e89ff300ee138ad09ca6d12807b66afc0c0d58e5d4786"}, {&(0x7f0000000340)="5d2b29e8d0616e45c707315f5a05876748aca70f07f78edd8f6f8802be83864919f78c64610f8951c7fef67e1e38536010afa7e5f96bb09487afc1028365a1b249c50b82e8f81e162dd92ea3c27d0476e51a11416853f1b9b9392e774d970601be8f70620f966a2265a414d84cec25759f1235ffcf7a71f31be0184037522ebd1f99cf39aacf84f0c289"}, {&(0x7f0000000400)="04817c6dc4adecb1cd95e6a300847ba6e2346a90222f6ac7a6706e5a8df0b9e8ccaad80d19b95cf6a3df893002c8b1bae7af93ab872ec49b7ffaeacf88ba532e97cacce9827a9520dae8344e37fb2e7a3c1f5912a8ea2f361ae6fc09d25a331f479a627b3f689fc984da3d6d63b493cfdedbe9"}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="aad06fbdfce7a305f1067a7aa08957019dc76c10995ff403ef48fcaaacddb995ffbd3911d2efc801305cf72c777c518a44cb46fb414f7fefb20e882eebcdcccba358"}, {&(0x7f0000000540)="cf4a93d995b0b53640c6a308a1c3c783af65e05b95692f3b24342f6c8f5a52fc8041514a4da72f128bf185ea44974282cd3f934ed3f448716074cf67031a8b45881a30d74a029a7c661e9212ae109b92a7fa10e5e86bf6f51dcef6c085fd97"}], 0x92, &(0x7f0000000740)=[@rights={{0x0, 0x1, 0x1, [r2, r4]}}, @cred={{0x0, 0x1, 0x2, {r6, 0xffffffffffffffff, r9}}}, @cred={{0x0, 0x1, 0x2, {r10, r12, 0xffffffffffffffff}}}, @cred={{0x0, 0x1, 0x2, {r13, r8, r15}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {r16, r18, r15}}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, r20, r15}}}]}], 0x1, 0x0) 06:30:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x100000001, 0xd}) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:34 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x180000, 0x20000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup3(r0, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002c00c2bef050000000000000000000000000000000020000000000000001a1001dfccc630000000000000000"], 0x58}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x3}, 0x0, 0x0, &(0x7f0000000340)={0x5, 0xc, 0xffffffff, 0x7}, &(0x7f0000000380)=0x800, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xda2}, [@func, @alu={0x7, 0x1, 0x9, 0xb, 0x5, 0x7ffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x0, 0x16466d69eb21d7fe, 0xa, 0xfffffffffffffffc}, @generic={0x7, 0x1, 0xa, 0x9, 0x9}, @func, @jmp={0x5, 0x0, 0x1, 0x6, 0x0, 0xb73075a9a35f5d0d, 0xffffffffffffffff}, @map={0x18, 0xb, 0x1, 0x0, r1}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, &(0x7f00000001c0), 0x1f00, 0x0, [], r8, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x7, 0x2, 0x8}, 0x10, r9, r3}, 0x78) 06:30:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="03000001", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7c, &(0x7f0000000240)={r4, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7ff}, &(0x7f0000000080)=0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)={r5, 0x1, 0xccce, "a10e553b05de9bce22ad7dee6d2605b959984c02173af6891038f8cf3f587eeb8caf403ba47fa19c77ff2c28db0f2d5e386ce3ce287fa2cae45e8a78ddb9802e149f57a099c6326c7172cfa7c348211cbb460683257e35369d76305aa9004b4d75ac2e437699adeae670620cf57a0f10e7dd1d459a6f03d90c51a1c24906e928f857ba957415b5223112c57f17c2c9f4ff6592544f9852f32bd6f2e0b42a2495f080debc4e3f6fc73ac407c2"}) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x6, 0x0, 0x0, 0xfffffffe}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x904, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4006800}, 0xc44) close(r1) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r1, r6, 0x0, 0x80001d00c0d0) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000000000)=0x6) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:34 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x5}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 566.950685][T20109] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.014802][T20109] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 06:30:34 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4641, 0x0) unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 567.323016][T20136] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 567.354524][T20136] CPU: 0 PID: 20136 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 567.362988][T20136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.373176][T20136] Call Trace: [ 567.376481][T20136] dump_stack+0x11d/0x181 [ 567.380849][T20136] dump_header+0xaa/0x449 [ 567.385201][T20136] oom_kill_process.cold+0x10/0x15 [ 567.390442][T20136] out_of_memory+0x231/0xa00 [ 567.395661][T20136] mem_cgroup_out_of_memory+0x128/0x150 [ 567.401285][T20136] try_charge+0xb5c/0xbe0 [ 567.405769][T20136] ? __rcu_read_unlock+0x66/0x3c0 [ 567.410856][T20136] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 567.416353][T20136] __memcg_kmem_charge+0xde/0x240 [ 567.421394][T20136] __alloc_pages_nodemask+0x26c/0x310 [ 567.426787][T20136] alloc_pages_current+0xd1/0x170 [ 567.431947][T20136] pte_alloc_one+0x18/0x50 [ 567.436446][T20136] __pte_alloc+0x2d/0x220 [ 567.440864][T20136] copy_page_range+0x151a/0x1a80 [ 567.446019][T20136] ? __vma_link_rb+0x3f4/0x440 [ 567.451247][T20136] dup_mm+0x74a/0xba0 [ 567.455264][T20136] copy_process+0x36f3/0x3b50 [ 567.460049][T20136] _do_fork+0xfe/0x6e0 [ 567.464170][T20136] ? __read_once_size+0x5a/0xe0 [ 567.469028][T20136] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 567.474773][T20136] ? _copy_to_user+0x84/0xb0 [ 567.479381][T20136] __x64_sys_clone+0x12b/0x160 [ 567.484241][T20136] do_syscall_64+0xcc/0x370 [ 567.488755][T20136] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 567.494646][T20136] RIP: 0033:0x45a679 [ 567.498724][T20136] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 567.518899][T20136] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 567.527330][T20136] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 567.535368][T20136] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.543387][T20136] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 567.551380][T20136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 567.559444][T20136] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:30:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x8004) [ 567.577713][T20136] memory: usage 307200kB, limit 307200kB, failcnt 1887 [ 567.592992][T20136] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 567.606950][T20136] Memory cgroup stats for /syz1: [ 567.607125][T20136] anon 257904640 [ 567.607125][T20136] file 131072 [ 567.607125][T20136] kernel_stack 3760128 [ 567.607125][T20136] slab 19783680 06:30:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x6}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 567.607125][T20136] sock 0 [ 567.607125][T20136] shmem 0 [ 567.607125][T20136] file_mapped 0 [ 567.607125][T20136] file_dirty 135168 [ 567.607125][T20136] file_writeback 0 [ 567.607125][T20136] anon_thp 232783872 [ 567.607125][T20136] inactive_anon 262144 [ 567.607125][T20136] active_anon 257900544 [ 567.607125][T20136] inactive_file 0 [ 567.607125][T20136] active_file 0 [ 567.607125][T20136] unevictable 0 [ 567.607125][T20136] slab_reclaimable 3379200 [ 567.607125][T20136] slab_unreclaimable 16404480 [ 567.607125][T20136] pgfault 39567 [ 567.607125][T20136] pgmajfault 0 [ 567.607125][T20136] workingset_refault 1155 [ 567.607125][T20136] workingset_activate 99 [ 567.607125][T20136] workingset_nodereclaim 0 [ 567.607125][T20136] pgrefill 997 [ 567.607125][T20136] pgscan 7598 [ 567.607125][T20136] pgsteal 5048 [ 567.709592][T20136] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19681,uid=0 06:30:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @rand_addr=0x5}, 0x4, 0x2, 0x0, 0x4}}, 0x26) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 567.744220][T20136] Memory cgroup out of memory: Killed process 19681 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae64, 0x0) dup3(r1, r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="720000000b624896b5e44e2a0ba92bb44c03df5fdecf58ec58e7cc46b41f469a2ec11b8f9f5cb3b154198888bd398a131785fc3184e6df739838ef241084ed2ac62fdeea79aa963ae751194518cb0bfb77220ed4fdd912bc456f490785f181007320a4cbc206761f9b43aea2e9a27866abae223f"], &(0x7f0000000180)=0x7a) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000000)) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x484202) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) sendmmsg$unix(r2, &(0x7f0000000180), 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)) [ 568.175424][ T26] audit: type=1800 audit(1575354635.944:121): pid=20153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16865 res=0 06:30:36 executing program 1: unshare(0xc000800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0xc536, 0xba4, @name="aa70bfa7ac7437e8a9667d0992ad52293c77e12a08b57daec1f7c7402d4d94db"}) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000)=[{&(0x7f0000000980)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) 06:30:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x6, 0x3e}) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000180), 0x471, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x206280, 0x0) r3 = open(&(0x7f0000000180)='./file0/file0\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={r4, &(0x7f0000000100)=""/23}) 06:30:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x6bb3c7616c065867, 0x0, 0x4e20}, 0x22a, &(0x7f0000000180)=[{&(0x7f0000002340)="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"}, {&(0x7f0000000140)="31263de0dd8bb78962000d7bad560102f01d305f33188b"}], 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x100, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000100)={0x7df, 0x4, 0x1f, 0x9, 0x81, 0x1, 0x4}, 0xc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae64, 0x0) dup3(r5, r6, 0x0) ftruncate(r5, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) setsockopt$packet_buf(r4, 0x107, 0x3d, &(0x7f0000000000)="ee5b0d76e152d5a3a4a322ee826538c527dff54493bb6fa1a294d546e2da0c050e0e95657d99ca5621b3d2ea51db673fbb80e04090e2204059661cf3db95dc1e5ce71a4826ae3de4e0cecfb061cabb854337723d5acda75528bbe99484e6acd13bc8934c097dbfafae2776dba17d241eac7377ca6b1383", 0x77) [ 568.603666][T20193] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 568.766185][T20193] CPU: 1 PID: 20193 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 568.774606][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.784675][T20193] Call Trace: [ 568.788089][T20193] dump_stack+0x11d/0x181 [ 568.792440][T20193] dump_header+0xaa/0x449 [ 568.796853][T20193] oom_kill_process.cold+0x10/0x15 [ 568.802060][T20193] out_of_memory+0x231/0xa00 [ 568.806758][T20193] mem_cgroup_out_of_memory+0x128/0x150 [ 568.812322][T20193] try_charge+0xb5c/0xbe0 [ 568.816680][T20193] ? __rcu_read_unlock+0x66/0x3c0 [ 568.823900][T20193] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 568.829558][T20193] __memcg_kmem_charge+0xde/0x240 [ 568.834698][T20193] __alloc_pages_nodemask+0x26c/0x310 [ 568.840091][T20193] alloc_pages_current+0xd1/0x170 [ 568.845245][T20193] pte_alloc_one+0x18/0x50 [ 568.849705][T20193] __pte_alloc+0x2d/0x220 [ 568.854055][T20193] copy_page_range+0x151a/0x1a80 [ 568.859014][T20193] ? __read_once_size.constprop.0+0x12/0x20 [ 568.865097][T20193] dup_mm+0x74a/0xba0 [ 568.869139][T20193] copy_process+0x36f3/0x3b50 [ 568.873899][T20193] _do_fork+0xfe/0x6e0 [ 568.879147][T20193] ? __read_once_size+0x5a/0xe0 [ 568.884309][T20193] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 568.890074][T20193] ? _copy_to_user+0x84/0xb0 [ 568.894853][T20193] __x64_sys_clone+0x12b/0x160 [ 568.899749][T20193] do_syscall_64+0xcc/0x370 [ 568.904365][T20193] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 568.910343][T20193] RIP: 0033:0x45a679 06:30:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="ff00000020ac5983332831154efaaaf2e2138e47528442b1b50c24bdec68d14bb542d2cddcce3f84d0501892faa435b13bf43b8d98b1222c8306238654197a442bf37eb4c0c2eabbe978ef91116cf4353d03bcaa271e22ed3edb09edb81d876c5f16f64e3e4891efe44b9c82e12c8e134791", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7c, &(0x7f0000000240)={r4, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x6, 0x2}, &(0x7f0000000040)=0xc) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000003c0)={{0x2, 0xfd, 0x7, 0x1, 0x95, 0x3}, 0x7, 0x8001, 0x1ff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r5, 0x3}, &(0x7f00000000c0)=0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x200000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000380)=""/45) 06:30:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x7}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 568.914442][T20193] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.934445][T20193] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 568.943028][T20193] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 568.951271][T20193] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.959952][T20193] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 568.967948][T20193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 568.975927][T20193] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 569.004319][T20193] memory: usage 307200kB, limit 307200kB, failcnt 1923 [ 569.011356][T20193] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 569.039220][T20193] Memory cgroup stats for /syz1: [ 569.039383][T20193] anon 257994752 [ 569.039383][T20193] file 131072 [ 569.039383][T20193] kernel_stack 3796992 [ 569.039383][T20193] slab 19783680 [ 569.039383][T20193] sock 0 [ 569.039383][T20193] shmem 0 [ 569.039383][T20193] file_mapped 0 [ 569.039383][T20193] file_dirty 135168 [ 569.039383][T20193] file_writeback 0 [ 569.039383][T20193] anon_thp 232783872 [ 569.039383][T20193] inactive_anon 262144 [ 569.039383][T20193] active_anon 257994752 [ 569.039383][T20193] inactive_file 0 [ 569.039383][T20193] active_file 0 [ 569.039383][T20193] unevictable 0 [ 569.039383][T20193] slab_reclaimable 3379200 [ 569.039383][T20193] slab_unreclaimable 16404480 [ 569.039383][T20193] pgfault 39699 [ 569.039383][T20193] pgmajfault 0 [ 569.039383][T20193] workingset_refault 1155 [ 569.039383][T20193] workingset_activate 99 [ 569.039383][T20193] workingset_nodereclaim 0 [ 569.039383][T20193] pgrefill 1030 [ 569.039383][T20193] pgscan 7598 [ 569.039383][T20193] pgsteal 5048 06:30:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x269341, 0x124) symlinkat(&(0x7f0000000000)='./file0/file0\x00', r2, &(0x7f0000000080)='./file0/file0\x00') 06:30:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 569.183499][T20193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16322,uid=0 [ 569.203739][T20193] Memory cgroup out of memory: Killed process 16322 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:37 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000000)=0x9) [ 569.508151][T20198] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 569.536364][T20198] CPU: 0 PID: 20198 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 569.545562][T20198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.555998][T20198] Call Trace: [ 569.559285][T20198] dump_stack+0x11d/0x181 [ 569.563614][T20198] dump_header+0xaa/0x449 [ 569.567995][T20198] oom_kill_process.cold+0x10/0x15 [ 569.573210][T20198] out_of_memory+0x231/0xa00 [ 569.577837][T20198] mem_cgroup_out_of_memory+0x128/0x150 [ 569.583566][T20198] try_charge+0xb5c/0xbe0 [ 569.588175][T20198] ? __rcu_read_unlock+0x66/0x3c0 [ 569.593238][T20198] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 569.598833][T20198] __memcg_kmem_charge+0xde/0x240 [ 569.603966][T20198] __alloc_pages_nodemask+0x26c/0x310 [ 569.609413][T20198] alloc_pages_current+0xd1/0x170 [ 569.614453][T20198] pte_alloc_one+0x18/0x50 [ 569.618872][T20198] __pte_alloc+0x2d/0x220 [ 569.623305][T20198] copy_page_range+0x151a/0x1a80 [ 569.628532][T20198] ? __vma_link_rb+0x3f4/0x440 [ 569.633453][T20198] dup_mm+0x74a/0xba0 [ 569.637478][T20198] copy_process+0x36f3/0x3b50 [ 569.642248][T20198] _do_fork+0xfe/0x6e0 [ 569.646342][T20198] ? __read_once_size+0x5a/0xe0 [ 569.651649][T20198] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 569.657451][T20198] ? _copy_to_user+0x84/0xb0 [ 569.662038][T20198] __x64_sys_clone+0x12b/0x160 [ 569.666845][T20198] do_syscall_64+0xcc/0x370 [ 569.671511][T20198] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 569.677565][T20198] RIP: 0033:0x45a679 [ 569.681478][T20198] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 569.701561][T20198] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 569.710067][T20198] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 569.718055][T20198] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.726032][T20198] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 569.734188][T20198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 569.742202][T20198] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 569.763492][T20198] memory: usage 307200kB, limit 307200kB, failcnt 1951 [ 569.777011][T20198] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 569.795056][T20198] Memory cgroup stats for /syz1: [ 569.795232][T20198] anon 258015232 [ 569.795232][T20198] file 131072 [ 569.795232][T20198] kernel_stack 3796992 [ 569.795232][T20198] slab 19783680 [ 569.795232][T20198] sock 0 [ 569.795232][T20198] shmem 0 [ 569.795232][T20198] file_mapped 0 [ 569.795232][T20198] file_dirty 135168 [ 569.795232][T20198] file_writeback 0 [ 569.795232][T20198] anon_thp 232783872 [ 569.795232][T20198] inactive_anon 262144 [ 569.795232][T20198] active_anon 258015232 [ 569.795232][T20198] inactive_file 0 [ 569.795232][T20198] active_file 0 [ 569.795232][T20198] unevictable 0 [ 569.795232][T20198] slab_reclaimable 3379200 [ 569.795232][T20198] slab_unreclaimable 16404480 [ 569.795232][T20198] pgfault 39699 06:30:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x8}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 569.795232][T20198] pgmajfault 0 [ 569.795232][T20198] workingset_refault 1155 [ 569.795232][T20198] workingset_activate 99 [ 569.795232][T20198] workingset_nodereclaim 0 [ 569.795232][T20198] pgrefill 1030 [ 569.795232][T20198] pgscan 7598 [ 569.795232][T20198] pgsteal 5048 [ 569.899080][T20198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20187,uid=0 [ 569.941376][T20198] Memory cgroup out of memory: Killed process 20187 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 06:30:37 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:37 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0)=0x8, 0x4) close(r1) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) r5 = openat(r4, &(0x7f0000000000)='./file0/file0\x00', 0x1, 0x47) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x9, 0x3f, 0xfffe}) sendmmsg$unix(r0, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f00000000c0)=""/223, &(0x7f0000000240)=0xdf) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x10000, @empty, 0x6}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x9, @rand_addr="a47202727e690c7ac1b6d2986960b564", 0x7}, @in6={0xa, 0x4e20, 0xfffffbff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}], 0x64) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 570.326019][T20256] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 570.360580][T20256] CPU: 0 PID: 20256 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 570.369725][T20256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.379801][T20256] Call Trace: [ 570.383151][T20256] dump_stack+0x11d/0x181 [ 570.387500][T20256] dump_header+0xaa/0x449 [ 570.391931][T20256] oom_kill_process.cold+0x10/0x15 [ 570.398371][T20256] out_of_memory+0x231/0xa00 [ 570.403054][T20256] mem_cgroup_out_of_memory+0x128/0x150 [ 570.408801][T20256] try_charge+0xb5c/0xbe0 [ 570.413411][T20256] ? __rcu_read_unlock+0x66/0x3c0 [ 570.418633][T20256] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 570.424373][T20256] __memcg_kmem_charge+0xde/0x240 [ 570.430028][T20256] __alloc_pages_nodemask+0x26c/0x310 [ 570.435622][T20256] alloc_pages_current+0xd1/0x170 [ 570.440842][T20256] pte_alloc_one+0x18/0x50 [ 570.445853][T20256] __pte_alloc+0x2d/0x220 [ 570.450970][T20256] copy_page_range+0x151a/0x1a80 [ 570.456295][T20256] ? __vma_link_rb+0x3f4/0x440 [ 570.461789][T20256] dup_mm+0x74a/0xba0 [ 570.465871][T20256] copy_process+0x36f3/0x3b50 [ 570.470920][T20256] _do_fork+0xfe/0x6e0 [ 570.475156][T20256] ? __read_once_size+0x5a/0xe0 [ 570.480006][T20256] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 570.485960][T20256] ? _copy_to_user+0x84/0xb0 [ 570.490624][T20256] __x64_sys_clone+0x12b/0x160 [ 570.495781][T20256] do_syscall_64+0xcc/0x370 [ 570.500283][T20256] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 570.506625][T20256] RIP: 0033:0x45a679 [ 570.510618][T20256] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 570.531650][T20256] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 570.540069][T20256] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 570.548186][T20256] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.556371][T20256] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 570.564539][T20256] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 06:30:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 570.572799][T20256] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:30:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 570.674658][T20256] memory: usage 307200kB, limit 307200kB, failcnt 1984 [ 570.697423][T20256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 570.712081][T20256] Memory cgroup stats for /syz1: [ 570.712299][T20256] anon 258007040 [ 570.712299][T20256] file 131072 [ 570.712299][T20256] kernel_stack 3760128 [ 570.712299][T20256] slab 19783680 [ 570.712299][T20256] sock 0 [ 570.712299][T20256] shmem 0 [ 570.712299][T20256] file_mapped 0 [ 570.712299][T20256] file_dirty 135168 [ 570.712299][T20256] file_writeback 0 [ 570.712299][T20256] anon_thp 232783872 [ 570.712299][T20256] inactive_anon 262144 [ 570.712299][T20256] active_anon 258007040 [ 570.712299][T20256] inactive_file 0 [ 570.712299][T20256] active_file 0 [ 570.712299][T20256] unevictable 0 [ 570.712299][T20256] slab_reclaimable 3379200 [ 570.712299][T20256] slab_unreclaimable 16404480 [ 570.712299][T20256] pgfault 39765 [ 570.712299][T20256] pgmajfault 0 [ 570.712299][T20256] workingset_refault 1155 [ 570.712299][T20256] workingset_activate 99 [ 570.712299][T20256] workingset_nodereclaim 0 [ 570.712299][T20256] pgrefill 1030 [ 570.712299][T20256] pgscan 7598 [ 570.712299][T20256] pgsteal 5048 [ 570.838877][T20256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16247,uid=0 [ 570.855549][T20256] Memory cgroup out of memory: Killed process 16247 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 570.889558][ T1069] oom_reaper: reaped process 16247 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 06:30:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x300}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 571.022730][ T26] audit: type=1800 audit(1575354638.794:122): pid=20253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16903 res=0 [ 571.117577][ T26] audit: type=1800 audit(1575354638.824:123): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16903 res=0 06:30:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100, 0x501080) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r5, 0x0, 0x5, &(0x7f0000000040)='hash\x00'}, 0x30) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) r9 = timerfd_create(0x0, 0x0) fstat(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r10) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r13) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r16) r17 = timerfd_create(0x0, 0x0) fstat(r17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r18) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r20) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="00054f224a5d94b76b26a3528e00adfd7ec99bf1", @ANYRES32=r11, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r16, @ANYRES32=r18, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r20, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}], 0x1, 0x0) 06:30:39 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x0) [ 571.305446][ T26] audit: type=1800 audit(1575354639.074:124): pid=20270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16921 res=0 06:30:39 executing program 4: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/49, 0x31, 0x2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r3 = semget(0x0, 0x1, 0x102) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x20, 0x1, 0x2, 0x8001, 0xffff, 0x3, 0xfff, 0x7, 0x3, 0x6]) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000000)) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x2ac}], 0x8d9, 0x40000) 06:30:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:39 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) close(r3) 06:30:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x500}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r2, r3) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:40 executing program 2: ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x100000001, 0x7}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x98) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xc33505f0c82800f1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 06:30:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000080)=0x5) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x49249249249252b, 0x0) 06:30:40 executing program 1: unshare(0x20000000) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:30:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x67, 0x2, {0x12, 0x2, 0x8}}, 0x14) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)="b06d47ede58b115ac254ff9db7a6912e99610dfc7d78868b4f2580152f6787ddb4feca50eea89a51f6", 0x29}, {&(0x7f00000000c0)="6d10baa362fa6b217668ece319e51b5accab2c0f30402e2b7b0e1e184559cf932ea7be66c1d2707e49a823071d2e3d620381f520c3c052db3be30c1a2b3adf33329de2147cdd1eb4bec8414f40d79e31e2fc85c3bd3d008422b68aa634e3f96b5620299a26a3664951ebbff63d938c15574cfb6a", 0x74}, {&(0x7f0000000140)="dee9b190f8d89ac9cb01", 0xa}, {&(0x7f0000000240)="170fd079528e3c70335d40a9c29064366fa98b38f9089cd1fa38c45974b456619a3219ce965bbf3510b01707574b234cdb6dc5993b6d25bd1983d35181f86d0ac6dc3c21a86eb10c", 0x48}, {&(0x7f0000000180)="c3c27125ed73d8cd24aec64002662665a6a26d6840d8971cefc71deed06db99b2d645aef941c387f704cd791e815ad3b45219a", 0x33}, {&(0x7f00000002c0)="4c76330e915e75bb7aea344ed51373f8b2ef", 0x12}], 0x6, &(0x7f0000000e40)}], 0x1, 0x0) 06:30:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000000)={{0x3, @name="219055a0aba8c659b3ebdcd5a792773864e906ea1e9eb03851bc4d8dd8dc4a0d"}, "53aff481489b90e852cd05fcf75f403e48f565ecd09fa10908d8f71382e0e808", 0x3}) socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x600}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = open(&(0x7f0000000000)='./file0/file0/file0\x00', 0x4002, 0x183) r2 = accept4(r1, 0x0, 0x0, 0xc0800) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) renameat2(r3, &(0x7f0000000040)='./file0/file0\x00', r5, &(0x7f0000000080)='./file0/file0/file0\x00', 0x1) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) r4 = dup2(r3, 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000100)={@generic={0x11, "7e768d080cf78a4324498cca7c982c16c15a8c6daa19416b3a063ce226d12ac66774b81e695b8c270030a865b2f9d12d0cb1a0fa62f3eb40da4dc29ed4495c7ad7f06079910ff864af58080252609917b7976e16c34acff5e68becae4855742723353d5839deab350c90964360735ea16e2cda1dd82bfa75ef4ccce5d7fc"}, {&(0x7f0000000000)=""/178, 0xbb}, &(0x7f00000000c0), 0x68}, 0xb0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:41 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x868a721b99c399f3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x2, 0x8101, [{0xc87}, {0xfffffc00, 0x0, 0x4}]}) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002c00c2bef050000000000000000000000000000000020000000000000001a1001dfccc630000000000000000"], 0x58}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@remote, 0x5a, r6}) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000000)="45d4a2ba2a91e0d1323dce8971203d5acfe78dd1ec8524b713b89347b18dca5970276627b4f2fd457e6abb2098cdf0b7a43a38f31f6960c0a6dac1c08dd3a9eca1b6c1cf23876c848ddada4eabc2aa544df725c7", 0x54}, {&(0x7f0000000080)="6ecb1f0c6051a204645ac063e1d1f4f139dcf5831e4482fb08917a60902382fc22511a052fd1105514a9d3002f28b8f46fd25513de28ab11a569460f42072ec92ae7a557b512a0a45073ddfd20464f65239bd94fb28f49ded132803a390e0ff4645d3d7fa31daf32bbca971e01764d6810084937b2271e126582d7337372bed3743a2602e87aefe6dfb11ab3a679", 0x8e}, {&(0x7f0000000140)}, {&(0x7f0000000240)="cecbf776092570bf8314b3d7f2f21ab5aae8d4a5b55a48d3401ae1483a6b6e3f7e089954ace1cfb483134266bdb430a3730de40d1010fa76ba1908b0214dac62f0cf32acf07107b716fdbdc0348eb1ca2f22fb626a1479000c6f66178d5fe971f01c99c575565275a2a3c422e7c55a56c3273e03b50d37b18c2031a7d503b58cb486a0c7d3cddff564ed9bcb306c695215f12ff158fb14cf0919104cdad3c1881f0d296240", 0xa5}, {&(0x7f0000000300)="f94e5085bc2c9f99986c49f9ab4ef1641564e53fb469aeb96102e4632034dec8e50876284e56b3fdd3abdf5cee2a32a0a82d330c57f149f6e3997a5d168dfd4e3d18857255831bbd39bdd74b9d31259f549f1e31fc608ccbf851033131a22a5927d100a6edecf5f7da782ad6aca7faf7b96ba59a14be43c122ad2e9e2729fac261aa4ac05aa70624e09a1f4dc2019514222ad52b039040405688ee8d6ac9f56170e8b877f77e8695cd3cc2ee9b71e2ab71e45addba39caea8d364f05cefb312c28112ab063b83d", 0xc7}], 0x5, &(0x7f0000000e40), 0x0, 0x851}], 0x1, 0x0) [ 573.481382][T20392] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 06:30:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x0, 0x803, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)={@local}, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="bcef6376150001000004000010006b2fe0cc7ba626ab55a14f42ff858272a3203611c611ebfe9c0a"], 0x28) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f00000001c0)=0x500000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r3, 0x0, 0x9, &(0x7f0000000240)=""/83, &(0x7f0000000180)=0x53) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x492492492492567, 0x0) r5 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, 0x0) getsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f00000002c0)=""/79, &(0x7f0000000340)=0x4f) lsetxattr$smack_xattr_label(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64\x00', &(0x7f0000000140)={'hash\x00'}, 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000000)={0x103, 0x2, 0x8, 'queue0\x00', 0x7fff}) 06:30:41 executing program 1: unshare(0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r1, 0x0) 06:30:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 573.684547][T20402] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 573.856154][T20407] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 573.865147][T20407] FAT-fs (loop4): Filesystem has been set read-only 06:30:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000140)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000000)="d98f956256d002c2d0ae0e3de3e317187704bd6a1dd349e06afe2102f8d8092804856132186ad84452c23f4e4ea4381344e27439a052881c7c591fae4ecc7947aea7fb9e81b6c9350deaeb6f912015cb27b39abfae691ae9e6554e4a1fe505ecb21bfebe68f639b3d2c282c62fca87d8d4100054f74705a3b27e8da9f4127b9d26f747116ae63ccaabef70348b2ded019b7dfcab578dcbba509ec11de247d43498d87593b65a1f752bd3c4d3e06ec655436186d953aaf0538571827742df8c3c34beddf617ecf1", 0xc7}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x4f9, 0x8000, 0x8, 0x9, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e23, 0x6, @local, 0x1}}, 0x7fffffff, 0x22c8, 0x3f, 0x4, 0x8}, 0x98) 06:30:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x700}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 574.058778][T20406] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500) [ 574.110027][T20412] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) 06:30:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/$ev\xaf\x01\x00\x00\x00\x00\x00\x00\x00k\x00', 0x80, 0x0) getdents64(r2, &(0x7f0000001340)=""/4096, 0x1000) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:42 executing program 1: unshare(0x20000000) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'\x00', {0x2, 0x4e23, @rand_addr=0xfcff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup3(r1, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r5, 0x0) 06:30:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xa, "569c65e9b4b9ea786152"}, &(0x7f0000000340)=0x12) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r3, 0x1}, &(0x7f00000003c0)=0x8) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socket$inet_tcp(0x2, 0x1, 0x0) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00', 0x0, 0x3, 0x1, [], 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/151}, &(0x7f00000002c0)=0x78) chdir(&(0x7f0000000000)='./file0/file0\x00') r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0x1004c010}], 0x1, 0x0) [ 574.754038][T20445] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 574.785681][ T26] audit: type=1800 audit(1575354642.554:125): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16931 res=0 [ 574.799022][T20445] CPU: 0 PID: 20445 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 574.813666][T20445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.823719][T20445] Call Trace: [ 574.827051][T20445] dump_stack+0x11d/0x181 [ 574.831422][T20445] dump_header+0xaa/0x449 [ 574.835761][T20445] oom_kill_process.cold+0x10/0x15 [ 574.841350][T20445] out_of_memory+0x231/0xa00 [ 574.846005][T20445] mem_cgroup_out_of_memory+0x128/0x150 [ 574.851567][T20445] try_charge+0xb5c/0xbe0 [ 574.856187][T20445] ? __rcu_read_unlock+0x66/0x3c0 [ 574.861252][T20445] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 574.866745][T20445] __memcg_kmem_charge+0xde/0x240 [ 574.871892][T20445] __alloc_pages_nodemask+0x26c/0x310 [ 574.877282][T20445] alloc_pages_current+0xd1/0x170 [ 574.882336][T20445] pte_alloc_one+0x18/0x50 [ 574.886844][T20445] __pte_alloc+0x2d/0x220 [ 574.891402][T20445] copy_page_range+0x151a/0x1a80 [ 574.896351][T20445] ? debug_smp_processor_id+0x4c/0x172 [ 574.902050][T20445] ? __vma_link_rb+0x3f4/0x440 [ 574.906835][T20445] dup_mm+0x74a/0xba0 [ 574.910972][T20445] copy_process+0x36f3/0x3b50 [ 574.915693][T20445] _do_fork+0xfe/0x6e0 [ 574.919787][T20445] ? __read_once_size+0x5a/0xe0 [ 574.925002][T20445] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 574.930830][T20445] ? _copy_to_user+0x84/0xb0 [ 574.935493][T20445] __x64_sys_clone+0x12b/0x160 [ 574.940328][T20445] do_syscall_64+0xcc/0x370 [ 574.944916][T20445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 574.950811][T20445] RIP: 0033:0x45a679 [ 574.954740][T20445] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 574.974533][T20445] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 574.982946][T20445] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 574.990921][T20445] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 06:30:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300), 0x0, 0x20000001) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) 06:30:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 574.998910][T20445] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 575.006897][T20445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 575.014881][T20445] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 575.039645][T20445] memory: usage 307200kB, limit 307200kB, failcnt 2043 [ 575.046832][T20445] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 575.065590][T20445] Memory cgroup stats for /syz1: [ 575.072901][T20445] anon 256565248 [ 575.072901][T20445] file 131072 [ 575.072901][T20445] kernel_stack 3870720 [ 575.072901][T20445] slab 20070400 [ 575.072901][T20445] sock 0 [ 575.072901][T20445] shmem 0 [ 575.072901][T20445] file_mapped 0 [ 575.072901][T20445] file_dirty 135168 [ 575.072901][T20445] file_writeback 0 [ 575.072901][T20445] anon_thp 230686720 [ 575.072901][T20445] inactive_anon 262144 [ 575.072901][T20445] active_anon 256565248 [ 575.072901][T20445] inactive_file 0 06:30:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0xff00}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 575.072901][T20445] active_file 0 [ 575.072901][T20445] unevictable 0 [ 575.072901][T20445] slab_reclaimable 3379200 [ 575.072901][T20445] slab_unreclaimable 16691200 [ 575.072901][T20445] pgfault 40458 [ 575.072901][T20445] pgmajfault 0 [ 575.072901][T20445] workingset_refault 1155 [ 575.072901][T20445] workingset_activate 99 [ 575.072901][T20445] workingset_nodereclaim 0 [ 575.072901][T20445] pgrefill 1063 [ 575.072901][T20445] pgscan 7598 [ 575.072901][T20445] pgsteal 5048 06:30:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) bind$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) openat$cgroup_int(r6, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 575.218713][T20445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16215,uid=0 [ 575.244562][T20445] Memory cgroup out of memory: Killed process 16215 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 575.558968][ T26] audit: type=1800 audit(1575354643.334:126): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16961 res=0 06:30:43 executing program 1: unshare(0x74000380) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x7c, 0x4, 0x1, r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r3, 0x0) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x548) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r5, 0x0) [ 575.944142][T20492] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 575.964203][T20492] CPU: 0 PID: 20492 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 575.972753][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.982842][T20492] Call Trace: [ 575.986176][T20492] dump_stack+0x11d/0x181 [ 575.990530][T20492] dump_header+0xaa/0x449 [ 575.994876][T20492] oom_kill_process.cold+0x10/0x15 [ 576.000110][T20492] out_of_memory+0x231/0xa00 [ 576.004730][T20492] mem_cgroup_out_of_memory+0x128/0x150 [ 576.010297][T20492] try_charge+0xb5c/0xbe0 [ 576.014733][T20492] ? __rcu_read_unlock+0x66/0x3c0 [ 576.019796][T20492] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 576.025333][T20492] __memcg_kmem_charge+0xde/0x240 [ 576.030451][T20492] __alloc_pages_nodemask+0x26c/0x310 [ 576.035842][T20492] alloc_pages_current+0xd1/0x170 [ 576.040892][T20492] __pmd_alloc+0x4b/0x2b0 [ 576.045277][T20492] copy_page_range+0x158b/0x1a80 [ 576.050234][T20492] ? __read_once_size.constprop.0+0x12/0x20 [ 576.056149][T20492] ? anon_vma_interval_tree_insert+0x1d6/0x260 [ 576.062320][T20492] ? __write_once_size.constprop.0+0x20/0x20 [ 576.068418][T20492] ? vm_get_page_prot+0x90/0x90 [ 576.073378][T20492] dup_mm+0x74a/0xba0 [ 576.077381][T20492] copy_process+0x36f3/0x3b50 [ 576.082089][T20492] _do_fork+0xfe/0x6e0 [ 576.086173][T20492] ? __read_once_size+0x5a/0xe0 [ 576.091227][T20492] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 576.096977][T20492] ? _copy_to_user+0x84/0xb0 [ 576.101680][T20492] __x64_sys_clone+0x12b/0x160 [ 576.106496][T20492] do_syscall_64+0xcc/0x370 [ 576.111022][T20492] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 576.116946][T20492] RIP: 0033:0x45a679 [ 576.120923][T20492] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:30:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x1000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 576.140556][T20492] RSP: 002b:00007fdd6be40c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 576.149127][T20492] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 576.157203][T20492] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.165213][T20492] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000 [ 576.173229][T20492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be416d4 [ 576.181211][T20492] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 576.194640][T20492] memory: usage 307200kB, limit 307200kB, failcnt 2077 [ 576.209479][T20492] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 576.218349][T20492] Memory cgroup stats for /syz1: [ 576.218498][T20492] anon 256552960 [ 576.218498][T20492] file 131072 [ 576.218498][T20492] kernel_stack 3907584 [ 576.218498][T20492] slab 20205568 [ 576.218498][T20492] sock 0 [ 576.218498][T20492] shmem 0 [ 576.218498][T20492] file_mapped 0 [ 576.218498][T20492] file_dirty 135168 [ 576.218498][T20492] file_writeback 0 [ 576.218498][T20492] anon_thp 230686720 [ 576.218498][T20492] inactive_anon 262144 [ 576.218498][T20492] active_anon 256552960 [ 576.218498][T20492] inactive_file 0 [ 576.218498][T20492] active_file 0 [ 576.218498][T20492] unevictable 0 [ 576.218498][T20492] slab_reclaimable 3379200 [ 576.218498][T20492] slab_unreclaimable 16826368 [ 576.218498][T20492] pgfault 40557 [ 576.218498][T20492] pgmajfault 0 [ 576.218498][T20492] workingset_refault 1155 06:30:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0xd0100, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="712bd9ab64822b", 0x7) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x1, './file0/file0\x00'}, 0xffffff44, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x4924924924925c2, 0x0) [ 576.218498][T20492] workingset_activate 99 [ 576.218498][T20492] workingset_nodereclaim 0 [ 576.218498][T20492] pgrefill 1063 [ 576.218498][T20492] pgscan 7598 [ 576.218498][T20492] pgsteal 5048 [ 576.319856][T20492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20484,uid=0 06:30:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 576.389386][T20492] Memory cgroup out of memory: Killed process 20484 (syz-executor.1) total-vm:72844kB, anon-rss:2200kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 06:30:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:44 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x2204400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) accept(r2, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 577.030955][T20525] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 577.054593][T20525] CPU: 1 PID: 20525 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 577.062990][T20525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.073422][T20525] Call Trace: [ 577.078052][T20525] dump_stack+0x11d/0x181 [ 577.082405][T20525] dump_header+0xaa/0x449 [ 577.087188][T20525] oom_kill_process.cold+0x10/0x15 [ 577.092351][T20525] out_of_memory+0x231/0xa00 [ 577.096966][T20525] mem_cgroup_out_of_memory+0x128/0x150 [ 577.102789][T20525] try_charge+0xb5c/0xbe0 [ 577.107142][T20525] ? __rcu_read_unlock+0x66/0x3c0 [ 577.113258][T20525] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 577.118814][T20525] __memcg_kmem_charge+0xde/0x240 [ 577.123923][T20525] __alloc_pages_nodemask+0x26c/0x310 [ 577.129352][T20525] alloc_pages_current+0xd1/0x170 [ 577.134441][T20525] pte_alloc_one+0x18/0x50 [ 577.138991][T20525] __pte_alloc+0x2d/0x220 [ 577.143557][T20525] copy_page_range+0x151a/0x1a80 [ 577.148517][T20525] ? __read_once_size.constprop.0+0x12/0x20 [ 577.154557][T20525] ? anon_vma_interval_tree_insert+0x1d6/0x260 [ 577.160750][T20525] ? __write_once_size.constprop.0+0x20/0x20 [ 577.167107][T20525] dup_mm+0x74a/0xba0 [ 577.171116][T20525] copy_process+0x36f3/0x3b50 [ 577.175832][T20525] _do_fork+0xfe/0x6e0 [ 577.180019][T20525] ? __read_once_size+0x5a/0xe0 [ 577.184884][T20525] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 577.190624][T20525] ? _copy_to_user+0x84/0xb0 [ 577.195270][T20525] __x64_sys_clone+0x12b/0x160 [ 577.200129][T20525] do_syscall_64+0xcc/0x370 [ 577.204690][T20525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 577.210658][T20525] RIP: 0033:0x45a679 [ 577.214636][T20525] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.234332][T20525] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 577.242761][T20525] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 577.250753][T20525] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000002204400 [ 577.258771][T20525] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 577.266810][T20525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 577.274887][T20525] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 577.287642][T20525] memory: usage 307200kB, limit 307200kB, failcnt 2102 [ 577.304392][T20525] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 577.321923][T20525] Memory cgroup stats for /syz1: [ 577.322115][T20525] anon 256552960 [ 577.322115][T20525] file 131072 [ 577.322115][T20525] kernel_stack 3870720 [ 577.322115][T20525] slab 20205568 [ 577.322115][T20525] sock 0 [ 577.322115][T20525] shmem 0 [ 577.322115][T20525] file_mapped 0 [ 577.322115][T20525] file_dirty 135168 [ 577.322115][T20525] file_writeback 0 [ 577.322115][T20525] anon_thp 230686720 [ 577.322115][T20525] inactive_anon 262144 [ 577.322115][T20525] active_anon 256552960 [ 577.322115][T20525] inactive_file 0 [ 577.322115][T20525] active_file 0 [ 577.322115][T20525] unevictable 0 06:30:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x2000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:45 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000000)={0x20, 0x7, 0x40}) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 577.322115][T20525] slab_reclaimable 3379200 [ 577.322115][T20525] slab_unreclaimable 16826368 [ 577.322115][T20525] pgfault 40623 [ 577.322115][T20525] pgmajfault 0 [ 577.322115][T20525] workingset_refault 1155 [ 577.322115][T20525] workingset_activate 99 [ 577.322115][T20525] workingset_nodereclaim 0 [ 577.322115][T20525] pgrefill 1063 [ 577.322115][T20525] pgscan 7631 [ 577.322115][T20525] pgsteal 5048 06:30:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 577.566063][T20525] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16149,uid=0 [ 577.610332][T20525] Memory cgroup out of memory: Killed process 16149 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 577.892936][ T26] audit: type=1800 audit(1575354645.664:127): pid=20529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16904 res=0 06:30:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000240)=""/217, 0xd9}], 0x3, &(0x7f0000000340)=""/197, 0xc5}, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000440)={'security\x00'}, &(0x7f00000004c0)=0x54) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae64, 0x0) dup3(r1, r2, 0x0) r3 = dup3(r1, 0xffffffffffffffff, 0x80000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x640}, 0xc, &(0x7f0000000000)={&(0x7f0000001240)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffc96}, 0x1, 0x0, 0x0, 0x28914}, 0x889c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:46 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x8000) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000040)) setns(r2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000080)={0x1409d, 0x1}) 06:30:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x3000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xf2f298ac9b0dca71) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1ff, 0x9, 0x7f, 0x3}, {0x7f, 0x1f, 0xef, 0x564}, {0x7, 0x9, 0x81, 0x9}]}) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 579.281345][ T26] audit: type=1800 audit(1575354647.054:128): pid=20559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16932 res=0 06:30:47 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x13\x00', 0x498241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) rt_tgsigqueueinfo(0x0, r1, 0x2e, &(0x7f0000000000)={0x15, 0x6, 0x200}) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x4000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:47 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000180)={0xa, {0x6, 0x20, 0x98ba, 0xfffffffa}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x25c, 0x4) modify_ldt$write(0x1, &(0x7f0000000140)={0xfe, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) fsetxattr$security_ima(r5, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "277286ae23fed432364359bc2cc53e54"}, 0x11, 0x0) setns(r5, 0x0) 06:30:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x78, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e23, @multicast1}], 0xfffffffffffffc93) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) 06:30:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x4924924}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)='\x00', 0x1, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r8 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r8, 0x40206417, 0x0) accept$ax25(r8, &(0x7f00000003c0)={{}, [@rose, @bcast, @bcast, @remote, @rose, @null, @rose, @default]}, &(0x7f0000000440)=0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='team_slave_0\x00', 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7c, &(0x7f0000000240)={r7, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000480)=0x9, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)={r7, 0x5, 0x5, [0x2, 0x8, 0x1, 0x1, 0x3]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r10, 0x5}, &(0x7f0000000100)=0x8) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:48 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') 06:30:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 581.270398][T20652] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 581.288436][T20652] CPU: 0 PID: 20652 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 581.296807][T20652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.306955][T20652] Call Trace: [ 581.310258][T20652] dump_stack+0x11d/0x181 [ 581.314634][T20652] dump_header+0xaa/0x449 [ 581.318987][T20652] oom_kill_process.cold+0x10/0x15 [ 581.324118][T20652] out_of_memory+0x231/0xa00 [ 581.328931][T20652] mem_cgroup_out_of_memory+0x128/0x150 [ 581.334639][T20652] try_charge+0xb5c/0xbe0 [ 581.339170][T20652] ? __rcu_read_unlock+0x66/0x3c0 [ 581.344228][T20652] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 581.349744][T20652] __memcg_kmem_charge+0xde/0x240 [ 581.354789][T20652] __alloc_pages_nodemask+0x26c/0x310 [ 581.360182][T20652] alloc_pages_current+0xd1/0x170 [ 581.365232][T20652] pte_alloc_one+0x18/0x50 [ 581.369695][T20652] __pte_alloc+0x2d/0x220 [ 581.374338][T20652] copy_page_range+0x151a/0x1a80 [ 581.379489][T20652] ? __vma_link_rb+0x3f4/0x440 [ 581.384337][T20652] dup_mm+0x74a/0xba0 [ 581.388450][T20652] copy_process+0x36f3/0x3b50 [ 581.393156][T20652] _do_fork+0xfe/0x6e0 [ 581.397250][T20652] ? __read_once_size+0x5a/0xe0 [ 581.402176][T20652] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 581.407912][T20652] ? _copy_to_user+0x84/0xb0 [ 581.412518][T20652] __x64_sys_clone+0x12b/0x160 [ 581.417323][T20652] do_syscall_64+0xcc/0x370 [ 581.421872][T20652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 581.427853][T20652] RIP: 0033:0x45a679 [ 581.431766][T20652] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.451980][T20652] RSP: 002b:00007fdd6be61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 581.456384][ T26] audit: type=1800 audit(1575354649.224:129): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16931 res=0 [ 581.460481][T20652] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679 [ 581.460491][T20652] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.460532][T20652] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 581.460542][T20652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be626d4 [ 581.460552][T20652] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff 06:30:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x5000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 581.628754][T20652] memory: usage 307200kB, limit 307200kB, failcnt 2381 [ 581.642807][T20652] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 581.676561][T20652] Memory cgroup stats for /syz1: [ 581.676685][T20652] anon 255311872 [ 581.676685][T20652] file 69632 [ 581.676685][T20652] kernel_stack 3981312 [ 581.676685][T20652] slab 20631552 [ 581.676685][T20652] sock 0 [ 581.676685][T20652] shmem 0 [ 581.676685][T20652] file_mapped 0 [ 581.676685][T20652] file_dirty 135168 [ 581.676685][T20652] file_writeback 0 [ 581.676685][T20652] anon_thp 228589568 [ 581.676685][T20652] inactive_anon 262144 [ 581.676685][T20652] active_anon 255311872 [ 581.676685][T20652] inactive_file 155648 [ 581.676685][T20652] active_file 0 [ 581.676685][T20652] unevictable 0 [ 581.676685][T20652] slab_reclaimable 3514368 [ 581.676685][T20652] slab_unreclaimable 17117184 [ 581.676685][T20652] pgfault 41151 [ 581.676685][T20652] pgmajfault 0 [ 581.676685][T20652] workingset_refault 1353 [ 581.676685][T20652] workingset_activate 132 [ 581.676685][T20652] workingset_nodereclaim 0 [ 581.676685][T20652] pgrefill 1096 [ 581.676685][T20652] pgscan 8945 [ 581.676685][T20652] pgsteal 6261 06:30:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae64, 0x0) dup3(r1, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, [], [{0x6, 0x8, 0x5, 0x3, 0x1f, 0x8}, {0x7f, 0x9, 0xffffffff, 0x240000000000, 0x3, 0x7}], [[], [], [], []]}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 581.813985][T20652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16060,uid=0 [ 581.833204][T20652] Memory cgroup out of memory: Killed process 16060 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:50 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000200)="67b6b2fbe4491ee07a6d97fbc8f1e7c26ff6c7eb54c144a12ab9b139735c15b8f6a5aa5351064ab3c3530335bc435d985b8868cf214a650fd8cf85a91477d8d12f1ed8367cb92627a972be1ada98c15b364f3047ad5808ee979a7e9aebce905b2bf1a4afe6058aa65383c85887444f4fdd00451d26e4edfa8ca3bfeb38875bbdfe288184fb5377e31d35ac9ffdb461c4388025387e53efc64a355abc1838b0608404a95b7248ec666b6e6f58f0cf586669af5985509c22b4a0c41fe485af38aba27e121e259836d799cbccaeeefab4ad6272e16826a0ccbd2d305a016791", 0xde}, {&(0x7f0000000000)="834648c8344af183a74ed5f6b6fbcbbb7b8964c289c60178f6", 0x19}, {&(0x7f0000000080)="22248271b766f958ba2d1b822e603068f96e2bc3eaf1b6d18685d4d5e1ae64be065da10057b4fec42386fc1adc9234802f2ade21dac82760bbe77e58248d7c4a", 0x40}, {&(0x7f0000000300)="608d78753175b36b2c9e0f3f2739b960", 0x10}, {&(0x7f0000000340)="73d54d805768fe8ec2aa546cc78bf5fb0a246e7821b5a6b10c00ce45de33953982393b1155796c2b18f0d9e8e56a92dafe2d52cdbcb69ab8eb6486f585752d6ce5880e56b5054983a48d470d6c44a6ca443ea56b1e1d45a51f94410db5220c86140ede35bae9b8a0b0edfa4e672b94c1412653f2c2609bff49f8f986576e31ad935667a7607bdf17cd8c2126e9651bef39788c860a3061e3821af78680f8344acd026f53bf3bcbd508c998d7d75fddd2a6d147c04f24dd8eff6c1760867f913c0d", 0xc1}], 0x5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pUiZ_f\x00') setns(r3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x7, 0x4, [{0x0, 0x15, 0x1bd391f, 0x0, 0x0, 0x3300}, {0x80000000, 0x3, 0x80000000, 0x0, 0x0, 0x88}, {0x2e, 0x6, 0x4, 0x0, 0x0, 0x200}, {0x1, 0x6, 0x9, 0x0, 0x0, 0x4}]}) 06:30:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200000, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) fcntl$getown(r0, 0x9) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r4 = timerfd_create(0x0, 0x0) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r5) lstat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) r9 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r9, 0x40206417, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r11) write$FUSE_ATTR(r9, &(0x7f0000000340)={0x78, 0x0, 0x3, {0x10001, 0x7, 0x0, {0x2, 0x2, 0x5c, 0x7fff, 0x0, 0x3ff00000, 0xfffffffe, 0x2, 0x7, 0x3, 0x7fff, r11, r6, 0x200, 0x7}}}, 0x78) r12 = timerfd_create(0x0, 0x0) fstat(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r13) r14 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r15 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r15, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r15, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000380)) stat(&(0x7f0000000780)='./bus\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = timerfd_create(0x0, 0x0) fstat(r18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r19) r20 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r21 = ioctl$KVM_CREATE_VM(r20, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r21, 0xae64, 0x0) dup3(r20, r21, 0x0) r22 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r23 = ioctl$KVM_CREATE_VM(r22, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r23, 0xae64, 0x0) dup3(r22, r23, 0x0) r24 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r25 = ioctl$KVM_CREATE_VM(r24, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r25, 0xae64, 0x0) dup3(r24, r25, 0x0) r26 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r27 = ioctl$KVM_CREATE_VM(r26, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r27, 0xae64, 0x0) dup3(r26, r27, 0x0) r28 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) r29 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r30 = ioctl$KVM_CREATE_VM(r29, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r30, 0xae64, 0x0) dup3(r29, r30, 0x0) r31 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r32 = ioctl$KVM_CREATE_VM(r31, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r32, 0xae64, 0x0) dup3(r31, r32, 0x0) sendmmsg$unix(r1, &(0x7f0000000940)=[{&(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000500)="716f4cddc57472cc3c880ce8a2db40457609a29cbbde18c30974f1e82823e0862889f8a0c6f3b6406fa7afcaf3e79912ba42f395ec43549d385e0b1434814eb8f248ef3d4d63624cea87dec86fd20191b11f1a52b25a8b6f0c712cc10dcc94d6a6f788301572c1a881ea45d308c95fe34d97b4a58610c2bb77d76399e6382842c507f7f3b5fb57cdb76340340834e2a8a2634a4d18c8183ce5130bc32539e43e8feb4a08947d78fc65547904934618c9a5f4a9341235fc4823f5839105e0877cf3c7a630834a4760bc2f492b4499", 0xce}, {&(0x7f0000000600)="d10ff402b59f7e468dad29fe90b6166f033d8f3a56a8f9bf53163535561ed76d8cad78cbc732fb84b2f648c8683ed00461d01a9640b5763b629cc921c8e1c1421ed5f49ee3d8f520f5ce5a0031d5a90fae1f53771bffc9e217f23e7f8bc8cd03a14039205ad13a08c3e8a3ada4403e55388dba395abf1b354eb7f93648b9e314fe407ff7258fdad258fcbd70e416966b184f8a1d36690521b2193e90ca74fa0eb49bfefed472baefd41c9cf2888c20c9b3f03e76af5b9a2dea6974d70b7ea04a72378be0abd58b9d7d51dc4d47049563ff5029ff9decae125552a14955afc0705fdb773dbd12fc", 0xe7}, {&(0x7f0000000700)="da62430919c0fdff2189eaa350c7cb047d2970bcd1cc07dcd077b6aca6afad469358f50cf7b2f5ffdd842acdbc004024f4e171c3d5737bd9c64b5987d3e76ff47282e0d5f4c4c951bd3e33579006d637511e368efed1ddf644905e02e10065216d2d94b138", 0x65}], 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r19}}}, @rights={{0x28, 0x1, 0x1, [r21, r2, r14, r0, r4, r23]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r14, r4, r25, r26, r28, r29, r31]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x90, 0x8068173}], 0x1, 0x8000) 06:30:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x6000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:50 executing program 1: unshare(0x20000000) socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x3c1000, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x6a65f30e}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:30:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x200000, 0x8) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000000)) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) shmctl$IPC_RMID(r4, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:51 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:30:51 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10040, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x917, 0x0, 0x4, {0x4, @sdr={0x31384142, 0x9efa}}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xf8e7451930d45f62, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40), 0x3d}], 0x8d9, 0x0) 06:30:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:51 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/147, 0x93) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x7000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:51 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) write$cgroup_int(r0, &(0x7f00000000c0)=0x3, 0x12) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x2}) [ 584.186779][T20747] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 584.280408][T20747] CPU: 1 PID: 20747 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 584.288892][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.298957][T20747] Call Trace: [ 584.302325][T20747] dump_stack+0x11d/0x181 [ 584.306679][T20747] dump_header+0xaa/0x449 [ 584.311138][T20747] oom_kill_process.cold+0x10/0x15 [ 584.316271][T20747] out_of_memory+0x231/0xa00 [ 584.320919][T20747] mem_cgroup_out_of_memory+0x128/0x150 [ 584.326499][T20747] try_charge+0xb5c/0xbe0 06:30:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x7fffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000180)={0x3, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae64, 0x0) dup3(r5, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='9p\x00', 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport='privport'}, {@msize={'msize', 0x3d, 0x2}}, {@noextend='noextend'}, {@nodevmap='nodevmap'}, {@loose='loose'}], [{@euid_eq={'euid', 0x3d, r8}}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'rmd320-generic\x00'}}, {@subj_type={'subj_type', 0x3d, '#'}}]}}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x10000, 0x80, 0x7}, 0xc) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 584.330954][T20747] ? s_show+0x590/0x5d0 [ 584.335131][T20747] ? __rcu_read_unlock+0x66/0x3c0 [ 584.340180][T20747] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 584.345736][T20747] __memcg_kmem_charge+0xde/0x240 [ 584.350834][T20747] __alloc_pages_nodemask+0x26c/0x310 [ 584.356227][T20747] alloc_pages_current+0xd1/0x170 [ 584.361353][T20747] __vmalloc_node_range+0x2d7/0x4c0 [ 584.366708][T20747] __vmalloc+0x4d/0x70 [ 584.370793][T20747] ? vmx_vm_alloc+0x40/0x50 [ 584.375320][T20747] vmx_vm_alloc+0x40/0x50 [ 584.379710][T20747] kvm_dev_ioctl+0x137/0xca0 [ 584.384488][T20747] ? kvm_put_kvm+0x650/0x650 [ 584.389150][T20747] do_vfs_ioctl+0x991/0xc60 [ 584.393667][T20747] ? tomoyo_file_ioctl+0x34/0x40 [ 584.398686][T20747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.404942][T20747] ksys_ioctl+0xbd/0xe0 [ 584.409115][T20747] __x64_sys_ioctl+0x4c/0x60 [ 584.413722][T20747] do_syscall_64+0xcc/0x370 [ 584.418242][T20747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 584.424212][T20747] RIP: 0033:0x45a679 [ 584.428113][T20747] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 584.447912][T20747] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.456418][T20747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 584.464499][T20747] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 584.472479][T20747] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 584.480453][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 584.488426][T20747] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 584.520835][T20747] memory: usage 307200kB, limit 307200kB, failcnt 2470 [ 584.539752][T20747] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 584.570372][T20747] Memory cgroup stats for /syz1: [ 584.570549][T20747] anon 253927424 [ 584.570549][T20747] file 69632 [ 584.570549][T20747] kernel_stack 4091904 [ 584.570549][T20747] slab 20922368 [ 584.570549][T20747] sock 0 [ 584.570549][T20747] shmem 0 [ 584.570549][T20747] file_mapped 0 [ 584.570549][T20747] file_dirty 0 [ 584.570549][T20747] file_writeback 0 [ 584.570549][T20747] anon_thp 226492416 [ 584.570549][T20747] inactive_anon 262144 [ 584.570549][T20747] active_anon 253927424 [ 584.570549][T20747] inactive_file 155648 [ 584.570549][T20747] active_file 0 [ 584.570549][T20747] unevictable 0 [ 584.570549][T20747] slab_reclaimable 3514368 [ 584.570549][T20747] slab_unreclaimable 17408000 [ 584.570549][T20747] pgfault 41613 [ 584.570549][T20747] pgmajfault 0 [ 584.570549][T20747] workingset_refault 1353 [ 584.570549][T20747] workingset_activate 132 [ 584.570549][T20747] workingset_nodereclaim 0 [ 584.570549][T20747] pgrefill 1096 [ 584.570549][T20747] pgscan 9011 [ 584.570549][T20747] pgsteal 6261 06:30:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {}, 0x683b}) socket$alg(0x26, 0x5, 0x0) [ 584.775798][T20747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16004,uid=0 [ 584.812758][T20747] Memory cgroup out of memory: Killed process 16004 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 584.872890][ T1069] oom_reaper: reaped process 16004 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 584.893081][T20744] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 584.930583][T20744] CPU: 0 PID: 20744 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 584.939272][T20744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.949464][T20744] Call Trace: [ 584.952914][T20744] dump_stack+0x11d/0x181 [ 584.957296][T20744] dump_header+0xaa/0x449 [ 584.961643][T20744] oom_kill_process.cold+0x10/0x15 [ 584.966769][T20744] out_of_memory+0x231/0xa00 [ 584.971383][T20744] mem_cgroup_out_of_memory+0x128/0x150 [ 584.977000][T20744] try_charge+0x7f5/0xbe0 [ 584.981407][T20744] ? __rcu_read_unlock+0x10/0x3c0 [ 584.986490][T20744] mem_cgroup_try_charge+0xd2/0x260 [ 584.991766][T20744] mem_cgroup_try_charge_delay+0x3a/0x80 [ 584.997418][T20744] __handle_mm_fault+0x17ab/0x2c70 [ 585.002558][T20744] handle_mm_fault+0x21b/0x530 [ 585.007511][T20744] __do_page_fault+0x456/0x8d0 [ 585.012414][T20744] do_page_fault+0x38/0x194 [ 585.017083][T20744] page_fault+0x34/0x40 [ 585.021257][T20744] RIP: 0033:0x411e6f [ 585.025222][T20744] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 585.044838][T20744] RSP: 002b:00007ffde2f6f960 EFLAGS: 00010206 [ 585.050931][T20744] RAX: 00007fdd6be42000 RBX: 0000000000020000 RCX: 000000000045a6ca [ 585.059000][T20744] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 585.066975][T20744] RBP: 00007ffde2f6fa40 R08: ffffffffffffffff R09: 0000000000000000 [ 585.075070][T20744] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde2f6fb30 [ 585.083138][T20744] R13: 00007fdd6be62700 R14: 0000000000000001 R15: 000000000075bfd4 06:30:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:52 executing program 4: r0 = syz_open_dev$ptys(&(0x7f0000000000)='/dev/ptys#\x00', 0x6, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3ff}, 0x4) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000080)={0x80000005, 0x9, 0x100}) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000000c0)={0xca, 0x10, &(0x7f0000000240)="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"}) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x2, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 585.137473][T20744] memory: usage 305188kB, limit 307200kB, failcnt 2470 [ 585.169902][T20744] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 585.204358][T20744] Memory cgroup stats for /syz1: [ 585.204569][T20744] anon 251817984 [ 585.204569][T20744] file 69632 [ 585.204569][T20744] kernel_stack 4091904 [ 585.204569][T20744] slab 20922368 [ 585.204569][T20744] sock 0 [ 585.204569][T20744] shmem 0 [ 585.204569][T20744] file_mapped 0 [ 585.204569][T20744] file_dirty 0 [ 585.204569][T20744] file_writeback 0 [ 585.204569][T20744] anon_thp 224395264 [ 585.204569][T20744] inactive_anon 262144 [ 585.204569][T20744] active_anon 251817984 [ 585.204569][T20744] inactive_file 155648 [ 585.204569][T20744] active_file 0 [ 585.204569][T20744] unevictable 0 [ 585.204569][T20744] slab_reclaimable 3514368 [ 585.204569][T20744] slab_unreclaimable 17408000 [ 585.204569][T20744] pgfault 41613 [ 585.204569][T20744] pgmajfault 0 [ 585.204569][T20744] workingset_refault 1353 [ 585.204569][T20744] workingset_activate 132 [ 585.204569][T20744] workingset_nodereclaim 0 [ 585.204569][T20744] pgrefill 1096 [ 585.204569][T20744] pgscan 9011 [ 585.204569][T20744] pgsteal 6261 06:30:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x8000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) recvmsg$can_bcm(r2, &(0x7f0000000d40)={&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/81, 0x51}, {&(0x7f0000000b00)=""/33, 0x21}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f0000000c00)=""/86, 0x56}], 0x4, &(0x7f0000000cc0)=""/102, 0x66}, 0x342) bind$alg(r3, &(0x7f0000000d80)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x501000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7c, &(0x7f0000000240)={r7, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x420000, 0x0) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f00000000c0)=0x1) 06:30:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 585.571576][T20744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15942,uid=0 [ 585.635143][T20744] Memory cgroup out of memory: Killed process 15942 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:30:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x24499204}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:54 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="64420fc7b700000000c4c3d57ced6cf30faeee66b82b000f00d0c4c30d6bebfe0f8300000080f2430f06450fc7aa00900000b9d0040000b800000000ba000000800f30c4a283f642c4", 0x49}], 0x1, 0x4d, &(0x7f00000001c0)=[@cr4={0x1, 0x100000}, @dstype0], 0x2) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000200)={0x40, 0x3, 0x20, 0x0, 0x5, 0x2, 0xd5, 0x4, 0xfe, 0x6, 0x1f, 0x80, 0x0, 0xe3, 0x2, 0x1f, 0x80, 0x5, 0x1}) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r6, 0x0) [ 586.260383][ T26] audit: type=1800 audit(1575354654.034:130): pid=20788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16961 res=0 06:30:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae64, 0x0) dup3(r7, r8, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae64, 0x0) r13 = dup3(r10, r11, 0x0) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x8000) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xae64, 0x0) dup3(r14, r15, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r16 = getpid() sched_setscheduler(r16, 0x5, &(0x7f0000000380)) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r18) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r20, 0xae64, 0x0) dup3(r19, r20, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000000)="cfe3f3915a5122348ffc18e138dafbb9e71bcbdc6ba9ee0fd0958d03aca2981e5ec2e5d126d521dd7df3559857aa25644de8e22794609f6bdd6b77cbd0252b28f6605d5d7bc5a6cc39385deffede6a61b50402a434", 0x55}], 0x1000000000000017, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="10c51c82453af8b54399dd43b3b6c42e00010062", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r14, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r19, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r18, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}], 0x1, 0x0) r21 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r21, 0x40206417, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r21, 0xc0045520, &(0x7f00000000c0)=0x4) [ 587.146683][ T26] audit: type=1800 audit(1575354654.914:131): pid=20814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16923 res=0 06:30:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000280)='/\xec+r/input/mife\x00', 0x0, 0x200140) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000100)=""/116) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000003000/0x1000)=nil, 0x1000) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000180)) r6 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, 0x0) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000080)=0x3, &(0x7f0000000240)=0x2) r7 = syz_open_pts(r4, 0x218240) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000), 0x2) 06:30:55 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r5}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r6, 0x0) 06:30:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0xff000000}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x1af) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x7fffffff) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/103, 0x67}, {&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000240)=""/69, 0x45}], 0x4, &(0x7f0000001340)=""/4096, 0x1000}, 0x11021) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:55 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 06:30:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f0000000000)="4783d6f0b5244619a560466088bc4e1a2b4ff86911333d63426706b7d6342fc075e0a4711652c95f6ee096a1c173ae8954eb05e4ba69ff95a000436c94e06feaccb19d668f972d6edba715c9bf868b1cbe62fa1ebd36fd6fe1ceedbd0c4f1f7f48384a4182bf8c3dd8891e56e9103d2b975ed56881352b86f708fa260d1dcd432285f67226756e559e5d0c11d4b8d908f1a583d4ac4b923c", 0x98}, {&(0x7f00000000c0)="7622a1d7eb87c5b1a2b7f2158457aff271bff3f03ae9a09de4d08fd3580ba0b267a282a0d0782a3899dce472fec12be7b6bd0bb5dccf2c2ce2631bf07832f8b3e17cf8c26f02b7f0c99622d5f9712258972d72c4989e0804f2b0ebf4f9760d72cb4ac87d46e80fab57a9f09fc49e000364cfdc3400135468303f56234da27667d6854c77cfe7dde39a5b13e9f5fa24d5f0b876f8f1606c2f860ebcbefdb1462162419e154197b212bb76bcab39fca40e41ea216db9622d82ebb4f96e2af913ea7dfa322d31d05c513b8b060d019e8f1385", 0xd1}, {&(0x7f0000000240)="3984cb148ce77a05b5685bb70520ec280bc30a2bce0df422bdd5535a646488cbe053c8b33660b45f8db7a90041271e8fa430d9622ee10f5db051239f50a0c9bb381964fb663b52dce54220002b8eac829e06532e8c71805ff9a52362c1", 0x5d}, {&(0x7f00000002c0)="7de9abce197569b7a68fba34834db59f33166a8ab0af0ac83f57f35aec9e9cb80a1486576e4a6f5162eaa1708fcd155bd94c65c1066a79845e9deed736b78d638efda4e1b25e0b850085d952ebed4ff28137cd4331e7b31cc3d4daa70fd882200cded25192ca929b824f2488072d840c99c06c0af8023013d244d86a427aefb8ffd2e87ff41eec2297ced296a1a656bab43d381e380ffa12138b3f74723a494c5881c9c5636f", 0xa6}, {&(0x7f0000000380)="69a447eab9ffbfd319283d2adeb0d97396fefd7979ce757df7c9efe5370d89c3bd18bfef44d4729792f12f43ce8e233b34cd72bfc8b23a4d072af82065de7e3e7e3fe0ab9fbf49037064a67e26c790b4", 0x50}, {&(0x7f0000000400)="e93bccd819fddbbbafc19c0757029f496fdfab1bc802e01ef58fe3be55039ccb083c26be90d99a3f36fb42462efb286a7d8d768840cfc6280e6160f4a912dc122f83bd50457ae94992953ed190fe4f5679b9585edcb9363ebd96d00a472b6d9010f7a32cc2ae64afa64cd72c4ebb88bb23089af223c3", 0x76}], 0x6, 0x7fff) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)=0x48) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x4492) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:56 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:30:56 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = fspick(r2, &(0x7f0000000000)='./file0\x00', 0x1) dup3(r3, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') 06:30:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000001000)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x3, 0x8, 0x1, "ec31fec1ed9719b67e29192068bd0378a659aa0d44bafc647f7d1d6eabb8d180393b9b40e8ca34874c75e2ea2a3b01ac2b8be77996cd8a620436fc350609ca", 0x4}, 0x60, &(0x7f0000000640)=[{&(0x7f0000000080)="301ae05742568da1cdb6778d5159d47ff70101617a07e93b217ecb24", 0x1c}, {&(0x7f00000000c0)="b311f4a07e8a1b020af0939d3c09d72b7b3a8e8a0b8581d2aacfbe1c6eb2f0c25522bc974a0509759fb7fa9611249524e9ec2756379886a747e3bf61ebe0cc393f68a876", 0x44}, {&(0x7f0000000240)="37a4f49482f5f2d30ddc04e93433e88196bb9b94b063998c6fb79b22f8d47803b8da78cb78cde89eb4936035227583269f43e4e92052b9b87996cc6ad3fc452762fd8b695edc3d1873f2219cd62beaed8a1023cd596c212dcb82106ae412b61fd62a2f8af9a5484454ce4345ba62409604c01010caac672796da43b862187833d3e30038a46bb2", 0x87}, {&(0x7f0000000300)="f90c3ddf3df7f053419163645cc09d2ee275a86ea1c83aa5fb9180fffdb58f8581ac908fbc35dc4676c45cd3c9e5b76d838abb7ae2c23fd50211112f50c850394fec0124d377ad21d171d0944b61685b39fff9206d6ddcf3cd8cb3755752c77d6d154e0e601b2af135ef2d7cd16bfb668225b34dee25fd29fa44c809c57e6a2e11f692c241a0c7ec3c95aab8d9df2c6241d17b743ea252fab915976f97184cde7c146ca05a665a095974302baddb79", 0xaf}, {&(0x7f0000000140)="fe08c99b6d94a251a8498f795b779d5ecb6514743dca2025cdb43aed45ea7179ccf4b2a19acd09d8a706237e909bc728ff54f91b6b828ab429564525d674057c7066440c89539517b57a28c484b91146645a808f72de665c411cc545da7a7d851492d2f77351d67f97e74fe46dfc5c5ac394a09f8a273d1547ff2817", 0x7c}, {&(0x7f00000003c0)="842436e9664220017229db51e6546225550af5b67e0327a037995ea432b37a7450992cafbbf044ef5bd3d5cb47976f64047dc00351566fe5cf8c16950e6ff7984d6d91", 0x43}, {&(0x7f0000000440)="f7a7ac7d7fd5a5ebf26783862e55d7601ea8c669517d0a317b23b1741cdd44aab77fdad1b490045a67f1cbdd01f6104d22b8d6844960596d6e9b135f71a9d0061103ef8655c0d1c466d502b4968f70e35053033d8916c9b9c3201478aaec4c18315ea31bc08747ca4ad3a5adb476485d3662b93b419293362bbebffd7757b1f6e44d038111f5fab936a927f1f48de44f6e3cb66a6f33a25a5023e542aa81e38cfe48c4387f353837fc1754b0fe7f5d07961f2fecb9151b667e66406d", 0xbc}, {&(0x7f0000000500)="c9b9b236bb8f447ce5183dfde765cced275331cc1f9003e7c0971b886d83298a61035f44a24bfb61e2ad87b230d624a00e31d552c03095687579e50d721e883ef7510066ce8acc2593f0a428dd2ac6403432bc038046648d136f7d23fe69f094ad6230b9f5b919ce43806824d548938b667c28506e1c16", 0x77}, {&(0x7f0000000580)="66eaeb4a6ed3041aaf6b4bdb9c27d7db84ea21bf8dd3c13b01316b57c0bc37478b894fa2bb8c99de941b0d030781f7cab9b2d6ba4ab43855c7095cf49fb3aa0b1c4f1aeb56c942164bfa29d359df71b23f2a5f57deb1ba4f587e2f2eed6ea864b3a730ba90fa78f2c0e5fffae98f1af8afef4a561ebfadad241679736c7b23a976e348629f1a2a116fc6351038a5b72da6669566", 0x94}], 0x9, 0x0, 0x0, 0x800}, {&(0x7f0000000700)={0x27, 0x1, 0x1, 0x4bb9ee47d64ace48, 0x1f, 0x3, "616890d5dc60329b4402ce97f1e4b16d3a10140364d1d3a8a112be126535674766f6a1a11dd775c95fc791096135a5e5ded12cb8f039c48719b4e7f3bb4d99", 0x21}, 0x60, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x78, 0x116, 0x2, "ad69c498e3aaef9cc442e9ea3b81e1e90b1f6f28f17c85ac49cb68e87eb041fdacaf9fca11b7a47a1cab41a4fe6c8b0d39fd1a7c2ecfb4fff56bb82f98beecf9fa1a9bd7f95010fca4ebfbedcf43892cc74d0dc69f9c0827e4c3be3fded4f000b1d47e67"}, 0x78, 0x2000800}, {&(0x7f0000000800)={0x27, 0x0, 0x1, 0x7, 0x7f, 0x18, "a4deec178b044758f0ed82fa6e519a1187a3f110c1c57d73d6567ae9b0d7c5b61f2b63d19f9ab28d982096a1c8d1f3b4e29ac460d52e10149d274f2b7b81cb", 0x25}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000880)="aa7386ba5bd45d2e2cb5b85d9302c476e1b8ed4f0bc1320b423f49f71b923c1512fbce7bd06a02d8752412b5a5a8982cbca2d9264ed20b02322d93164250b8c54e067dfcc397061b43c6e07c876c68c515ce101b2cc3c97ba738277edcfb9ab7865951ba653f5177633f657194099eb5d5e6598f8186c243bfe300be9a6638abe0b003a2d1f8e75e29dce920c5efaa3595ac37f86007b60bfa4cc452dfe704007697bb6d0cede3e3e4ebdc8cb715ac3475b46542e146690fef88ed139c86f37e60a7152111a04cfbbc9ed2da5cc6871edaf1a3d3054242", 0xd7}], 0x1, &(0x7f0000000a40)={0x98, 0x84, 0x1ff, "b4017649237e4dbfc8060c8d11c47247d7fd453adf8ae69ed649ad5ff5e2a82831a7a7b77683dd3af4f9238cc46570500938899f82f675c87b490ccb695abf2d8ba3201edfa81257bdf4a5a6e8d82ead6baf04a60d16f76612e3a840bf06abfaf6731ec14493c87e8ab6af66ef2454718cf7cdad4c2816216c4b39f2cebe49e0b4dc7e639bf475"}, 0x98, 0x4000000}, {&(0x7f0000000b00)={0x27, 0x1, 0x1, 0x4, 0x7f, 0x2, "73cbc3746d0b73a7520843a0ec33415bd7c372bf5a8516f806f7dd548f0daf94d6e93bbd97e2d95795bc50d3992e70ce0019da977a0b9373e8016cca7daa28", 0x2}, 0x60, &(0x7f0000000c00)=[{&(0x7f0000000b80)="3b9a771e8bc6223a6d81016da83654aa82d08994e35c3eb5b0", 0x19}, {&(0x7f0000000bc0)="81148a9eff9f06c7c4d7bbc16b6fbcf0373017b149dd1251ce", 0x19}], 0x2, &(0x7f0000000c40)={0xf8, 0x1, 0x2, "7c1dfb15ff82d7ad2999604873e99ed2c4f67c411f764db607f2be7a5a9ff0de8a466eb9cbe2900673657c3c260b043a32d4bc40d1be3b18caa74910ac35a0626023ecaa7f29cfbb238265a9bb18e5e32df2df1eca0a12bf1fbdac93100754ba253171cf72748e3f07fb8e9db364e1bdeb7af3a99df0336763e0739b683a619b362012e7930bd1dfb734ebef2ebe7008b5bb435d879a8ced6693ad94d4029195dbe95e69fa163bb221d7484bec9e5a06a87f88ff4f87dc1e575e0b520e4f3a17ab2daecbc71acf0e66310dc2277fc4712f2456842629f0787b4e32fa153cae8347"}, 0xf8, 0x40}, {&(0x7f0000000d40)={0x27, 0x1, 0x1, 0x5, 0x9d, 0x7, "d8f8e2c8cb33911dd790bd49bb6dc1ce1b42c419e1152214cdd55c6f12cefa24c8d377c3002a710b3922a6fc6b9c0ae001a3e0d64152f063dafc55b29928b7", 0x33}, 0x60, &(0x7f0000000f80)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000dc0)="ac606a16eff0ac284e395ea73e351b31dc1af4b3cee73e5ac289a0fb29c57a8dad86d803eb06a836", 0x28}, {&(0x7f0000000e00)="6185ce466f91fd5def170dd6c6cfa5dbf6867fb1b9fd60940f2502768292ae40ff813de6725efb8925cb24b4db19284ee7810435cc649ea479db13361d5734a5a427c8d2ff3d6e9ed5514235a4e685775ebfc5d0c675f01537103f26b69ef331781fbced15599c35427b97fced69f898933200047263841016671e1d812212d7b6a423dffbd75e21acc2d9bc6ea7b6239d9325e6cfd9237072f52ff22bf32c2285a3", 0xa2}, {&(0x7f0000000ec0)="a61071dc5a753a107116936390e1c4264948744dc26e6fbe19", 0x19}, {&(0x7f0000000f00)="25278e14b39602b068a385fd24d0d90826785a487ee109e997b5e41bf9c594a9b3eab5e8e9b7b8b2eb51501110e7db98792ce26051c27c146fc72ee4a90d896f954e4708f609fbf5fc90a157ddcbad9469bfe45408723500bb6e20893a02287a2925", 0x62}, {&(0x7f0000002340)="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", 0x1000}], 0x6, &(0x7f0000003340)={0x1010, 0x113, 0x9, "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"}, 0x1010, 0x40}], 0x5, 0x8002) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="bb35000000000010b77083ead4035f000000000000000000000000d820f236668a8419d16ec29bab1d79932e1eb5eb59"]) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x2, {0xa, 0x1, 0x5}}, 0x14) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@remote, @bcast, @default, @default, @remote, @remote, @bcast, @netrom]}, &(0x7f0000000080)=0x48) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) accept$alg(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:30:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400042, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1', "b0cac9672022aa64bbd77d3a04f99374223c57941748e59ab160630d029b4017cbdeec5aba7a62089e9681bcb3284a2d780f7492684c52e0e20b52352de98564062e0e0a16a5a9506290794bba1cbe52646e5cc5550dbf4d96b1e3a0dcddf8a7184fa9d674ad76276e77c9"}, 0x6f) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 589.610180][T20902] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 589.658385][T20902] CPU: 1 PID: 20902 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 589.668280][T20902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.680258][T20902] Call Trace: [ 589.684505][T20902] dump_stack+0x11d/0x181 [ 589.689124][T20902] dump_header+0xaa/0x449 [ 589.696469][T20902] oom_kill_process.cold+0x10/0x15 [ 589.701989][T20902] out_of_memory+0x231/0xa00 [ 589.707512][T20902] mem_cgroup_out_of_memory+0x128/0x150 [ 589.713374][T20902] try_charge+0xb5c/0xbe0 [ 589.718816][T20902] ? __rcu_read_unlock+0x10/0x3c0 [ 589.724207][T20902] mem_cgroup_try_charge+0xd2/0x260 [ 589.729666][T20902] __add_to_page_cache_locked+0x163/0x780 [ 589.736231][T20902] ? __read_once_size.constprop.0+0x20/0x20 [ 589.742413][T20902] add_to_page_cache_lru+0xc4/0x260 [ 589.747665][T20902] generic_file_read_iter+0xf30/0x1440 [ 589.754458][T20902] ext4_file_read_iter+0xfa/0x240 [ 589.762048][T20902] generic_file_splice_read+0x35c/0x500 [ 589.768161][T20902] do_splice_to+0xf2/0x130 [ 589.772990][T20902] ? add_to_pipe+0x1a0/0x1a0 [ 589.777667][T20902] ? add_to_pipe+0x1a0/0x1a0 [ 589.782329][T20902] splice_direct_to_actor+0x1a1/0x510 [ 589.787960][T20902] ? generic_pipe_buf_nosteal+0x20/0x20 [ 589.793917][T20902] do_splice_direct+0x161/0x1e0 [ 589.799172][T20902] do_sendfile+0x384/0x7f0 [ 589.804425][T20902] __x64_sys_sendfile64+0x12a/0x140 [ 589.809713][T20902] do_syscall_64+0xcc/0x370 [ 589.814304][T20902] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 589.820418][T20902] RIP: 0033:0x45a679 [ 589.824326][T20902] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 589.845175][T20902] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 06:30:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000000)={0x2, 0x0, {0x0, 0x1ff, 0x1016, 0x9, 0x9, 0x14, 0x1, 0x4}}) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 589.853916][T20902] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679 [ 589.862420][T20902] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 589.871783][T20902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 589.879750][T20902] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 589.888022][T20902] R13: 00000000004c8f16 R14: 00000000004e0a30 R15: 00000000ffffffff [ 589.943009][T20902] memory: usage 307200kB, limit 307200kB, failcnt 2826 [ 589.951411][T20902] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 589.961812][T20902] Memory cgroup stats for /syz1: [ 589.962015][T20902] anon 252706816 [ 589.962015][T20902] file 65536 [ 589.962015][T20902] kernel_stack 4239360 [ 589.962015][T20902] slab 21057536 [ 589.962015][T20902] sock 0 [ 589.962015][T20902] shmem 0 [ 589.962015][T20902] file_mapped 0 [ 589.962015][T20902] file_dirty 0 [ 589.962015][T20902] file_writeback 0 [ 589.962015][T20902] anon_thp 224395264 [ 589.962015][T20902] inactive_anon 262144 [ 589.962015][T20902] active_anon 252706816 [ 589.962015][T20902] inactive_file 0 [ 589.962015][T20902] active_file 40960 [ 589.962015][T20902] unevictable 0 [ 589.962015][T20902] slab_reclaimable 3514368 [ 589.962015][T20902] slab_unreclaimable 17543168 [ 589.962015][T20902] pgfault 42174 [ 589.962015][T20902] pgmajfault 0 [ 589.962015][T20902] workingset_refault 2211 [ 589.962015][T20902] workingset_activate 264 [ 589.962015][T20902] workingset_nodereclaim 0 [ 589.962015][T20902] pgrefill 1591 [ 589.962015][T20902] pgscan 11154 [ 589.962015][T20902] pgsteal 8126 [ 590.081671][T20902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20831,uid=0 06:30:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:30:57 executing program 0: r0 = socket$inet6(0xa, 0x180005, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000100)={0xadbd, 0xf4}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000000c0)) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000048000010b5705f0000000000000000000000000000040000000000"]) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 590.121080][T20902] Memory cgroup out of memory: Killed process 20831 (syz-executor.1) total-vm:72712kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 590.204186][T20899] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 590.225076][T20899] CPU: 1 PID: 20899 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 590.233543][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.243784][T20899] Call Trace: [ 590.247280][T20899] dump_stack+0x11d/0x181 [ 590.251642][T20899] dump_header+0xaa/0x449 [ 590.256200][T20899] oom_kill_process.cold+0x10/0x15 [ 590.261992][T20899] out_of_memory+0x231/0xa00 [ 590.266819][T20899] mem_cgroup_out_of_memory+0x128/0x150 [ 590.272411][T20899] try_charge+0x7f5/0xbe0 [ 590.277896][T20899] ? __rcu_read_unlock+0x10/0x3c0 [ 590.283196][T20899] mem_cgroup_try_charge+0xd2/0x260 [ 590.288784][T20899] mem_cgroup_try_charge_delay+0x3a/0x80 [ 590.294465][T20899] wp_page_copy+0x322/0x1120 [ 590.299254][T20899] ? __read_once_size+0x41/0xe0 [ 590.304122][T20899] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 590.310064][T20899] do_wp_page+0x192/0x11f0 [ 590.314609][T20899] __handle_mm_fault+0x1ab1/0x2c70 [ 590.320033][T20899] handle_mm_fault+0x21b/0x530 [ 590.324905][T20899] __do_page_fault+0x456/0x8d0 [ 590.329792][T20899] do_page_fault+0x38/0x194 [ 590.334325][T20899] page_fault+0x34/0x40 [ 590.339033][T20899] RIP: 0033:0x40d0d8 [ 590.342941][T20899] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 67 01 00 00 48 c1 e6 04 86 80 80 75 00 01 48 89 86 88 80 75 00 66 2e 0f 1f 84 00 00 00 [ 590.363146][T20899] RSP: 002b:00007ffde2f6fa20 EFLAGS: 00010246 [ 590.369279][T20899] RAX: 0000000000000003 RBX: 000000000075bfc8 RCX: 0000000000000001 [ 590.377572][T20899] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000075bfc8 [ 590.385633][T20899] RBP: 000000000075bfd4 R08: 00007ffde2f6fb10 R09: 0000000000760150 [ 590.393651][T20899] R10: 00007ffde2f6fb10 R11: 0000000000000013 R12: 000000000075bfc8 [ 590.401965][T20899] R13: 0000000000000003 R14: 0000000000000001 R15: 000000000075bfd4 06:30:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 590.797687][T20899] memory: usage 307044kB, limit 307200kB, failcnt 2890 [ 590.834649][ T26] audit: type=1800 audit(1575354658.604:132): pid=20942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16978 res=0 [ 590.880643][T20899] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 590.912228][T20899] Memory cgroup stats for /syz1: [ 590.912543][T20899] anon 252706816 [ 590.912543][T20899] file 200704 [ 590.912543][T20899] kernel_stack 4202496 [ 590.912543][T20899] slab 21057536 [ 590.912543][T20899] sock 0 [ 590.912543][T20899] shmem 0 [ 590.912543][T20899] file_mapped 0 [ 590.912543][T20899] file_dirty 0 [ 590.912543][T20899] file_writeback 0 [ 590.912543][T20899] anon_thp 224395264 [ 590.912543][T20899] inactive_anon 262144 [ 590.912543][T20899] active_anon 252706816 [ 590.912543][T20899] inactive_file 118784 [ 590.912543][T20899] active_file 40960 [ 590.912543][T20899] unevictable 0 [ 590.912543][T20899] slab_reclaimable 3514368 [ 590.912543][T20899] slab_unreclaimable 17543168 [ 590.912543][T20899] pgfault 42174 [ 590.912543][T20899] pgmajfault 0 [ 590.912543][T20899] workingset_refault 2310 [ 590.912543][T20899] workingset_activate 264 [ 590.912543][T20899] workingset_nodereclaim 0 [ 590.912543][T20899] pgrefill 1591 [ 590.912543][T20899] pgscan 11266 [ 590.912543][T20899] pgsteal 8236 [ 591.179246][ T26] audit: type=1800 audit(1575354658.954:133): pid=20937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16885 res=0 [ 591.180517][T20899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15914,uid=0 [ 591.227541][T20899] Memory cgroup out of memory: Killed process 15914 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 591.328718][ T1069] oom_reaper: reaped process 15914 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 06:30:59 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10001, 0x2000) setns(r1, 0x0) 06:30:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000809000000000002"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40464842}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x64, r3, 0xd81, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x92}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff7fff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4d2ec9e63d10f6dc}, 0x20000) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0xffffffffffffffc8) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r5 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0xf5c8}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xd841, @empty, 0x2}], 0x4c) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r6, 0x7, &(0x7f0000000000)) 06:30:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x148af59767121bfc) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) r5 = dup3(r3, r4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae64, 0x0) dup3(r6, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae64, 0x0) dup3(r8, r9, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae64, 0x0) dup3(r10, r11, 0x0) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000480)={0x81001000, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000240), 0x3e, 0x0, &(0x7f0000000280)=""/132, 0x84, &(0x7f0000000340)=""/235, &(0x7f0000000440)=[0xffffffffffffffff, r12], 0x2}, 0x50) r14 = getuid() r15 = getegid() socket$nl_netfilter(0x10, 0x3, 0xc) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) r18 = ioctl$KVM_CREATE_VCPU(r17, 0xae64, 0x0) dup3(r16, r17, 0x0) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r20, 0xae64, 0x0) dup3(r19, r20, 0x0) syz_open_dev$sndctrl(&(0x7f0000000500)='/dev/snd/controlC#\x00', 0x9, 0x80000) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r22 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r22, 0xae64, 0x0) dup3(r21, r22, 0x0) r23 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r23, 0x4, 0x65400) ioctl$EXT4_IOC_SETFLAGS(r23, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r24, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r23, &(0x7f0000000000), 0x10000}]) r25 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r25, 0x4, 0x65400) ioctl$EXT4_IOC_SETFLAGS(r25, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r25, &(0x7f00000006c0)}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r25, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x8, 0x10001}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x2f}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r23, 0x10, &(0x7f0000000640)={&(0x7f0000000440)=""/203, 0xcb, r26}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000}, [@alu={0x4, 0x0, 0xa, 0x4, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0xf5e4, 0x3f, &(0x7f00000005c0)=""/63, 0x0, 0x1, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x1, 0x6, 0x4}, 0x10, r26}, 0x78) r27 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r28 = ioctl$KVM_CREATE_VM(r27, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r28, 0xae64, 0x0) dup3(r27, r28, 0x0) r29 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r30 = ioctl$KVM_CREATE_VM(r29, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r30, 0xae64, 0x0) r31 = dup3(r29, r30, 0x0) r32 = getgid() r33 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r34 = ioctl$KVM_CREATE_VM(r33, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r34, 0xae64, 0x0) dup3(r33, r34, 0x0) r35 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r36 = ioctl$KVM_CREATE_VM(r35, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r36, 0xae64, 0x0) dup3(r35, r36, 0x0) r37 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r38 = ioctl$KVM_CREATE_VM(r37, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r38, 0xae64, 0x0) dup3(r37, r38, 0x0) r39 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x10000, 0x0) r40 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r41 = ioctl$KVM_CREATE_VM(r40, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r41, 0xae64, 0x0) dup3(r40, r41, 0x0) r42 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r43 = ioctl$KVM_CREATE_VM(r42, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r43, 0xae64, 0x0) dup3(r42, r43, 0x0) r44 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r45 = ioctl$KVM_CREATE_VM(r44, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r45, 0xae64, 0x0) dup3(r44, r45, 0x0) r46 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dsp\x00', 0x0, 0x0) r47 = getpid() sched_setscheduler(r47, 0x5, &(0x7f0000000380)) r48 = epoll_create(0x3) sendmmsg$unix(r2, &(0x7f00000008c0)=[{&(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r47, @ANYRES32=r14, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r32, @ANYBLOB="000109ae4314f43ff28f0537b3b000002000000000000000010000", @ANYRES32=r31, @ANYRES32=r5, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r40, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r48, @ANYRES32=r18, @ANYRES32=r44, @ANYRES32, @ANYRES32=r46, @ANYRES32, @ANYBLOB="10000000"], 0x118}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x8, 0x4) 06:30:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000cedc577111120010b7705f00"/38]) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:30:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 591.644030][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 591.782401][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:30:59 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) 06:30:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x7d, 0x7f, 0x6, 0xb, 0x34, 0x81}) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000240)="7626c71b9456ad2545944879895ad70dde2489593ecb17e6c727c3684e38415aecb470b0b03444937bf9b0a0cba20b233582fa58d1516bf7908fa15ff6bad95684bc9f315b489701a9a7276d95e23bee3ac6337ab3781cfce7086f416704357666c6bdfb9cbd7c1eb8e34f44cb60529cbd4989c54c78af8b9032c2232e9b968991103c3b02cea8a4bd74c1156b7bc707797c2a458024c81ec844dd", 0x9b) 06:31:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x7}, "930b3d335d2c803f", "8c7aea3cd8d03d0071ba78989416d181", "112d446f", "b73e58ab0cb410e9"}, 0x28) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x7f}, 0x28, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x200, 0x0) pipe(&(0x7f0000000140)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x60081) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000180)=0x9) 06:31:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x1f}, 0x27}, 0x1c) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0xfffffffffffffffe, 0x5f70b710, 0x4, 0x0, 0x6, [{0x733d3dca, 0x6, 0x7ff, 0x0, 0x0, 0x3280}, {0x1000, 0x35b7, 0x1, 0x0, 0x0, 0x688}, {0x9, 0x1c5, 0x7, 0x0, 0x0, 0x5}, {0x400, 0x6, 0x3, 0x0, 0x0, 0x1000}, {0x7ff, 0x0, 0x1000, 0x0, 0x0, 0x20a}, {0x2, 0x10001, 0x4, 0x0, 0x0, 0x487}]}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:00 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7, 0x121000) pidfd_send_signal(r2, 0x7, &(0x7f0000000040)={0x3f, 0x4, 0x6}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) setns(r3, 0x8000000) 06:31:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:00 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r3, 0x2000000) [ 593.470314][ T26] audit: type=1800 audit(1575354661.234:134): pid=21020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16933 res=0 [ 593.555142][ T26] audit: type=1800 audit(1575354661.274:135): pid=21045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16933 res=0 06:31:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000500)='vboxnet0ppp0\x00', &(0x7f0000000540)="4a8661e0bb9ac2696a65a921901682f1f14cfc2163bd48588851d62e6950", 0x1e) execve(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)=[&(0x7f0000000040)='hash\x00', &(0x7f0000000080)='(cgroupem0selfcgroup\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='nodev$:@\x10+selinux@\x00', &(0x7f0000000140)='+-)&\x00', &(0x7f0000000180)='^#.{\x00', &(0x7f0000000240)=')GPL\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='hash\x00'], &(0x7f00000004c0)=[&(0x7f0000000380)='rmd320-generic\x00', &(0x7f00000003c0)='\']wlan1[[\\uservmnet0wlan0\x00', &(0x7f0000000400)='rmd320-generic\x00', &(0x7f0000000440)='hash\x00', &(0x7f0000000480)='T\x00']) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000000)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) 06:31:01 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x4, 0x0, 0xdec}) setns(r2, 0x0) 06:31:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x87f1a7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002c00c2bef050000000000000000000000000000000020000000000000001a1001dfccc630000000000000000"], 0x58}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@rand_addr="bc3cb1636d3122462386195a1b5ff64d", r5}, 0x14) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0x4924c59}) socket$tipc(0x1e, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:01 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300), 0x8d9, 0x0) [ 593.936000][T21101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 06:31:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000000)={0x7, "af7e07468667ce0dac60210cc64d0089e1dbe761c82a43c083dad9e2dd035dd3ea4aa96164c45ccd8bd2f877525540a79f6b9b4bb28ff1c061c1ee3cdeaaa60769d5f9f2e8400d8d780cfc56966566acdd9c4663e244bdab8c748dc7982210651c35857be9cc8fdf3e04709aec9606e1b9320f63e455466a14363e13c0b75814d318915c0eabc37f08f639e3ff0d999cee4d8c2e430b94f09877258f818d77415aeb13ca0e04f95e1fab288464a29678848561558cf67b2b873ed0239f27897d1d148bfe443c2a42b3a985456f162c73ab5210d9ae2e3de9b2fa4251e6d2858a698e9a7e7b2d4b0ab70f0fa6508022362b9e6355c6cf59187c932e2084e99ed7"}) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000240)=""/140) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:02 executing program 1: unshare(0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae64, 0x0) dup3(r0, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) clone(0x800a0400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') setns(r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x511202, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000080)) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) io_setup(0x3b24, &(0x7f0000000740)=0x0) setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000000)=0x800, 0x4) io_submit(r6, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000780), 0x4000}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae64, 0x0) dup3(r7, r8, 0x0) io_cancel(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x40, r8, &(0x7f0000000180)="32df1ecdbc51e00e8966d536a130dddddb7ab296fbe74719baf67eefea6e5902164b65b465e75d1ab70cbd2bdde010ea9ae0a603343b428cff378fd318acd9690952a60c4d5edc04bb49e4f2858a128169bb1c07f64fb987012f878ac5370131bad92c5a31c0f83d4e80af2961b6ff3e5291a842141cda01fe34c4f82b745018c37e84a597df58977108d87519f1bde14d8c488155bbd6575ca62901d3d82596f91f3c762270d2352e9a5d8c0826c298cedc453f61d7310e7f2fc20c0fd7770681492c518a58880bbb7d09f772940782a47414a9342fec9e8e7608b6c0c868927a53cebc185015a32b", 0xe9}, &(0x7f00000002c0)) 06:31:02 executing program 4: socket$alg(0x26, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0) 06:31:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x76}, 0x1) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 594.616015][T21127] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 06:31:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@local, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x1) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) [ 594.705428][T21127] CPU: 0 PID: 21127 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 594.713981][T21127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.724042][T21127] Call Trace: [ 594.729553][T21127] dump_stack+0x11d/0x181 [ 594.734065][T21127] dump_header+0xaa/0x449 [ 594.738412][T21127] oom_kill_process.cold+0x10/0x15 [ 594.743597][T21127] out_of_memory+0x231/0xa00 [ 594.748287][T21127] mem_cgroup_out_of_memory+0x128/0x150 [ 594.753829][T21127] try_charge+0xb5c/0xbe0 [ 594.758318][T21127] ? __rcu_read_unlock+0x66/0x3c0 [ 594.763458][T21127] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 594.769247][T21127] __memcg_kmem_charge+0xde/0x240 [ 594.774515][T21127] __alloc_pages_nodemask+0x26c/0x310 [ 594.780149][T21127] alloc_pages_current+0xd1/0x170 [ 594.785305][T21127] __vmalloc_node_range+0x2d7/0x4c0 [ 594.790574][T21127] __vmalloc+0x4d/0x70 [ 594.794917][T21127] ? vmx_vm_alloc+0x40/0x50 [ 594.799590][T21127] vmx_vm_alloc+0x40/0x50 [ 594.803915][T21127] kvm_dev_ioctl+0x137/0xca0 [ 594.808513][T21127] ? kvm_put_kvm+0x650/0x650 [ 594.813119][T21127] do_vfs_ioctl+0x991/0xc60 [ 594.817623][T21127] ? tomoyo_file_ioctl+0x34/0x40 [ 594.822633][T21127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.829667][T21127] ksys_ioctl+0xbd/0xe0 [ 594.833950][T21127] __x64_sys_ioctl+0x4c/0x60 [ 594.838538][T21127] do_syscall_64+0xcc/0x370 [ 594.843073][T21127] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 594.849165][T21127] RIP: 0033:0x45a679 [ 594.853419][T21127] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.877007][T21127] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.885719][T21127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 594.893959][T21127] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 594.902113][T21127] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 594.912043][T21127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 594.921296][T21127] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 594.946444][T21127] memory: usage 307200kB, limit 307200kB, failcnt 3012 06:31:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x2) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 594.995829][T21127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:31:02 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 595.177509][T21127] Memory cgroup stats for /syz1: [ 595.177732][T21127] anon 251338752 [ 595.177732][T21127] file 0 [ 595.177732][T21127] kernel_stack 4313088 [ 595.177732][T21127] slab 21655552 [ 595.177732][T21127] sock 0 [ 595.177732][T21127] shmem 0 [ 595.177732][T21127] file_mapped 0 [ 595.177732][T21127] file_dirty 0 [ 595.177732][T21127] file_writeback 0 [ 595.177732][T21127] anon_thp 222298112 [ 595.177732][T21127] inactive_anon 262144 [ 595.177732][T21127] active_anon 251383808 [ 595.177732][T21127] inactive_file 16384 06:31:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffcea2, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000080}, 0x80) r6 = msgget$private(0x0, 0x4d1541d6ddc492e6) msgctl$MSG_STAT(r6, 0xb, &(0x7f00000002c0)=""/4) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000024000705000000000753e0414916a4bb4d7a24f7fa197cb70000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002c00c2bef050000000000000000000000000000000020000000000000001a1001dfccc630000000000000000"], 0x58}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:03 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10000, 0x0) accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @remote, @rose, 0x0, [@bcast, @remote, @default, @default, @bcast, @netrom]}, &(0x7f0000000080)=0x40, 0x180000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 595.177732][T21127] active_file 40960 [ 595.177732][T21127] unevictable 0 [ 595.177732][T21127] slab_reclaimable 3784704 [ 595.177732][T21127] slab_unreclaimable 17870848 [ 595.177732][T21127] pgfault 42801 [ 595.177732][T21127] pgmajfault 0 [ 595.177732][T21127] workingset_refault 2376 [ 595.177732][T21127] workingset_activate 264 [ 595.177732][T21127] workingset_nodereclaim 0 [ 595.177732][T21127] pgrefill 1624 [ 595.177732][T21127] pgscan 11528 [ 595.177732][T21127] pgsteal 8423 06:31:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0)={0x0, 0x7f}, 0x2) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 595.637049][T21157] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 06:31:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000007c0)='/dev/cec#\x00', 0x2, 0x2) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$pptp(0x18, 0x1, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae64, 0x0) dup3(r5, r6, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x190, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1000}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/152, 0x98, 0x2, 0x1a}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0xa, 0x2, 0x17}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/16, 0x10, 0x1, 0x8}, @fda={0x66646185, 0x6, 0x2, 0x7}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x800, 0x3}, @fda={0x66646185, 0x9, 0x2, 0x15}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @flat=@weak_handle={0x77682a85, 0x1}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0x1d, 0x0, &(0x7f0000000740)="87626e277260d6c2c3451963c6aa18edfe7ad789766fa7de06bb6602a0"}) 06:31:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x2a4, 0x1, 0x5, "e96489dd60e60c0bdf0d613a484a4f76", "9f7df270dc3d819077e1050ec5adcc08c8fd1800f1751fc2ebd86491c15e80680e8a630ab227e763a8958f498a9726ce5906ead006edae8593372b9677ab2fd5a4b01d693eb8f14e8b537dd34dc2c3df5a9442be0d73efb51669e74c94ace8c807e2a3d37378931d08086deca067292f08621e66a64d32a52cbb3a7a63e716ec1c86ec30a9f893bc39137f30b620ba37cfcfbdfe8b"}, 0xaa, 0x0) [ 595.699575][T21127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15831,uid=0 [ 595.814224][T21127] Memory cgroup out of memory: Killed process 15831 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 595.859520][ T1069] oom_reaper: reaped process 15831 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 596.370501][ T26] audit: type=1800 audit(1575354664.144:136): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16933 res=0 06:31:04 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 06:31:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000002c0)={{0x1806, 0xd000, 0x3, 0x0, 0x3, 0xea, 0x41, 0x0, 0x3f, 0x9, 0x7, 0x15}, {0x4000, 0x0, 0x4, 0x8, 0x80, 0x9, 0x80, 0x3, 0x2, 0x4, 0x5, 0x9}, {0x1000, 0x1, 0xf, 0x1, 0x7, 0x1f, 0x1, 0x1, 0x40, 0x7, 0x6, 0x9}, {0xf000, 0x6000, 0x6, 0xcc, 0x6c, 0x7, 0x9, 0x9, 0x8, 0x0, 0xef, 0x80}, {0x1, 0x10000, 0xd274a0d86ad4345, 0x20, 0x2, 0x3, 0x6, 0x8, 0xff, 0x8f, 0x0, 0x1}, {0x4000, 0x1b577c0b5382eda3, 0xb, 0x1, 0x10, 0x9c, 0x40, 0x9, 0x4, 0x4, 0xff, 0xd9}, {0x0, 0x0, 0x10, 0x6, 0x0, 0x4, 0x7, 0x2, 0x8, 0x2, 0x7f, 0x3f}, {0x119000, 0x0, 0x1, 0xe0, 0x7, 0x3f, 0x1, 0x80, 0x0, 0x40, 0x1, 0x6}, {0x0, 0x100000}, {0xf000, 0x1}, 0x80000001, 0x0, 0x1, 0x20, 0x0, 0x1000, 0xd000, [0x8000, 0xd4, 0xffffffff, 0x3]}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002c00c2bef050000000000000000000000000000000020000000000000001a1001dfccc630000000000000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff5, 0xfffc}, {0xf}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_blackhole={0x10, 0x1, 'blackhole\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) r8 = timerfd_create(0x0, 0x0) fstat(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./bus\x00', 0xffffffffffffffff, r9) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae64, 0x0) dup3(r10, r11, 0x0) r12 = getpid() r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r14) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r16, 0xae64, 0x0) dup3(r15, r16, 0x0) sendmmsg$unix(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="bd3d06ea2c40c37a9ef7bb09cf368e5eba9c4b5c098f66750080fded6368aa9ea0c6c82a50fdc909976c67c21f4aa530e940", 0x32}, {&(0x7f00000004c0)="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", 0x12a}], 0x2, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, r9}}}, @rights={{0x18, 0x1, 0x1, [r8, r10]}}, @rights={{0x20, 0x1, 0x1, [r15, r6, r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r5}}}], 0x98}], 0x1, 0x0) 06:31:04 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) unshare(0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r4) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYBLOB="19c02ece1fb586cfc083638534e79fb03973b2b63baf371fd3a229b7079786a396729b7e749c53b544809f6b791841db120f0e01ff2fd23ab8be067df0424a84d2de977b61244e825f658238921066d99b6bf2d7452f792233a3b82f675e23f7211aec5411185d2a70cf275919fdf349401bf696f2435d7ca2d0e0be85532d20655b89208875953f907c8fa28c12737f6b838e676ae5070d7381f543ef207202d12a11fd7bbe0a6adaf22ab65e3bb3068c90d1c25bee843e706869d69b66751729d44af78c6c6fc748d8bb451990410642b50364f1c154", @ANYRES32=r9], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', r9}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000580)={@remote, @dev={0xfe, 0x80, [], 0x13}, @ipv4={[], [], @rand_addr=0x30000}, 0x5, 0x1, 0xff, 0x100, 0x4, 0x210000, r10}) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)='\x00', r4) accept4$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x10, 0xc0c00) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae64, 0x0) dup3(r11, r12, 0x0) fcntl$setsig(r11, 0xa, 0xa) r13 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r14 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r14, 0x40206417, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r14, 0x80044dfd, &(0x7f0000000500)) keyctl$update(0x2, r13, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r15 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r13, r15, r13}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) r16 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r16) r17 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r16) keyctl$instantiate_iov(0x14, r13, &(0x7f0000000140)=[{&(0x7f0000000100)='Pl', 0x2}, {&(0x7f00000001c0)="1812775bec65ab0a9f47b755d365e21ca1ed3c715947a534835cd7bcc8f1d8fa96b02d777a2a2699549fd4e7ec6704bde65bfdf0def350896919312696bfe0101200fb733a0643c69096a51fb7e6f6cd0a5b40fae0c65648bd590ca25bb119e705761605e5c2", 0x66}, {&(0x7f00000002c0)="bec28118b5819680ca57b7376547172d57e6c88bca91cb02ef3ed25008a24584224d644fb3ef573d781c21a327211efd31701980a09740fea37a01abea46c0f4a8e14f069b2c35c0cb07ed", 0x4b}, {&(0x7f0000000340)="c71531c368115c6b542accc9fa34e30d1b5d2567f22e39d104b6f139542625f220335d897d9b76d3c0ee0375cff7e617acd266dcec32427525e90091e30f19361511b5376195bbcdbb19ee7527321ed51dd20beda4", 0x55}], 0x4, r17) r18 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x500680, 0x0) ioctl$TIOCLINUX7(r18, 0x541c, &(0x7f00000004c0)={0x7, 0x7}) keyctl$search(0xa, 0x0, &(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x1}, r17) 06:31:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x0, 0x0) semctl$GETVAL(r3, 0x811c10670c15715d, 0xc, &(0x7f0000000080)=""/212) semctl$IPC_INFO(r3, 0x0, 0x3, &(0x7f0000000140)=""/109) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000100)=0x3) 06:31:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) [ 597.045155][T21212] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 06:31:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000000c0)=""/228, 0xe4}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x6, 0x4) 06:31:05 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='\x9f\x94\x98fs/pidcfor_childre0=\xdb6\xb0*\xe9\xd8|\x02\x89N\x1a\xea\xfd') r3 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r3}) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000040)={0x9, 0x1, [0x8, 0x7, 0xa6, 0x8000, 0xffff], 0x1ff}) setns(r2, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sched_yield() ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) write$FUSE_WRITE(r6, &(0x7f0000000100)={0x18, 0x0, 0x5, {0x5}}, 0x18) [ 597.401948][ T26] audit: type=1800 audit(1575354665.174:137): pid=21223 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16934 res=0 06:31:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/135, 0x87}], 0x8, &(0x7f0000000640)=""/165, 0xa5}, 0x7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/131, 0x83}, {&(0x7f00000007c0)=""/191, 0xbf}], 0x2}, 0x9}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000940)=""/32, 0x20}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)}], 0x6, &(0x7f0000000c00)=""/42, 0x2a}, 0x7fff}, {{&(0x7f0000000c40)=@ipx, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=""/56, 0x38}, 0x74}, {{&(0x7f0000000d40)=@un=@abs, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/84, 0x54}], 0x1, &(0x7f0000000e80)=""/11, 0xb}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/217, 0xd9}], 0x1}, 0x4}, {{&(0x7f0000001000)=@xdp, 0x80, &(0x7f0000001200)=[{&(0x7f0000001080)=""/61, 0x3d}, {&(0x7f00000010c0)=""/229, 0xe5}, {&(0x7f00000011c0)=""/33, 0x21}], 0x3, &(0x7f0000001240)=""/190, 0xbe}, 0x243e}], 0x7, 0x14000, 0x0) accept$ax25(r1, &(0x7f0000003500)={{}, [@null, @rose, @netrom, @bcast, @netrom, @rose, @netrom, @netrom]}, &(0x7f0000003580)=0x48) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000b40)=0x80) 06:31:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xa3, 0x2000) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) write$cgroup_int(r3, &(0x7f0000000080)=0x2000000000004, 0x12) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="000c00000000000010b7705f0000000008001000"/32]) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:05 executing program 4: r0 = dup(0xffffffffffffffff) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x100000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:05 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000000)=""/191, 0xbf, 0x2, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @local, 0x80000000}}, 0x24) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x57886bc37af8fe1b, './file0/file0\x00'}, 0x149, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0xc805}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) setrlimit(0x3, &(0x7f0000000100)={0x1, 0x1a}) 06:31:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) accept$alg(r0, 0x0, 0x0) 06:31:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000005200080027bd7000fddbdf250208000200080000000800050000800000080006000300000008000200060000000800206a0008000008000500310d0000080003000500000008000600e5000000080003000d000000d0d966f25a0000000012376462198665f57c5d000000008dc100"], 0x64}}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0x8, 0xffffffc1, 0x2}}) 06:31:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r2, 0x7, 0x1, 0x800, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) fdatasync(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)) write$evdev(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(0xffffffffffffffff, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000200)) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) recvfrom(r5, &(0x7f0000000900)=""/4096, 0xffffffffffffff78, 0x0, 0x0, 0x1c4) ioctl$FIBMAP(r1, 0x1, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe5, 0x200000) vmsplice(r1, &(0x7f0000000440), 0x0, 0xbb2e6f1e6cc4def3) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r7 = syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0x6, 0x28800) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000180)=0x4) [ 598.218290][ T26] audit: type=1800 audit(1575354665.994:138): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16885 res=0 06:31:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:06 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae64, 0x0) r3 = dup3(r1, r2, 0x0) connect$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x1, 0x2, 0x1f, "67821ccfc82f8e941c24f647f40f8dae9ad32ac83da5a76b09d1ed4e11ce9d904e71d60f76d2a1b67b9ef698b84f5c57e1c366e0b2d028b33cf18f5a752326", 0x33}, 0x60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae64, 0x0) dup3(r4, r5, 0x0) dup3(r4, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r6, 0x0) 06:31:06 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x1, 0x41495043, 0x3, @discrete={0x2, 0x5}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @remote, 0x1}], 0x1c) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x4}, 0x28, 0x2) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 06:31:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x4924924924924d5, 0x4000) 06:31:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000000)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) 06:31:06 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 06:31:07 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000180)='./bus\x00', &(0x7f0000000280)={{}, {r5, r6/1000+10000}}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000000c0)=0x40) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r7, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) close(r8) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r9, 0x200006) recvmsg$kcm(r9, &(0x7f0000000680)={&(0x7f0000000100)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000640)=""/60, 0x3c}, 0x2043) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000006c0)={0x0, 0x4}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000740)=@assoc_id=r10, &(0x7f0000000780)=0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg$unix(r2, &(0x7f0000001300), 0x0, 0x0) 06:31:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x7}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="08052c53f8f1cfe8474071") 06:31:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-ce\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:07 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0x3}, 0x28, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) [ 599.565077][ T26] audit: type=1800 audit(1575354667.334:139): pid=21346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16915 res=0 06:31:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r0, 0x1e3c, &(0x7f0000000140)="4c0d1b27aa673a3fcde3173363a43f327507566c7c1a0d24e4e123fdbf90a737e97446c09a7a096b9258a27762a8f4cedb2468cbfdb839d69097c22091e41a136dd201458809b0e3a9a28737a2130f47494fa7ae9cb4dec511bc0d924a") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000280)={0x1, [0x7]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x1f, 0x401}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100)=r5, 0x4) 06:31:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) semget$private(0x0, 0x4, 0x200) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x3ff, 0x4, 0xc1}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0x10000000}], 0x1, 0x24814) [ 599.718018][T21354] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 599.771360][T21354] CPU: 1 PID: 21354 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 599.779967][T21354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.790096][T21354] Call Trace: [ 599.793402][T21354] dump_stack+0x11d/0x181 [ 599.797814][T21354] dump_header+0xaa/0x449 [ 599.802179][T21354] oom_kill_process.cold+0x10/0x15 [ 599.807304][T21354] out_of_memory+0x231/0xa00 [ 599.811944][T21354] mem_cgroup_out_of_memory+0x128/0x150 06:31:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$ax25(0x3, 0x5, 0x7) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x101000, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7c, &(0x7f0000000240)={r7, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={r7, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r8}, 0x8) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000000c0)={@rand_addr=0x100, @empty, @multicast2}, 0xc) r9 = accept4(r1, 0x0, 0x0, 0x1c1000) sendmmsg$unix(r9, &(0x7f0000000140), 0x0, 0x0) [ 599.817520][T21354] try_charge+0xb5c/0xbe0 [ 599.822075][T21354] ? __rcu_read_unlock+0x10/0x3c0 [ 599.827275][T21354] mem_cgroup_try_charge+0xd2/0x260 [ 599.832547][T21354] mem_cgroup_try_charge_delay+0x3a/0x80 [ 599.840643][T21354] wp_page_copy+0x322/0x1120 [ 599.845257][T21354] ? __read_once_size+0x41/0xe0 [ 599.850289][T21354] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 599.856195][T21354] do_wp_page+0x192/0x11f0 [ 599.860625][T21354] ? record_times+0x16/0x90 [ 599.865156][T21354] __handle_mm_fault+0x1ab1/0x2c70 [ 599.870394][T21354] handle_mm_fault+0x21b/0x530 [ 599.875298][T21354] __do_page_fault+0x456/0x8d0 [ 599.880097][T21354] do_page_fault+0x38/0x194 [ 599.884617][T21354] page_fault+0x34/0x40 [ 599.888845][T21354] RIP: 0033:0x40f6c8 [ 599.892970][T21354] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00 [ 599.913198][T21354] RSP: 002b:00007ffde2f6f980 EFLAGS: 00010246 [ 599.919644][T21354] RAX: 00000000e58117b7 RBX: 0000000096d7d30f RCX: 0000001b33920000 [ 599.930262][T21354] RDX: 0000000000000000 RSI: 00000000000017b7 RDI: ffffffffe58117b5 [ 599.938434][T21354] RBP: 0000000000000005 R08: 00000000e58117b5 R09: 00000000e58117b9 [ 599.946554][T21354] R10: 00007ffde2f6fb20 R11: 0000000000000246 R12: 000000000075bfa8 [ 599.954827][T21354] R13: 0000000080000000 R14: 00007fdd6de84008 R15: 000000000000000a [ 600.039081][T21354] memory: usage 307200kB, limit 307200kB, failcnt 3142 [ 600.101817][T21354] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 600.138995][T21354] Memory cgroup stats for /syz1: [ 600.139192][T21354] anon 249856000 [ 600.139192][T21354] file 81920 [ 600.139192][T21354] kernel_stack 4349952 [ 600.139192][T21354] slab 22110208 [ 600.139192][T21354] sock 0 [ 600.139192][T21354] shmem 0 [ 600.139192][T21354] file_mapped 0 [ 600.139192][T21354] file_dirty 0 [ 600.139192][T21354] file_writeback 0 [ 600.139192][T21354] anon_thp 220200960 [ 600.139192][T21354] inactive_anon 262144 [ 600.139192][T21354] active_anon 249901056 [ 600.139192][T21354] inactive_file 73728 [ 600.139192][T21354] active_file 40960 [ 600.139192][T21354] unevictable 0 [ 600.139192][T21354] slab_reclaimable 3784704 [ 600.139192][T21354] slab_unreclaimable 18325504 [ 600.139192][T21354] pgfault 43329 [ 600.139192][T21354] pgmajfault 0 [ 600.139192][T21354] workingset_refault 2376 [ 600.139192][T21354] workingset_activate 264 [ 600.139192][T21354] workingset_nodereclaim 0 [ 600.139192][T21354] pgrefill 1624 [ 600.139192][T21354] pgscan 15264 [ 600.139192][T21354] pgsteal 8969 [ 600.291295][T21354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15796,uid=0 [ 600.307764][T21354] Memory cgroup out of memory: Killed process 15796 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 600.389788][T21360] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 600.393993][ T26] audit: type=1800 audit(1575354668.164:140): pid=21369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16906 res=0 [ 600.422251][T21360] CPU: 1 PID: 21360 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 600.430898][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.441048][T21360] Call Trace: [ 600.444452][T21360] dump_stack+0x11d/0x181 [ 600.449191][T21360] dump_header+0xaa/0x449 [ 600.453566][T21360] oom_kill_process.cold+0x10/0x15 [ 600.458904][T21360] out_of_memory+0x231/0xa00 [ 600.463622][T21360] mem_cgroup_out_of_memory+0x128/0x150 [ 600.469370][T21360] try_charge+0x7f5/0xbe0 [ 600.473824][T21360] ? __rcu_read_unlock+0x66/0x3c0 [ 600.479561][T21360] __memcg_kmem_charge_memcg+0x4a/0xe0 06:31:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000e40), 0x0, 0x10}], 0x1, 0x0) 06:31:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 600.485288][T21360] __memcg_kmem_charge+0xde/0x240 [ 600.490623][T21360] __alloc_pages_nodemask+0x26c/0x310 [ 600.496035][T21360] alloc_pages_current+0xd1/0x170 [ 600.501165][T21360] pte_alloc_one+0x18/0x50 [ 600.505948][T21360] __handle_mm_fault+0x2966/0x2c70 [ 600.511362][T21360] handle_mm_fault+0x21b/0x530 [ 600.516365][T21360] __do_page_fault+0x456/0x8d0 [ 600.521297][T21360] do_page_fault+0x38/0x194 [ 600.525835][T21360] page_fault+0x34/0x40 [ 600.529992][T21360] RIP: 0033:0x45a679 [ 600.534094][T21360] Code: Bad RIP value. 06:31:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x1}], 0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000000)) [ 600.538298][T21360] RSP: 002b:00007fdd6be82c78 EFLAGS: 00010246 [ 600.544453][T21360] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000045a679 [ 600.552551][T21360] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.560616][T21360] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 600.568622][T21360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 600.576898][T21360] R13: 00000000004c0d71 R14: 00000000004d4928 R15: 00000000ffffffff [ 600.602264][T21360] memory: usage 305012kB, limit 307200kB, failcnt 3142 [ 600.624277][T21360] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 06:31:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x80000) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 600.722404][T21360] Memory cgroup stats for /syz1: [ 600.735967][T21360] anon 247734272 [ 600.735967][T21360] file 81920 [ 600.735967][T21360] kernel_stack 4423680 [ 600.735967][T21360] slab 22245376 [ 600.735967][T21360] sock 0 [ 600.735967][T21360] shmem 0 [ 600.735967][T21360] file_mapped 0 [ 600.735967][T21360] file_dirty 0 [ 600.735967][T21360] file_writeback 0 [ 600.735967][T21360] anon_thp 218103808 [ 600.735967][T21360] inactive_anon 262144 [ 600.735967][T21360] active_anon 247734272 [ 600.735967][T21360] inactive_file 73728 [ 600.735967][T21360] active_file 40960 [ 600.735967][T21360] unevictable 0 [ 600.735967][T21360] slab_reclaimable 3784704 [ 600.735967][T21360] slab_unreclaimable 18460672 [ 600.735967][T21360] pgfault 43362 [ 600.735967][T21360] pgmajfault 0 [ 600.735967][T21360] workingset_refault 2376 [ 600.735967][T21360] workingset_activate 264 [ 600.735967][T21360] workingset_nodereclaim 0 [ 600.735967][T21360] pgrefill 1624 [ 600.735967][T21360] pgscan 15264 [ 600.735967][T21360] pgsteal 8969 [ 600.966352][T21360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15739,uid=0 [ 600.994663][T21360] Memory cgroup out of memory: Killed process 15739 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:31:08 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0xb065e3487f7bac15) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:31:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0xfffffffd}, &(0x7f0000000040)=0xc) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 601.238203][ T26] audit: type=1800 audit(1575354669.014:141): pid=21396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16946 res=0 06:31:09 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x288, r0, 0x12, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x948}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4eabf36d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x148, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x297}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf817}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a922ac7", 0xb2) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r4) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000140)=[{&(0x7f0000000100)='Pl', 0x2}, {&(0x7f00000001c0)="1812775bec65ab0a9f47b755d365e21ca1ed3c715947a534835cd7bcc8f1d8fa96b02d777a2a2699549fd4e7ec6704bde65bfdf0def350896919312696bfe0101200fb733a0643c69096a51fb7e6f6cd0a5b40fae0c65648bd590ca25bb119e705761605e5c2", 0x66}, {&(0x7f00000002c0)="bec28118b5819680ca57b7376547172d57e6c88bca91cb02ef3ed25008a24584224d644fb3ef573d781c21a327211efd31701980a09740fea37a01abea46c0f4a8e14f069b2c35c0cb07ed", 0x4b}, {&(0x7f0000000340)="c71531c368115c6b542accc9fa34e30d1b5d2567f22e39d104b6f139542625f220335d897d9b76d3c0ee0375cff7e617acd266dcec32427525e90091e30f19361511b5376195bbcdbb19ee7527321ed51dd20beda4", 0x55}], 0x4, r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r5) r7 = syz_open_dev$binderN(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x9) keyctl$get_persistent(0x16, 0xee00, r6) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) tgkill(r9, 0x0, 0x1e) 06:31:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) r6 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x108, 0x4384323}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000380)={r7, 0x1000, 0xffff, 0x10000}, &(0x7f00000003c0)=0x10) r8 = socket(0xa, 0x1, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6(0xa, 0x400000000001, 0x0) close(r10) r11 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x200004) sendfile(r10, r11, 0x0, 0x80001d00c0d0) r12 = socket(0xa, 0x1, 0x0) close(r12) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7c, &(0x7f0000000240)={r14, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000000400)={r14, 0xe5, "3592c12fd7df1cb0f8ed86fdd0b882893c263bbddf91d2280cc07a437a0884ca564a94055fb9b8757ad4b22b9161004ee21e247b2e327672f7d636b38bbac42a4c4fb80794f92f8d508438d828ec362ffdc51821d430fd41a2d1e57a3492a0f490e8b891acc0b01279a49b57ccca53ab7982ff4d973a6b1ddab031aedc451029d54244ea6f435c7e01eb26f39493a527907dcbd06dac8de29e2d55f918da2a324c2869ea292baf478f13251b2d47200cac78fa8118ca3937f1803860d9831a40cb02da8368514e00d84fc4b6b483a9458f3fd5cc06c951da38a49e591d6b834af47f0e43aa"}, &(0x7f0000000500)=0xed) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7c, &(0x7f0000000240)={r15, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r15}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r16, 0x58d2}, &(0x7f00000000c0)=0x8) 06:31:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0xfffffffffffffe0f) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) mmap$xdp(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x2000000, 0x40010, r1, 0x180000000) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:09 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) 06:31:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x0, 0x6, 0x9886, 0x3}) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0xbaa, 0x2}) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000340)={0x1, 0x3, 0xbd, 0x1f}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000dc0), 0x1000000000000341, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 602.435998][ T26] audit: type=1800 audit(1575354670.204:142): pid=21463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16947 res=0 06:31:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 602.584873][ T26] audit: type=1800 audit(1575354670.234:143): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16857 res=0 06:31:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000040), 0x0, 0x800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) 06:31:10 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae64, 0x0) dup3(r3, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r5}) setns(r2, 0x0) 06:31:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x8, 0x0, 0x102000}, 0x5, 0xe60, 'id0\x00', 'timer1\x00', 0x0, 0x6, 0xffff, 0x8, 0xa7}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffffffffffffffc7, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0xfffffcc9, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r7 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x5, 0x480800) r8 = socket(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7c, &(0x7f0000000240)={r10, @in={{0x2, 0x0, @local}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000340)={r10, 0x100}, &(0x7f0000000380)=0x8) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "1346e383ba138c80"}, 0x10}, 0x1, 0x0, 0x0, 0x14004080}, 0x20080084) [ 602.725575][ T26] audit: type=1800 audit(1575354670.234:144): pid=21440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16857 res=0 [ 602.929707][ T26] audit: type=1800 audit(1575354670.244:145): pid=21453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16857 res=0 06:31:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0xff}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10800080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x80, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x23}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f5e}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xe5}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0xc041}, 0x928e4a5fe5e2b783) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r4, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 602.975780][T21485] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 06:31:10 executing program 2: r0 = open(&(0x7f0000000300)='./file0/file0\x00', 0xc000, 0x246) ioctl$RTC_UIE_OFF(r0, 0x7004) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)="1f31de6c530c91ad801a25c9ecf0b5ce19fb1aa1678944892938f9bb6ccf3aafd620feaf2e180964ee45becde25afad7015a5ae290ba5fcaa57f1ee676f2b6e054c8a01a08f6c17a8d7de0238641829246acef4ba3fabdbd20712986a9c0c50879d8725da8c78c47de6d604aabaf52c24e78d21fad2517f6720287b0c11d8ae9d05cf3962c573656e11f24b747ae5efbc58a1193d45783e49056ed73c7029b8199c39317441b827f79690084f49fa0a0ff9dffc4fabfad0c6e1d947330346588f3129f4670faaccbc929ee3a2e680ccf4411", 0xd2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) fallocate(r3, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffd) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f00000002c0), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3624212}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8050006) 06:31:10 executing program 1: unshare(0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r1, 0x0) [ 603.119057][T21500] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 603.146577][T21500] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 06:31:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) arch_prctl$ARCH_GET_CPUID(0x1011) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040)=0x1f, 0x4) 06:31:11 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "bcfa1e82387c4631", "9b41ca5bd52f7f67bae5cbef12286167", "9a548cc1", "be3067c72374d95e"}, 0x28) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r3, 0x0) 06:31:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 603.643533][T21488] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 603.746021][T21508] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 603.763144][T21508] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 603.771357][ T26] audit: type=1800 audit(1575354671.544:146): pid=21518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16943 res=0 [ 603.790217][T21521] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 603.881919][T21521] CPU: 0 PID: 21521 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 603.890455][T21521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.900545][T21521] Call Trace: [ 603.903863][T21521] dump_stack+0x11d/0x181 [ 603.908237][T21521] dump_header+0xaa/0x449 [ 603.912590][T21521] oom_kill_process.cold+0x10/0x15 [ 603.918240][T21521] out_of_memory+0x231/0xa00 [ 603.922925][T21521] mem_cgroup_out_of_memory+0x128/0x150 [ 603.928746][T21521] try_charge+0xb5c/0xbe0 [ 603.933154][T21521] ? __rcu_read_unlock+0x66/0x3c0 [ 603.938237][T21521] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 603.944436][T21521] __memcg_kmem_charge+0xde/0x240 [ 603.949477][T21521] __alloc_pages_nodemask+0x26c/0x310 [ 603.954939][T21521] alloc_pages_current+0xd1/0x170 [ 603.960020][T21521] __vmalloc_node_range+0x2d7/0x4c0 [ 603.965372][T21521] __vmalloc+0x4d/0x70 [ 603.969460][T21521] ? vmx_vm_alloc+0x40/0x50 [ 603.974060][T21521] vmx_vm_alloc+0x40/0x50 [ 603.978516][T21521] kvm_dev_ioctl+0x137/0xca0 [ 603.983214][T21521] ? kvm_put_kvm+0x650/0x650 [ 603.987825][T21521] do_vfs_ioctl+0x991/0xc60 [ 603.992349][T21521] ? tomoyo_file_ioctl+0x34/0x40 [ 603.997296][T21521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.003674][T21521] ksys_ioctl+0xbd/0xe0 [ 604.007837][T21521] __x64_sys_ioctl+0x4c/0x60 [ 604.012434][T21521] do_syscall_64+0xcc/0x370 [ 604.017069][T21521] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 604.023118][T21521] RIP: 0033:0x45a679 [ 604.027019][T21521] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.046686][T21521] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.055104][T21521] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 604.063083][T21521] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 604.071250][T21521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:31:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x105000, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x80000000) r3 = accept4(r0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0xfffffe19, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40300, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0xfffffccf, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x202440, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)=0x1) 06:31:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffd, 0x200104) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x43d68e26, 0x1, 0x4, 0x2001000, {}, {0x4, 0x0, 0x9, 0xff, 0x9, 0x6, "19c0eb43"}, 0x3, 0x0, @planes=&(0x7f0000000040)={0xfffff7ab, 0x6, @mem_offset=0x80000000, 0x2}, 0x4}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e20, @rand_addr=0x5}}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 604.079224][T21521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 604.087358][T21521] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 604.098151][T21521] memory: usage 307200kB, limit 307200kB, failcnt 3241 06:31:11 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x26e1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) dup3(r2, r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x9}) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000010b7705f00"/32]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0xa7a7, 0x61e, 0x5d6c, 0x1000]}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 604.154298][T21521] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 604.197980][T21521] Memory cgroup stats for /syz1: [ 604.198139][T21521] anon 248545280 [ 604.198139][T21521] file 155648 [ 604.198139][T21521] kernel_stack 4497408 [ 604.198139][T21521] slab 22380544 [ 604.198139][T21521] sock 0 [ 604.198139][T21521] shmem 0 [ 604.198139][T21521] file_mapped 0 [ 604.198139][T21521] file_dirty 0 [ 604.198139][T21521] file_writeback 0 [ 604.198139][T21521] anon_thp 218103808 [ 604.198139][T21521] inactive_anon 262144 [ 604.198139][T21521] active_anon 248545280 [ 604.198139][T21521] inactive_file 212992 [ 604.198139][T21521] active_file 40960 [ 604.198139][T21521] unevictable 0 [ 604.198139][T21521] slab_reclaimable 3784704 [ 604.198139][T21521] slab_unreclaimable 18595840 [ 604.198139][T21521] pgfault 43956 [ 604.198139][T21521] pgmajfault 0 [ 604.198139][T21521] workingset_refault 2541 [ 604.198139][T21521] workingset_activate 264 [ 604.198139][T21521] workingset_nodereclaim 0 [ 604.198139][T21521] pgrefill 1657 [ 604.198139][T21521] pgscan 15858 [ 604.198139][T21521] pgsteal 9520 06:31:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x840480, 0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040)=0xbf4, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) 06:31:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x240000) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f00000000c0)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0xffffffe1, 0x1, 0x9}) [ 604.351106][T21521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15673,uid=0 [ 604.426321][T21521] Memory cgroup out of memory: Killed process 15673 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:31:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) modify_ldt$read(0x0, &(0x7f0000000040)=""/169, 0xa9) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000000)) r2 = semget$private(0x0, 0x5, 0x200) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000100)=""/190) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) [ 604.584277][T21520] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 604.652340][T21520] CPU: 0 PID: 21520 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 604.660763][T21520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.670822][T21520] Call Trace: [ 604.674129][T21520] dump_stack+0x11d/0x181 [ 604.678469][T21520] dump_header+0xaa/0x449 [ 604.682803][T21520] oom_kill_process.cold+0x10/0x15 [ 604.687998][T21520] out_of_memory+0x231/0xa00 [ 604.692617][T21520] mem_cgroup_out_of_memory+0x128/0x150 [ 604.698274][T21520] try_charge+0x7f5/0xbe0 06:31:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) recvmsg$can_bcm(r2, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/250, 0xfa}], 0x2, 0xffffffffffffffff}, 0x8000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae64, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000000c0)=""/4) dup3(r4, r3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae64, 0x0) dup3(r8, r9, 0x0) r10 = pkey_alloc(0x0, 0x1) pkey_free(r10) dup3(r1, r9, 0x80000) r11 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r11, 0x40206417, 0x0) syz_kvm_setup_cpu$x86(r3, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0f01d1f008150f01c40ff80067f6e0baf80c66b850ad458a66efbafc0c66edba2000b80000ef262e3e0f01c22e26362e0f01c266b93a0a000066b800a0000066ba000000000f30", 0x47}], 0x1, 0x8, &(0x7f0000000100)=[@cstype3={0x5, 0x7}], 0x1) r12 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) sendmmsg$unix(r12, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x40004) [ 604.702704][T21520] ? __rcu_read_unlock+0x10/0x3c0 [ 604.707778][T21520] mem_cgroup_try_charge+0xd2/0x260 [ 604.712988][T21520] mem_cgroup_try_charge_delay+0x3a/0x80 [ 604.718667][T21520] wp_page_copy+0x322/0x1120 [ 604.723252][T21520] ? __read_once_size+0x41/0xe0 [ 604.728169][T21520] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 604.734065][T21520] do_wp_page+0x192/0x11f0 [ 604.738510][T21520] __handle_mm_fault+0x1ab1/0x2c70 [ 604.743690][T21520] handle_mm_fault+0x21b/0x530 [ 604.748460][T21520] __do_page_fault+0x456/0x8d0 [ 604.753240][T21520] do_page_fault+0x38/0x194 [ 604.757749][T21520] page_fault+0x34/0x40 [ 604.761906][T21520] RIP: 0033:0x411e9a [ 604.765854][T21520] Code: 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 c7 45 18 01 00 00 00 49 89 85 10 05 00 00 48 8b 05 ae 65 66 00 00 01 00 00 00 c7 05 ba 65 66 00 01 00 00 00 41 c7 85 1c 06 00 [ 604.785631][T21520] RSP: 002b:00007ffde2f6f960 EFLAGS: 00010206 [ 604.791871][T21520] RAX: 0000000000a78928 RBX: 0000000000020000 RCX: 000000000045a6ca [ 604.800108][T21520] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 604.808108][T21520] RBP: 00007ffde2f6fa40 R08: ffffffffffffffff R09: 0000000000000000 [ 604.816084][T21520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde2f6fb30 [ 604.824060][T21520] R13: 00007fdd6be41700 R14: 0000000000000002 R15: 000000000075c07c [ 604.842086][T21520] memory: usage 304908kB, limit 307200kB, failcnt 3241 [ 604.887125][T21520] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 604.920161][T21520] Memory cgroup stats for /syz1: [ 604.920370][T21520] anon 246489088 [ 604.920370][T21520] file 155648 [ 604.920370][T21520] kernel_stack 4497408 [ 604.920370][T21520] slab 22380544 [ 604.920370][T21520] sock 0 [ 604.920370][T21520] shmem 0 [ 604.920370][T21520] file_mapped 0 [ 604.920370][T21520] file_dirty 0 [ 604.920370][T21520] file_writeback 0 [ 604.920370][T21520] anon_thp 216006656 [ 604.920370][T21520] inactive_anon 262144 [ 604.920370][T21520] active_anon 246489088 [ 604.920370][T21520] inactive_file 212992 [ 604.920370][T21520] active_file 40960 [ 604.920370][T21520] unevictable 0 [ 604.920370][T21520] slab_reclaimable 3784704 [ 604.920370][T21520] slab_unreclaimable 18595840 [ 604.920370][T21520] pgfault 43956 [ 604.920370][T21520] pgmajfault 0 [ 604.920370][T21520] workingset_refault 2541 [ 604.920370][T21520] workingset_activate 264 [ 604.920370][T21520] workingset_nodereclaim 0 [ 604.920370][T21520] pgrefill 1657 [ 604.920370][T21520] pgscan 15858 [ 604.920370][T21520] pgsteal 9520 [ 605.025664][T21520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20815,uid=0 [ 605.048054][T21520] Memory cgroup out of memory: Killed process 20815 (syz-executor.1) total-vm:72712kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:31:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x2}, 0x28, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:13 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x40000000007, 0x4000) setns(r2, 0x0) 06:31:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x4d0041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x6, 0x0, 0x0, 0xfffffffe}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100500}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x400, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) connect$caif(r6, &(0x7f0000000300), 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x78, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4a4f23d2e3ba8f86}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004004}, 0xa0) 06:31:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x6) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) 06:31:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200100, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000040)="49873dbe6a5b619d16ba2c82b066c080867e306de82b276b6f5cb88bf16cbb488099e5241f4bc6863c70", 0x2a}, {&(0x7f0000000080)="57a0e7cc60820c0a89ecde866e136c911c01267b1a2a64ac332962e8d66c4ea2fbb3b6eefd9918b4b3d002168523c970e4dfd7dbb9b4c205db7433ee50833e2857ca4eeff6d28d936b4824b8c8187d60f58166d202ff136876e3882173295c97a2afef4384234e21aee29783f7f439c97a236016b0178de7cf080975854cc501d6dc10c0d78abfc410f0e17e9a3c9a39c8e2e84c9eef178c863bebd468cb90fab9b11c273b22633d403adb1dfba182d94672e92a0d584bb5565187f835bb8edd8e906659d0f61b5138c0b06754debd84e9e1d5ba8ec709e4ce561447e1b2c35f5c2ed372d110937508123cf0", 0xec}], 0x2, &(0x7f0000000e40)}], 0x1, 0x0) [ 605.592414][T21602] mmap: syz-executor.1 (21602) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:31:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40), 0x0, 0x10}], 0x1, 0x0) 06:31:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000003800)={0x1, 'erspan0\x00', 0x5}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8001) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) r4 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000003840)=0xa8, 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000003740)={0xfc, {{0xa, 0x4e24, 0x1, @remote, 0x101}}}, 0x88) recvmmsg(r2, &(0x7f0000003600)=[{{&(0x7f00000000c0)=@ethernet={0x0, @local}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000014c0)=""/223, 0xdf}], 0x8, &(0x7f0000001640)=""/255, 0xff}, 0xffffffff}, {{&(0x7f0000001740)=@ll, 0x80, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/104, 0x68}, {&(0x7f0000001840)=""/68, 0x44}, {&(0x7f00000018c0)=""/132, 0x84}], 0x3}, 0xff}, {{&(0x7f00000019c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/32, 0x20}, {&(0x7f0000001a80)=""/216, 0xd8}, {&(0x7f0000001b80)=""/33, 0x21}], 0x3, &(0x7f0000001c00)=""/4096, 0x1000}}, {{&(0x7f0000002c00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002c80)=""/163, 0xa3}, {&(0x7f0000002d40)=""/99, 0x63}, {&(0x7f0000002dc0)=""/58, 0x3a}, {&(0x7f0000002e00)=""/29, 0x1d}, {&(0x7f0000002e40)=""/121, 0x79}, {&(0x7f0000002ec0)=""/65, 0x41}, {&(0x7f0000002f40)=""/252, 0xfc}, {&(0x7f0000003040)=""/10, 0xa}], 0x8, &(0x7f0000003100)=""/213, 0xd5}, 0x5d}, {{&(0x7f0000003200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003280)=""/168, 0xa8}, {&(0x7f0000003340)=""/187, 0xbb}, {&(0x7f0000003400)=""/152, 0x98}, {&(0x7f00000034c0)=""/98, 0x62}], 0x4, &(0x7f0000003580)=""/88, 0x58}, 0x53e}], 0x5, 0x2120, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") 06:31:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0xfffffd73) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x8233ebc4eca4bf90, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="e924cdc16f125922d99414c747d270b1a74e09bb7728718fd861fe42f9ed21247a81c99e90b5a506ff719ea9470d22b9ec3764da867ec1a3a19af4bd245516abf64f9eaf499f7bb5136518c9593ceb258c930a3aa5913112dd056af506830f0d2f3119cc05f9da935c039b836189bedfe049c4030d849e906ffdbe73c199559b451733442fa7a2085877a137958df4e303f4ff27af7118f344db3488cffc8d49cca08bd5ca09735446e101fd2a58367011010a1e1a93008ca10f4e11edc57c3499c754d37924a4ed", 0xc8) 06:31:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:13 executing program 1: unshare(0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae64, 0x0) dup3(r1, r2, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000000, 0x442800) dup3(r1, r0, 0x140000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae64, 0x0) dup3(r6, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae64, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae64, 0x0) dup3(r10, r11, 0x0) dup3(r10, r3, 0x80000) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r13 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r13, 0x40206417, 0x0) getsockopt$packet_int(r13, 0x107, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(r12, 0xae64, 0x0) dup3(r5, r12, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fcntl$getown(r5, 0x9) setns(r4, 0x0) 06:31:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0x0, 0x5, {0x0, 0x12}}, 0x20) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000000)="1253a0e661b0035a9508ae90aa2a221ef6c85c51d0699d00be2fe55dee7e02a64301be9ae228bed67c25c3d846e63677dd835de046c945f969400771a92e08ef3a49ae509158b40dc8abd27b7d519d160c8c5c22e3576ba746f5d2d6f96aaa32ee5d63386f30d1589a9f3cb810a3f2c295841cef6ff558271300d29dde3fe1b8653f218bcaf3d83672ebfbecfc10024a353c16995c5bdd872ab5192f18a0baee7446332d151d515792034c678ab38e98876a9a000000000000000000", 0xfd1c}, {&(0x7f00000000c0)="9cace6b9a9f3edfef9f37a57534eeda7d586a76705b625cf1f6e01d0501708c0d866ef9dc47b2cbe825a101d0327a660ca4fa88c6889571e7d805d82ba215dcb8d19305b40deb65f6af7d8422d50dc612ce1fbcb81436bc01902"}, {&(0x7f0000000240)="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"}, {&(0x7f0000001340)="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", 0x14c}, {&(0x7f0000000340)="9ee2acdde788f4ac656d841c208f901ec9d45183712521741d737d4a442690c6367326b4b1815ef6f256f3609aa2be35e85be7d6a8e30ebfd913d5275984a9f09866828554d5f4a98561c76952cf276fc2422f92cf9cff9b6a9b136f058113bc33f07d8fb3e3e1bcf9b500b4b6ab1cd2f814874f8105e6a0e68202d40dbbd245cc280cbb2473a5924e86d484e5f09ed3102429e5ee5a8df597ed83de891bf41b8bb6d2e4ca85f6abd3c5af28651eb85b98258f92d76383"}, {&(0x7f0000000400)="0b316d6dfc4e47ad78521ac332896020f74a9baca1625e5c01edd222950e6c7ea3c1a8bb16bf008e3898f28bc3a2d172f3cb9eb4392ea5c5668008f147eddeee91085c66bc54dfa84133a3ec209d909d54010e39c7a9a02c021777d0de42ff49c0f68b9c3caa77b810d47b2c5f29a12d11f1c59fe1f3ac538dc76040bc608b68eb4e89cecf"}, {&(0x7f0000000140)="512f173ac36a1ffaf65d45f508e49bc0b3f2828ad0e29610ca3dce2409", 0x29c}], 0x100000000000017a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 606.067194][T21638] syz-executor.1 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 606.087290][T21638] CPU: 0 PID: 21638 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 606.095668][T21638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.106013][T21638] Call Trace: [ 606.109321][T21638] dump_stack+0x11d/0x181 [ 606.113713][T21638] dump_header+0xaa/0x449 [ 606.118067][T21638] oom_kill_process.cold+0x10/0x15 [ 606.123188][T21638] out_of_memory+0x231/0xa00 [ 606.127849][T21638] mem_cgroup_out_of_memory+0x128/0x150 [ 606.133425][T21638] try_charge+0xb5c/0xbe0 [ 606.137891][T21638] ? __rcu_read_unlock+0x66/0x3c0 [ 606.142927][T21638] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 606.148405][T21638] __memcg_kmem_charge+0xde/0x240 [ 606.153435][T21638] __alloc_pages_nodemask+0x26c/0x310 [ 606.158833][T21638] alloc_pages_current+0xd1/0x170 [ 606.163853][T21638] __vmalloc_node_range+0x2d7/0x4c0 [ 606.169148][T21638] __vmalloc+0x4d/0x70 [ 606.173209][T21638] ? vmx_vm_alloc+0x40/0x50 [ 606.177829][T21638] vmx_vm_alloc+0x40/0x50 [ 606.182289][T21638] kvm_dev_ioctl+0x137/0xca0 [ 606.186897][T21638] ? kvm_put_kvm+0x650/0x650 [ 606.191573][T21638] do_vfs_ioctl+0x991/0xc60 [ 606.196094][T21638] ? tomoyo_file_ioctl+0x34/0x40 [ 606.201091][T21638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.207477][T21638] ksys_ioctl+0xbd/0xe0 [ 606.211644][T21638] __x64_sys_ioctl+0x4c/0x60 [ 606.216239][T21638] do_syscall_64+0xcc/0x370 [ 606.220781][T21638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 606.226735][T21638] RIP: 0033:0x45a679 [ 606.230647][T21638] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.250239][T21638] RSP: 002b:00007fdd6be82c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.258688][T21638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 606.266659][T21638] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 606.274673][T21638] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 606.282797][T21638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd6be836d4 [ 606.290777][T21638] R13: 00000000004c3a43 R14: 00000000004d8f78 R15: 00000000ffffffff [ 606.372729][T21638] memory: usage 307200kB, limit 307200kB, failcnt 3295 [ 606.386808][T21638] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 606.408123][T21638] Memory cgroup stats for /syz1: [ 606.408937][T21638] anon 248741888 [ 606.408937][T21638] file 155648 [ 606.408937][T21638] kernel_stack 4497408 [ 606.408937][T21638] slab 22380544 [ 606.408937][T21638] sock 0 [ 606.408937][T21638] shmem 0 [ 606.408937][T21638] file_mapped 0 [ 606.408937][T21638] file_dirty 0 [ 606.408937][T21638] file_writeback 0 [ 606.408937][T21638] anon_thp 218103808 [ 606.408937][T21638] inactive_anon 262144 [ 606.408937][T21638] active_anon 248741888 [ 606.408937][T21638] inactive_file 212992 [ 606.408937][T21638] active_file 40960 [ 606.408937][T21638] unevictable 0 [ 606.408937][T21638] slab_reclaimable 3784704 [ 606.408937][T21638] slab_unreclaimable 18595840 [ 606.408937][T21638] pgfault 44154 [ 606.408937][T21638] pgmajfault 0 [ 606.408937][T21638] workingset_refault 2541 [ 606.408937][T21638] workingset_activate 264 [ 606.408937][T21638] workingset_nodereclaim 0 [ 606.408937][T21638] pgrefill 1690 [ 606.408937][T21638] pgscan 15858 [ 606.408937][T21638] pgsteal 9520 06:31:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:14 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000140)={{0x3, 0x0, @identifier="9299e68ea1dc204e266302dfdd4c72b4"}}) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7fff, {0x9, 0x8, 0x5, 0x20, 0x1f, 0x81}, 0x5}, 0xe) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x13734dedddb63a27, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae64, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000000c0)={0x0, {0x3, 0x9}}) dup3(r2, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_out(r4, 0x0, &(0x7f0000000040)) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46fcff0404ffffffff0000000003000000000000001d0300000000000010ffffffffffffff400200000000000001000000000038000200ff7f0100018001000000df0e000000000000000000000300000000000000c7000000000000000200000000000000ff03000000000000090000000000400004000000f8ffffff0800000000000000050000000000000009000000000000000500000000000000000000000000000006000000000000006951b8fbf662381bf98db07655495d331b050000000bbd208cc9384fc12b000000009b3e54e6dd8124a6e9b31dafef24271a5674d4a9ee5d388a4c0fa01a27c4249159e08400b5b4a5f78a0a9f74096deab48b2f68bc53a55f321126a02f00171815cef60b2b0b4fb18ad54e795247c81c4117af8bce66045d6b175331ccc54e1632741617e8d2f5265b372a42310c6bd9c81048eb50d33736a0aa01a37329909efa1c7c8c7315fd3fb65ae23ac8888e76353491c2c969ec11768882af4eb214c169f78f47db8644cff362cb338831a862b2653f15cf6d16984ce14b7dc258d9be698f2bf93583979765b2f5b100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b4ea5cb67539e5a50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/1694], 0x69d) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 606.508964][T21638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21622,uid=0 [ 606.581804][T21638] Memory cgroup out of memory: Killed process 21622 (syz-executor.1) total-vm:72844kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 06:31:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x0) [ 606.720761][T21635] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 606.772410][T21635] CPU: 1 PID: 21635 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 606.780784][T21635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.791124][T21635] Call Trace: [ 606.794421][T21635] dump_stack+0x11d/0x181 [ 606.798777][T21635] dump_header+0xaa/0x449 [ 606.803144][T21635] oom_kill_process.cold+0x10/0x15 [ 606.808464][T21635] out_of_memory+0x231/0xa00 [ 606.813079][T21635] mem_cgroup_out_of_memory+0x128/0x150 [ 606.818715][T21635] try_charge+0x7f5/0xbe0 [ 606.823655][T21635] ? __rcu_read_unlock+0x10/0x3c0 [ 606.828688][T21635] mem_cgroup_try_charge+0xd2/0x260 [ 606.833945][T21635] mem_cgroup_try_charge_delay+0x3a/0x80 [ 606.839596][T21635] __handle_mm_fault+0x17ab/0x2c70 [ 606.844751][T21635] handle_mm_fault+0x21b/0x530 [ 606.849989][T21635] __do_page_fault+0x456/0x8d0 [ 606.854844][T21635] do_page_fault+0x38/0x194 [ 606.859355][T21635] page_fault+0x34/0x40 [ 606.863510][T21635] RIP: 0033:0x411e6f [ 606.867407][T21635] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 606.887482][T21635] RSP: 002b:00007ffde2f6f960 EFLAGS: 00010206 [ 606.893548][T21635] RAX: 00007fdd6be42000 RBX: 0000000000020000 RCX: 000000000045a6ca [ 606.901630][T21635] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 606.909646][T21635] RBP: 00007ffde2f6fa40 R08: ffffffffffffffff R09: 0000000000000000 06:31:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040)=0x9d6, 0x4) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000100)=0x1, 0x4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") [ 606.917641][T21635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde2f6fb30 [ 606.925655][T21635] R13: 00007fdd6be62700 R14: 0000000000000001 R15: 000000000075bfd4 [ 606.956090][T21635] memory: usage 304904kB, limit 307200kB, failcnt 3295 [ 606.963183][T21635] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 606.970157][T21635] Memory cgroup stats for /syz1: [ 606.970332][T21635] anon 246571008 [ 606.970332][T21635] file 155648 [ 606.970332][T21635] kernel_stack 4497408 [ 606.970332][T21635] slab 22380544 [ 606.970332][T21635] sock 0 [ 606.970332][T21635] shmem 0 [ 606.970332][T21635] file_mapped 0 [ 606.970332][T21635] file_dirty 0 [ 606.970332][T21635] file_writeback 0 [ 606.970332][T21635] anon_thp 216006656 [ 606.970332][T21635] inactive_anon 262144 [ 606.970332][T21635] active_anon 246571008 [ 606.970332][T21635] inactive_file 212992 06:31:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x12) syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x63b, 0x1000) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000000)}], 0x1, 0x7f2842f863724f0e) 06:31:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x141100, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000240)={0x2e, 0x3ff, 0xc, 0xc, 0x2}) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000100)) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0xfffffebe, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x1, 0x36365ff73e827c09) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) r7 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x5, 0x4, 0x1f, 0xe2, 0x0, 0x7fffffff, 0x8, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x80000000, 0x9}, 0x40, 0x4c, 0x7, 0x5, 0x6, 0xffff8ecf, 0x8000}, 0x0, 0x7, r7, 0x2) [ 606.970332][T21635] active_file 40960 [ 606.970332][T21635] unevictable 0 [ 606.970332][T21635] slab_reclaimable 3784704 [ 606.970332][T21635] slab_unreclaimable 18595840 [ 606.970332][T21635] pgfault 44154 [ 606.970332][T21635] pgmajfault 0 [ 606.970332][T21635] workingset_refault 2541 [ 606.970332][T21635] workingset_activate 264 [ 606.970332][T21635] workingset_nodereclaim 0 [ 606.970332][T21635] pgrefill 1690 [ 606.970332][T21635] pgscan 15858 [ 606.970332][T21635] pgsteal 9520 [ 607.128228][T21635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21612,uid=0 06:31:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xdeb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000002c0)=0xece) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x2) 06:31:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x8a, &(0x7f0000000e40)}], 0x8d9, 0x0) [ 607.175900][T21635] Memory cgroup out of memory: Killed process 21612 (syz-executor.1) total-vm:72712kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 607.386292][ T7] ================================================================== [ 607.395170][ T7] BUG: KCSAN: data-race in percpu_counter_add_batch / wb_over_bg_thresh [ 607.403500][ T7] [ 607.406057][ T7] write to 0xffff8880a8086068 of 8 bytes by task 21666 on cpu 1: [ 607.413876][ T7] percpu_counter_add_batch+0xca/0x150 [ 607.419372][ T7] account_page_dirtied+0x1f7/0x4a0 [ 607.424575][ T7] __set_page_dirty+0x8a/0x270 [ 607.429358][ T7] mark_buffer_dirty+0x27f/0x2c0 [ 607.434333][ T7] __block_commit_write.isra.0+0x11f/0x170 [ 607.440143][ T7] block_write_end+0x6d/0x140 [ 607.444822][ T7] generic_write_end+0x8a/0x1f0 [ 607.449680][ T7] ext4_da_write_end+0x158/0x620 [ 607.454731][ T7] generic_perform_write+0x1d3/0x320 [ 607.460054][ T7] __generic_file_write_iter+0x251/0x380 [ 607.465698][ T7] ext4_file_write_iter+0x1bd/0xa00 [ 607.470906][ T7] new_sync_write+0x388/0x4a0 [ 607.475586][ T7] __vfs_write+0xb1/0xc0 [ 607.479829][ T7] vfs_write+0x18a/0x390 [ 607.484076][ T7] ksys_write+0xd5/0x1b0 [ 607.488328][ T7] __x64_sys_write+0x4c/0x60 [ 607.492928][ T7] do_syscall_64+0xcc/0x370 [ 607.497528][ T7] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 607.503411][ T7] [ 607.505860][ T7] read to 0xffff8880a8086068 of 8 bytes by task 7 on cpu 0: [ 607.513505][ T7] wb_over_bg_thresh+0x247/0x490 [ 607.518433][ T7] wb_workfn+0x3b3/0x970 [ 607.522666][ T7] process_one_work+0x3d4/0x890 [ 607.527510][ T7] worker_thread+0xa0/0x800 [ 607.532008][ T7] kthread+0x1d4/0x200 [ 607.536066][ T7] ret_from_fork+0x1f/0x30 [ 607.540463][ T7] [ 607.542773][ T7] Reported by Kernel Concurrency Sanitizer on: [ 607.549013][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.0-syzkaller #0 [ 607.557057][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.567109][ T7] Workqueue: writeback wb_workfn (flush-8:0) [ 607.573098][ T7] ================================================================== [ 607.581154][ T7] Kernel panic - not syncing: panic_on_warn set ... [ 607.587733][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.0-syzkaller #0 [ 607.595528][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.605578][ T7] Workqueue: writeback wb_workfn (flush-8:0) [ 607.611552][ T7] Call Trace: [ 607.614839][ T7] dump_stack+0x11d/0x181 [ 607.619174][ T7] panic+0x210/0x640 [ 607.623064][ T7] ? vprintk_func+0x8d/0x140 [ 607.627649][ T7] kcsan_report.cold+0xc/0xd [ 607.632237][ T7] kcsan_setup_watchpoint+0x3fe/0x460 [ 607.637601][ T7] __tsan_read8+0xc6/0x100 [ 607.642110][ T7] wb_over_bg_thresh+0x247/0x490 [ 607.647037][ T7] ? string+0x67/0xa0 [ 607.651025][ T7] wb_workfn+0x3b3/0x970 [ 607.655266][ T7] ? preempt_schedule_common+0x37/0x90 [ 607.660714][ T7] ? preempt_schedule+0x30/0x40 [ 607.665556][ T7] ? ___preempt_schedule+0x16/0x20 [ 607.670899][ T7] process_one_work+0x3d4/0x890 [ 607.675951][ T7] worker_thread+0xa0/0x800 [ 607.680453][ T7] kthread+0x1d4/0x200 [ 607.684509][ T7] ? rescuer_thread+0x6a0/0x6a0 [ 607.689345][ T7] ? kthread_stop+0x2d0/0x2d0 [ 607.694012][ T7] ret_from_fork+0x1f/0x30 [ 607.701269][ T7] Kernel Offset: disabled [ 607.705714][ T7] Rebooting in 86400 seconds..