00000000000000000001e657300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002301000080fe8000000000000000000000000000bb0800000000000000000000000000000000000000000000000000000000000000000000ff5229af9e8024a99d3fa31ca6690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0cd2945e9c19dbe8fa78cdba5ec9a86afe51d1485aaa268124e611646ca9c34844a6f2f5db4ad652e8804a5e2265393f9eee20eea4c6f8c6d507bfeb2148e0721744b36ec10952a37a89e231c965ac3e24bf07b87c0475bc12537ad847e320fb7573212cace643d106f5648e727e4c5113da2ee16777458156c2936542891fe33aa223be2d4e0cda458a22fdcc4b858a1c0356e6f2beb81c2665e9a8505427e5ded985382f0b33aa2b189cb"], 0x410) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) acct(&(0x7f0000000000)='./file1\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001580)}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x748, 0x170, 0x170, 0x170, 0x430, 0x260, 0x678, 0x678, 0x678, 0x678, 0x678, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0xff, 0x1f, 0x10000, 0xffffffff, 0x9, 0x9, 0x1ca2}}, @common=@frag={0x30, 'frag\x00', 0x0, {0xfc, 0x8, 0x8, 0x8, 0x3}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xd, @ipv4=@broadcast, @ipv4=@rand_addr=0x1ff, @port=0x4e20, @port=0x4e20}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x1a}, @mcast1, [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], [0xffffffff, 0xff000000, 0x0, 0xffffff00], 'erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x7f, 0x1, 0x2, 0x21}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x80000000, 0x7, 0x1}}}, {{@ipv6={@local, @ipv4={[], [], @remote}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'team0\x00', 'ipddp0\x00', {0xff}, {0xff}, 0xaf, 0x6, 0x1, 0x12}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x5d, 0x3d, 0x7fff, 0xfffffffffffffffd, 0xffffffffffff1c19, 0x40, 0x2}}, @common=@srh1={0x90, 'srh\x00', 0x1, {0x3f, 0xfc, 0x0, 0x2, 0x52e43b11, @remote, @ipv4={[], [], @broadcast}, @loopback, [0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0x8, 0x4}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@rand_addr=0x2, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@empty, @remote, [0xff, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0x0, 0xffffffff], 'ip6_vti0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x3b, 0xce, 0x1, 0x10}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x7, 0x7ff, 0xfc, 0x2, 0x21, 0x7, [@dev={0xfe, 0x80, [], 0x17}, @local, @ipv4={[], [], @local}, @loopback, @empty, @mcast2, @dev={0xfe, 0x80, [], 0x17}, @remote, @local, @ipv4={[], [], @remote}, @mcast2, @mcast1, @dev={0xfe, 0x80, [], 0x1e}, @ipv4, @local], 0xf}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, [], 0xb}, @port=0x4e20, @gre_key=0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a8) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) 15:31:37 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) setpriority(0x1, r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000140)=@rc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="15bdde1aa6d60af63c2563ff41b5b4783a85da9dfceb2c90933271bc1a20f58d24e3d8a5ac184750cb196ef5cfa5db4a51bde7baa60eb5b1c2016da863252b1a505fe7fce5e2e184a7dfa9db70715d8aff101574a7aebb6b191f4f873282af658c785fdd3e1ba6475ff6c17be9cf7858547d74de71febed855d2eba7117d1b8621", 0x81}], 0x1, &(0x7f0000000540)}, 0x0) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000280), 0x10}, 0x0) 15:31:37 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x80000000) io_setup(0x6, &(0x7f0000000000)=0x0) io_getevents(r1, 0x2, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x989680}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000600)=""/4096) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001600)=""/4096, &(0x7f0000000140)=0x1000) ioctl$EVIOCGREP(r0, 0x80047441, &(0x7f0000000540)=""/174) 15:31:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:37 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x10000, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) fcntl$getown(r0, 0x9) 15:31:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:37 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x6, 0x4) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=""/147, 0x93) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:37 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0//ile0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x80000001, r2}) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:37 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) r2 = msgget(0x2, 0x0) msgctl$IPC_RMID(r2, 0x0) mremap(&(0x7f0000b54000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) msgrcv(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x29, 0x1, 0x2000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:31:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x10000, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) [ 2546.666032] Killed process 23794 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:37 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getpgid(0xffffffffffffffff) r3 = getpgid(0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000100)=r3, 0x12) fcntl$setstatus(r2, 0x4, 0x42000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000000)) 15:31:37 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x105801, 0x0) read$FUSE(r0, &(0x7f0000004580), 0xfffffffffffffe16) [ 2546.764815] IPVS: ftp: loaded support on port[0] = 21 [ 2546.770166] device bridge_slave_1 left promiscuous mode [ 2546.775568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.786291] device bridge_slave_0 left promiscuous mode [ 2546.791798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2546.803385] team0 (unregistering): Port device team_slave_1 removed [ 2546.810254] team0 (unregistering): Port device team_slave_0 removed [ 2546.817052] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2546.829643] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2546.849391] bond0 (unregistering): Released all slaves [ 2546.915443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2546.921796] bridge0: port 1(bridge_slave_0) entered disabled state [ 2546.928266] device bridge_slave_0 entered promiscuous mode [ 2546.937632] bridge0: port 2(bridge_slave_1) entered blocking state [ 2546.943970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.950423] device bridge_slave_1 entered promiscuous mode [ 2546.959454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2546.969422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2546.985286] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2546.996123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2547.017804] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2547.024575] team0: Port device team_slave_0 added [ 2547.032627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2547.039402] team0: Port device team_slave_1 added [ 2547.047498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2547.057921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2547.068229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2547.075206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2547.082834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2547.090860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2547.129269] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.135614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2547.142124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.148439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2547.266705] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2547.273605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2547.290703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2547.307425] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2547.313542] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2547.320244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2547.326949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2547.343026] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2547.349120] 8021q: adding VLAN 0 to HW filter on device team0 [ 2547.422724] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2547.433608] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2547.438731] CPU: 1 PID: 24110 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2547.446008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2547.455351] Call Trace: [ 2547.457917] dump_stack+0xae/0xf0 [ 2547.461346] dump_header+0x7b/0x460 [ 2547.464946] ? ___ratelimit+0x139/0x150 [ 2547.468895] oom_kill_process+0xac/0x680 [ 2547.472927] ? out_of_memory+0x44/0x650 [ 2547.476874] out_of_memory+0x4af/0x650 [ 2547.480742] ? _cond_resched+0x17/0x60 [ 2547.484600] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2547.489649] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2547.494814] pagefault_out_of_memory+0x4f/0xa0 [ 2547.499369] mm_fault_error+0xec/0x270 [ 2547.503246] __do_page_fault+0x4ec/0x630 [ 2547.507292] ? __sys_socket+0x9f/0x160 [ 2547.511159] ? page_fault+0x8/0x30 [ 2547.514675] do_page_fault+0x37/0x160 [ 2547.518465] ? page_fault+0x8/0x30 [ 2547.522001] page_fault+0x1e/0x30 [ 2547.525446] RIP: 0033:0x43e461 [ 2547.541613] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2547.560620] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2547.565961] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2547.573214] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2547.580480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2547.587756] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2547.595003] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2547.602324] Task in /syz2 killed as a result of limit of /syz2 [ 2547.608306] memory: usage 1572kB, limit 0kB, failcnt 13032 [ 2547.613923] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2547.620695] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2547.626855] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2547.646472] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2547.655097] [24110] 0 24110 17553 8388 118784 0 0 syz-executor2 [ 2547.663929] Memory cgroup out of memory: Kill process 24110 (syz-executor2) score 8417000 or sacrifice child 15:31:38 executing program 1: r0 = socket$inet6(0xa, 0x3fffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x19, &(0x7f0000000040)=0x4) 15:31:38 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000d18dfa662718d4f2e2003ae84b9ba71965e1adb138119d65641c14eee25026e3c9c7e5ed91051c1d08bf567a6ac29e4f2e748b9aae82bde86079975ec82ec0e9d607abcafd3d8ed559cd9d89501b9f164f3444d869385231a9a90c2d5c4046eefde3c18501996de6435ceb1f93ec3cba5ddbfd80af9ae2cffe7d12e0a07e2809b96d72aecb9016943dfed2870dd50b14fa33bb34add07a1adfdb0c7ce4521c5ed39e", @ANYRES32=0x0, @ANYBLOB="035365000000000008001b0000000000"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x800000000044031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000200)=""/142, 0x8e) 15:31:38 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0xbfc, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1d, 0x5, 0x8, 0x8, 0x200, 0x8, 0x7f, 0x401, 0x0}, &(0x7f0000000080)=0x20) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r1, 0xfff}, 0x8) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x9f76) 15:31:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x10000, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) 15:31:38 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000cc6000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:38 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x5, 0x400400) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x1}) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) close(r0) r2 = fcntl$getown(r1, 0x9) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) 15:31:38 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = accept$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) shutdown(r2, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/101) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x600, 0x0, 0x2, 0x200}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r4, 0x901, 0x39b, 0x3, 0x7, 0x3f}, 0x14) socketpair$inet6(0xa, 0x0, 0x9, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280)=0x9, 0x4) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000002c0)=""/131) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r4, 0x100}, 0xc) r7 = accept(r6, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000440)=0x80) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000480)={0x8, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @rand_addr=0x80000001}}}, 0x108) recvmmsg(r7, &(0x7f00000027c0)=[{{&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/241, 0xf1}], 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x1f}, {{&(0x7f0000000780)=@nfc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/178, 0xb2}], 0x1, 0x0, 0x0, 0x9}, 0x1}, {{&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/170, 0xaa}], 0x1, &(0x7f0000000a80)=""/98, 0x62, 0x3}, 0x1ff}, {{&(0x7f0000000b00)=@sco, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/207, 0xcf}, {&(0x7f0000000c80)=""/219, 0xdb}], 0x2, &(0x7f0000000dc0)=""/41, 0x29, 0x7}, 0x1}, {{&(0x7f0000000e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/156, 0x9c}, {&(0x7f0000000f40)=""/24, 0x18}], 0x2, 0x0, 0x0, 0x8}, 0x5}, {{&(0x7f0000000fc0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001040)=""/94, 0x5e}, {&(0x7f00000010c0)=""/118, 0x76}], 0x2, &(0x7f0000001180)=""/177, 0xb1, 0xfffffffffffffb22}, 0x4}, {{&(0x7f0000001240)=@rc, 0x80, &(0x7f00000026c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/127, 0x7f}, {&(0x7f0000002340)=""/29, 0x1d}, {&(0x7f0000002380)=""/28, 0x1c}, {&(0x7f00000023c0)=""/57, 0x39}, {&(0x7f0000002400)=""/198, 0xc6}, {&(0x7f0000002500)=""/177, 0xb1}, {&(0x7f00000025c0)=""/32, 0x20}, {&(0x7f0000002600)=""/129, 0x81}], 0x9, &(0x7f0000002780)=""/20, 0x14, 0x2}, 0x9}], 0x7, 0x40000040, &(0x7f0000002980)={0x0, 0x989680}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002a80)={'veth0_to_bond\x00', &(0x7f00000029c0)=@ethtool_flash={0x33, 0x3, "5bf42d749b0ebdee0d5e2a7ae4985fe0ce63ac0efb26333216a1b1e827e156fb20ea6c7cf4aa021d8fdc245620476601873c5ffb0475385c3c8aa048161ffb7a2f2bd3eb97f27097e4bee9125a7324cfd7a497700d63e400af6c76bd2d59c7d13184c7cfc7efe5f4a147f068a05cdc30372129620520fb616d62b227e2af4640"}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000002ac0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000002b00)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e22, 0xfff, @mcast2}], 0x3c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000002b40), &(0x7f0000002b80)) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000002bc0), 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000002c00)) clock_gettime(0x0, &(0x7f0000002c40)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002c80)={0x0, 0x0}) write$evdev(r1, &(0x7f0000002cc0)=[{{0x77359400}, 0x3, 0x6b, 0x7ff}, {{0x0, 0x2710}, 0x1, 0x40, 0x7fff}, {{r9, r10/1000+10000}, 0x7, 0x2}, {{0x0, 0x2710}, 0x61fcda13, 0x101, 0xffff}, {{}, 0x3, 0x1, 0x6f87}, {{0x77359400}, 0x100000000, 0x1, 0x290}, {{r11, r12/1000+30000}, 0x1, 0x0, 0xf4}, {{}, 0x0, 0x80000000, 0x3}, {{}, 0xd03d, 0x8, 0x6}, {{0x77359400}, 0x7, 0x8, 0x5}], 0xf0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002dc0)={@local, 0x51, r3}) getsockopt(r7, 0x100000000, 0x4a2, &(0x7f0000002e00)=""/231, &(0x7f0000002f00)=0xe7) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000002f40)={r4, 0x8, 0xfff, 0x200}, 0x10) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) sendmsg$nl_route(r0, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)=@delneigh={0x74, 0x1d, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0xc1, 0x8, 0xb}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x100000001}, @NDA_SRC_VNI={0x8, 0xb, 0x100}, @NDA_MASTER={0x8, 0x9, 0x18}, @NDA_LINK_NETNSID={0x8, 0xa, 0x6}, @NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_DST_MAC={0xc, 0x1, @broadcast}, @NDA_PORT={0x8, 0x6, 0x4e23}, @NDA_MASTER={0x8, 0x9, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0x40}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000003380)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x8141}, 0xc, &(0x7f0000003340)={&(0x7f0000003100)=@newqdisc={0x228, 0x24, 0x110, 0x70bd2b, 0x25dfdbfd, {0x0, r3, {0xffe0, 0xfff1}, {}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x158, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x40}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x100, 0x3, 0x6, 0x0, 0x7, 0x4, 0xfffffffffffffffe, 0x5, 0x85a, 0x7, 0x11, 0x20, 0x0, 0x7, 0xffffffffffffffff}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x401}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_multiq={{0xc, 0x1, 'multiq\x00'}, {0x8, 0x2, {0x2, 0xf2}}}, @TCA_STAB={0x84, 0x8, [@TCA_STAB_DATA={0x10, 0x2, [0xf9aa, 0x8000, 0x0, 0x5, 0x1, 0x2]}, @TCA_STAB_BASE={0x1c, 0x1, {0xfffffffffffffffa, 0x8, 0x20, 0x7fff, 0x1, 0x14, 0x8, 0x7}}, @TCA_STAB_BASE={0x1c, 0x1, {0xda0f, 0x0, 0xfe, 0x5, 0x2, 0x3, 0x401, 0x3}}, @TCA_STAB_BASE={0x1c, 0x1, {0x8, 0x0, 0x8, 0x3797e41f, 0x2, 0x4, 0x8, 0x5}}, @TCA_STAB_BASE={0x1c, 0x1, {0x100000001, 0x8001, 0x401, 0x1, 0x1, 0x0, 0x1000000000, 0x1}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0xa9bbb6182c00a9ec}, 0x40) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000033c0)={r4, @in6={{0xa, 0x4e23, 0x5, @local, 0x3}}}, 0x84) 15:31:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:38 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="b9ff", 0x2, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) r1 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:38 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80001, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x200000, 0x0) renameat(r0, &(0x7f0000000080)='./file0//ile0\x00', r1, &(0x7f0000000280)='./file0//ile0\x00') r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 15:31:38 executing program 7: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @multicast2}, {0x1, @broadcast}, 0xa, {0x2, 0x4e21, @rand_addr=0x8}, 'bridge_slave_0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x10000, 0x0) getpgrp(0xffffffffffffffff) 15:31:38 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10400, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)=0x2) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:38 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0x8007) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xffffffffffffffcd) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, r2}, {0x0, 0x432}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:38 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000080)='./file0//ile0\x00', &(0x7f0000000200)="1c00000000000000c6e6c93a995b2ca838a603838e8047b8bc3bc7c4cd0f436d1192c74e777abf34546ba42968d4455baafc2d80b8ffbbe271", 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:38 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 2547.673916] Killed process 24110 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB [ 2547.712406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'. [ 2547.773617] IPVS: ftp: loaded support on port[0] = 21 [ 2547.787207] device bridge_slave_1 left promiscuous mode [ 2547.792652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.803352] device bridge_slave_0 left promiscuous mode [ 2547.808765] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.824500] team0 (unregistering): Port device team_slave_1 removed [ 2547.831399] team0 (unregistering): Port device team_slave_0 removed [ 2547.838257] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2547.854592] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2547.869829] bond0 (unregistering): Released all slaves [ 2547.933710] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.940077] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.946575] device bridge_slave_0 entered promiscuous mode [ 2547.955657] bridge0: port 2(bridge_slave_1) entered blocking state [ 2547.962012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.968496] device bridge_slave_1 entered promiscuous mode [ 2547.977547] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2547.987613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2548.004054] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2548.014931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2548.036540] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2548.043315] team0: Port device team_slave_0 added [ 2548.051462] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2548.058276] team0: Port device team_slave_1 added [ 2548.066468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2548.076823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2548.087006] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2548.093952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2548.101467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2548.109363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2548.116318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2548.123744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2548.160558] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.166910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2548.173412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2548.179735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2548.186425] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2548.310468] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2548.316577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2548.334143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2548.351248] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2548.357371] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2548.364058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2548.370718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2548.386848] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2548.392944] 8021q: adding VLAN 0 to HW filter on device team0 [ 2548.469764] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2548.480671] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2548.485824] CPU: 1 PID: 24416 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2548.493090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2548.502458] Call Trace: [ 2548.505027] dump_stack+0xae/0xf0 [ 2548.508458] dump_header+0x7b/0x460 [ 2548.512062] ? ___ratelimit+0x139/0x150 [ 2548.516047] oom_kill_process+0xac/0x680 [ 2548.520086] ? out_of_memory+0x44/0x650 [ 2548.524034] out_of_memory+0x4af/0x650 [ 2548.527910] ? _cond_resched+0x17/0x60 [ 2548.531772] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2548.536763] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2548.541931] pagefault_out_of_memory+0x4f/0xa0 [ 2548.546488] mm_fault_error+0xec/0x270 [ 2548.550351] __do_page_fault+0x4ec/0x630 [ 2548.554390] ? __sys_socket+0x9f/0x160 [ 2548.558254] ? page_fault+0x8/0x30 [ 2548.561775] do_page_fault+0x37/0x160 [ 2548.565556] ? page_fault+0x8/0x30 [ 2548.569068] page_fault+0x1e/0x30 [ 2548.572495] RIP: 0033:0x43e461 [ 2548.575666] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2548.594684] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2548.600026] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2548.607275] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2548.614545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2548.621791] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2548.629042] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2548.636348] Task in /syz2 killed as a result of limit of /syz2 [ 2548.642341] memory: usage 1572kB, limit 0kB, failcnt 13040 [ 2548.647959] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2548.654727] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:39 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x10001, 0x7d5, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x9, 0x1, 0x4, 0x80000}, &(0x7f0000000100)=0x14) r3 = getgid() setgid(r3) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x84, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0xdf, 0x26d}}, 0x28) close(r0) 15:31:39 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl(r1, 0x1, &(0x7f0000000280)="c2c1557efc9f894bc18bc9fad656713d4782b02113e6458ccae10deb8aea82f645858f79fcdd92b6416924a91ae83c6daf5e19fdcbca26152d9ec5c0636732552dad0bd7e823b748c282688c0c72cfd0e2d9c90e5afc8db5248e567ab5226ca77c072c94d6c84d9149a8e617ad12ecc40a2d466152e758dbd69ddc1fc2519ccf6df4238ea683a6435d30267c5dbaa9ba08d69c8eb1c2c195039e16b719212aa5785c0a68b2f4fd4fb249f72f20b7efe80593a524d1032a286fe33fbf39aa7e4d95621e5a1e3427bac198efbb7d024a4e1205ec468bda2eb9fb7b45eac79175842fcd9720a69663099327b02350ed4b7a6d0bd09a") write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000000)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="e6ce86d4eeea2f4775694bbee9c85614404ee0e8f0425cac475049a306f57799f3b9ff6a122fb5955badf48793"}, {&(0x7f0000000180)="adba5fff9aabbcd495424160956cff732dd5f912315b82eb797780f49c6d2320ed1ffe3eb2e48bf1379ac6bd684c02134ccaa224efaf24ec3133c4daabb6da1e258f09340bb4d1e1836941c4b09ee2c59fa224d3158ced09b0c2ab87095a66"}, {&(0x7f0000000300)="bf95ef92c0cd6954c408c351ba2c13d83d6d2c35f7b66c56c0b85b38eb50242dc0d2766e6ff096aad048c681f116a5d8c2297a275843de0ef3b5b16c34355eeca79e4bc1ed7bbd64c06041530cde577e7b5db019aae34c4ce9c66497d6d1c2d29ad68d8cb190727b06c5647372aab861bad634121b59a2d1e9e3eac522ffbe13bb2aca839061399e187d291724c8d1681e199faeac1b2c0e2bdb735daeea388b0ef79ba5ed08de7b0571673915749f5b0409fbefdce910364314ae"}, {&(0x7f00000000c0)="ceed695713cee5bb16fa4cd899afdca85fc5b06e5fd312d2c704b288be0c2c03ec82e419771793a331cd80"}, {&(0x7f00000003c0)="f35c48b1cca45f585765a1a8fa18a6dd1184a10372d3", 0x1d1}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000100000001040000fb8b9e68c38b6829a6e72444af19aa3ff3d5d6ac510f6df61568f988c38c75b4cb5f0d45209e18ba8eda7f4f5f39c8f17dfa36f675a131bb8443cbe9aa3bb3e1b66ce1d6b1a1c4a7838358e53eb4ef0ce03ae282010f37e908d58351b7030a8656d987a2215415a72fa2171b09bdbf95525c4511b9810000000000a4bc1f80395108361a011f7d8b44af21d2eceb19828597971437b0edaf1a3a2331b6365062f683c8fbd337dee7bcd0ea5d6fb5235899a5ff7405ff4e48c4552f744c03d26113227a86759e19e229c358c6292ecb9d8668a75f86045ff20221763d3d5a06"], 0x0, 0x24000040}, 0x9}], 0x40002d2, 0x0) keyctl$session_to_parent(0x12) 15:31:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x10000, 0x0) 15:31:39 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20}, 0x1c) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth1_to_team\x00'}}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x1, 0x1, 0xff, 0x6, 0x400, 0x5, 0x9}, 0x20) 15:31:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:39 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x5, 0x400400) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x1}) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) close(r0) r2 = fcntl$getown(r1, 0x9) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) 15:31:39 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x20040080) 15:31:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x400000000000000) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) write$P9_RLOCK(r0, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$cgroup_pid(r1, &(0x7f00000001c0)=r2, 0x12) 15:31:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)) 15:31:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) [ 2548.660863] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2548.680497] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2548.689102] [24416] 0 24416 17553 8389 114688 0 0 syz-executor2 [ 2548.697954] Memory cgroup out of memory: Kill process 24416 (syz-executor2) score 8417000 or sacrifice child [ 2548.707916] Killed process 24416 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:39 executing program 6: io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x12000) socketpair(0x3, 0x7, 0xd2d, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f00000000c0), 0x0, 0x1f, 0x0, 0x1, r2}, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000340)="76626f786e657430a8a4", 0x0) unshare(0x20400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000000)=0xfffffffffffffffd) 15:31:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x4000000000) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f00000001c0)=""/115, &(0x7f0000000280)=0x73) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/35, 0x23) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r3, 0xdd, "7ad6b9", "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"}}, 0x110) 15:31:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:39 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1a3200, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/161) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2548.795229] device bridge_slave_1 left promiscuous mode [ 2548.800674] bridge0: port 2(bridge_slave_1) entered disabled state [ 2548.807756] IPVS: ftp: loaded support on port[0] = 21 [ 2548.814289] device bridge_slave_0 left promiscuous mode [ 2548.819726] bridge0: port 1(bridge_slave_0) entered disabled state [ 2548.831567] team0 (unregistering): Port device team_slave_1 removed [ 2548.838611] team0 (unregistering): Port device team_slave_0 removed [ 2548.845666] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2548.858614] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2548.871881] bond0 (unregistering): Released all slaves [ 2548.943243] bridge0: port 1(bridge_slave_0) entered blocking state [ 2548.949620] bridge0: port 1(bridge_slave_0) entered disabled state [ 2548.956107] device bridge_slave_0 entered promiscuous mode [ 2548.965295] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.971682] bridge0: port 2(bridge_slave_1) entered disabled state [ 2548.978232] device bridge_slave_1 entered promiscuous mode [ 2548.987165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2548.997391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2549.014415] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2549.025431] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2549.048171] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2549.054980] team0: Port device team_slave_0 added [ 2549.063254] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2549.070099] team0: Port device team_slave_1 added [ 2549.078382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2549.088843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2549.099343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2549.106323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2549.113794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2549.121668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2549.128618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2549.136108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2549.173222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.179589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2549.186097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.192429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2549.199087] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2549.318930] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2549.325019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2549.341834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2549.358729] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2549.364883] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2549.371752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2549.379107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2549.394496] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2549.400597] 8021q: adding VLAN 0 to HW filter on device team0 [ 2549.474717] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2549.485597] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2549.490731] CPU: 0 PID: 24738 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2549.497992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2549.507409] Call Trace: [ 2549.509974] dump_stack+0xae/0xf0 [ 2549.513405] dump_header+0x7b/0x460 [ 2549.517015] ? ___ratelimit+0x139/0x150 [ 2549.520966] oom_kill_process+0xac/0x680 [ 2549.525001] ? out_of_memory+0x44/0x650 [ 2549.528952] out_of_memory+0x4af/0x650 [ 2549.532818] ? _cond_resched+0x17/0x60 [ 2549.536683] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2549.541678] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2549.546844] pagefault_out_of_memory+0x4f/0xa0 [ 2549.551403] mm_fault_error+0xec/0x270 [ 2549.555270] __do_page_fault+0x4ec/0x630 [ 2549.559312] ? __sys_socket+0x9f/0x160 [ 2549.563177] ? page_fault+0x8/0x30 [ 2549.566690] do_page_fault+0x37/0x160 [ 2549.570518] ? page_fault+0x8/0x30 [ 2549.574031] page_fault+0x1e/0x30 [ 2549.577454] RIP: 0033:0x43e461 [ 2549.580615] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2549.599721] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2549.605084] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2549.612331] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2549.619575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2549.626819] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2549.634066] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2549.641425] Task in /syz2 killed as a result of limit of /syz2 [ 2549.647419] memory: usage 1572kB, limit 0kB, failcnt 13048 [ 2549.653045] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2549.659788] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:40 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000a0e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000080)=""/85, 0x55, &(0x7f0000000100)=""/200, 0x2, 0x1}}, 0x68) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1008912, &(0x7f0000000280)="42bc6a145f8f7bc070") r1 = memfd_create(&(0x7f0000000100)='(#\\\x00', 0x4) ftruncate(r1, 0x1000000) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/13, 0xfffffde6}], 0x1) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) write(r1, &(0x7f0000000140)="95ba6ecf3bbde7b805cfeca6a573725808f45332adb53245b026ea15f288aec62c39a78ddb8661c70cfc18ae6d58108dae360081a8455eee8e13a5e9d8aae242b1ae7bd005a994c5619fa8f04e05772a4a6c6d6df20ce3ee3444053e8503ab480821d904", 0x64) 15:31:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) acct(&(0x7f0000000580)='./file0\x00') r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x14, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd7000000000000300000008000400ffffffff080005000000000014000300080007000000000008000500ac1414bb0800060000000000"], 0x40}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='\x00') prctl$intptr(0x26, 0x1) seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x0, 0x2}, 0xf) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='veth1_to_bond\x00', 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x208800, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) lseek(0xffffffffffffffff, 0x0, 0x3) sendfile(r0, r0, &(0x7f0000000240), 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000003c0), &(0x7f0000000480)) rt_sigaction(0x37, &(0x7f0000000000)={0xff, {0xffffffffffffffff}, 0x58000004}, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/fscreate\x00') ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000240)={0x0, {0x0, 0x1c9c380}, 0xfffffffeffffffff, 0xc0c}) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000001c0)={0x400000053, 0x0, 0x6, 0x3, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000100)="482e2cf215c6", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000000080)}) 15:31:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:40 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xa3, 0x442) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000280)={0x2, 0x0, 0x1, 0x4, 0x80000001, 0x200}) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="042328bd7000fbdbdf25090000000800040003f0f21f07000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004000) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000bc0)=0x2, 0x4) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x9a, 0x1000, 0x3, 0x0, 0x7, 0x20, 0x105, 0x40, 0x1a5, 0x3ff, 0x6, 0x38, 0x2, 0x100000000, 0x7f, 0x802}, [{0x60000000, 0xf4, 0x6, 0x1ff, 0xca9, 0x1ff, 0x2, 0xff}], "ffe1cf6bebaab2cb489a4c44db730f7b08242a4f1a75dd992684cd0b78167479fa0549c2cd05fddb0f987c04d9499b0949004297d15d1bb0abe7c9cce124c8dda2de300e649a0a7b34", [[], []]}, 0x2c1) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) mknod$loop(&(0x7f0000000080)='./file0//ile0\x00', 0x100, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000a40)=0xe8) fstat(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000b00)={0xa0, 0x19, 0x1, {0x20, {0x41, 0x4, 0x6}, 0x10, r4, r5, 0x0, 0x2, 0x5487, 0x52787a9a, 0x78, 0x12c0000000, 0x0, 0x40, 0x2, 0x10000, 0x3f78, 0x8, 0x6ab, 0xffffffff, 0xfff}}, 0xa0) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) stat(&(0x7f0000000880)='./file0//ile0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r6, r7, r8) openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) 15:31:40 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x80000000, 0x40000000440) socket$inet(0x2, 0x801, 0x5) ftruncate(r0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x5, 0x5f0e, 0xd3f, 0x1f}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004639d00b8030000b8030000b803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa0f0000000000000000000000000000000000000000000000000000e0000001000000000300000001000000e000000100000000ffffffff00000000aaaaaaaaaa1b00000000000000000000000000000000000000ff00ffffff00000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000020a48000480007fff00ff7465616d5f736c6176655f300000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000020000000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000002000073797a300000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000017f0000010f000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000a40)={0x53, 0x0, 0xd8, 0xffffffff, @scatter={0x3, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f00000007c0)=""/45, 0x2d}]}, &(0x7f0000000840)="f68aac4c518ddf1ff2870158a06b7fb80ba665622b72b6947ac8a89274be586da38cc84818652380c3038484ac22f2a9c33ffc310f58539bf912d1ddee4b0e9ffdc5c3fcaa420f602261be98619911de00f029c0b45dc1b591562d7bba21d79aebe59bc4a6f111c74b03bcaf4d071daaa0cce9d34060dc7e85575cb74394ed1ec49c2b555260f95f112dbdb37ec2f81ac39ae07c4debfd0f4bee3b1f7bf388991f3d8a74a715716836576c4458eea083c8ebee62a03ec69eb912597545fb4a4c49114c8daa1492ea195314d593536fe692aad2ce3a4c8099", &(0x7f0000000940)=""/141, 0xc46, 0x26, 0x3, &(0x7f0000000a00)}) 15:31:40 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x725, 0x4040) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8, 0xa0c5, 0x101, 0x7, 0xf27, 0x7, 0x9, {0x0, @in={{0x2, 0x4e22, @local}}, 0x10001, 0x200, 0xf91, 0x200, 0x3}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x80000001, 0x200, 0x8001, 0x9, 0xfffffffffffff3ec, 0x4, 0x81, r2}, 0x3b2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000300)) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:40 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f0000b05000/0x4000)=nil, 0x4000, 0x0) fsetxattr(r1, &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) ftruncate(r0, 0x8) creat(&(0x7f0000000000)='./file0\x00', 0x82) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2549.665924] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2549.685539] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2549.694163] [24738] 0 24738 17553 8388 122880 0 0 syz-executor2 [ 2549.702996] Memory cgroup out of memory: Kill process 24738 (syz-executor2) score 8418000 or sacrifice child [ 2549.712962] Killed process 24738 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:31:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:40 executing program 1: mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000440)=""/113) r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fff, 0x101000) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5ef261c654c9ccd3b55793a558a5", 0xe}, {&(0x7f0000000080)="ca", 0x1}, {&(0x7f0000000300)="ba0bfb84804c3ae88c1a372fcfe852b4ebacfd1aa9c513e6cbfbadc90915387c682e01de94f01cbae605c39e4f8e072cc52214da5e9fb2441f1e5c074f2158dedf5c6d04acd207e9d10bc41facd2b59b8b8091a120e1ce55e916b263c4585253a7a12f7bb9bbcbc1b030842a2f72bf843e5d2060c83846175b2612f87e6ef1048ec0e61d1b9c4a0f3fb4513f1989f21de7e3d0b4ffa4674845b566435766f218e4859aa9a7e3815b9b9c4ee493ae0b4ac9138d458475a94b62c0250c07c09bc1c5dac6bd144bedd69cbdfa425c43e7267f08fb19de12864f979ce47eb578ecd22911688089b8a3462ddde0cf6f1a027200c4", 0xf2}], 0x3, &(0x7f0000000180)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfff}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffc00}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0x9, "14cc9f5e49d000521f"}], 0x80, 0x4008000}, 0x8000) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:40 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x4, 0x20002) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3ff, 0x80000) getsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x1}, 0x3d8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r3, 0x1) 15:31:40 executing program 3: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x800, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000280)=""/32, &(0x7f00000002c0)=0x20) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) getsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000), &(0x7f0000000080)=0x4) 15:31:40 executing program 3: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2549.804210] device bridge_slave_1 left promiscuous mode [ 2549.809688] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.823235] IPVS: ftp: loaded support on port[0] = 21 [ 2549.829573] device bridge_slave_0 left promiscuous mode [ 2549.834987] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.852359] team0 (unregistering): Port device team_slave_1 removed [ 2549.859569] team0 (unregistering): Port device team_slave_0 removed [ 2549.866705] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2549.882002] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2549.895731] bond0 (unregistering): Released all slaves [ 2549.966746] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.973099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.979576] device bridge_slave_0 entered promiscuous mode [ 2549.988635] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.994966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2550.001439] device bridge_slave_1 entered promiscuous mode [ 2550.010500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2550.020532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2550.038023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2550.048973] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2550.071057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2550.077861] team0: Port device team_slave_0 added [ 2550.085988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2550.092762] team0: Port device team_slave_1 added [ 2550.100898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2550.111277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2550.121591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2550.128571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2550.136020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2550.143835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2550.150784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2550.158282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2550.194398] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.200747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2550.207256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.213571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2550.220253] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2550.339836] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2550.346287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2550.363258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2550.380273] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2550.386417] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2550.393116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2550.399811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2550.415694] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2550.421786] 8021q: adding VLAN 0 to HW filter on device team0 [ 2550.492691] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2550.503561] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2550.508698] CPU: 0 PID: 25053 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2550.515956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2550.525285] Call Trace: [ 2550.527848] dump_stack+0xae/0xf0 [ 2550.531278] dump_header+0x7b/0x460 [ 2550.534879] ? ___ratelimit+0x139/0x150 [ 2550.538985] oom_kill_process+0xac/0x680 [ 2550.543020] ? out_of_memory+0x44/0x650 [ 2550.546972] out_of_memory+0x4af/0x650 [ 2550.550830] ? _cond_resched+0x17/0x60 [ 2550.554689] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2550.559690] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2550.564852] pagefault_out_of_memory+0x4f/0xa0 [ 2550.569406] mm_fault_error+0xec/0x270 [ 2550.573267] __do_page_fault+0x4ec/0x630 [ 2550.577302] ? __sys_socket+0x9f/0x160 [ 2550.581169] ? page_fault+0x8/0x30 [ 2550.584698] do_page_fault+0x37/0x160 [ 2550.595828] ? page_fault+0x8/0x30 [ 2550.599343] page_fault+0x1e/0x30 [ 2550.602770] RIP: 0033:0x43e461 [ 2550.605933] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2550.624952] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2550.630291] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2550.637536] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2550.644781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2550.652131] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2550.659381] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2550.666689] Task in /syz2 killed as a result of limit of /syz2 [ 2550.672679] memory: usage 1572kB, limit 0kB, failcnt 13056 [ 2550.678328] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2550.685076] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2550.691225] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2550.710986] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2550.719628] [25053] 0 25053 17553 8389 118784 0 0 syz-executor2 [ 2550.728478] Memory cgroup out of memory: Kill process 25053 (syz-executor2) score 8418000 or sacrifice child 15:31:41 executing program 3: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:41 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) read(r2, &(0x7f0000000000)=""/114, 0x72) r3 = dup2(r1, r2) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$l2tp(0x18, 0x1, 0x1) tkill(r0, 0x16) 15:31:41 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9ac0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xc427, 0x4) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$binfmt_elf32(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x172000, 0x5, 0x35, 0x2, 0x2, 0x3, 0x0, 0x168, 0x38, 0x9c, 0x1, 0x6, 0x20, 0x2, 0x28, 0x2, 0x7f}, [{0x6, 0x100, 0xb93, 0xdba8, 0x2, 0x32, 0x49, 0x100}], "e7f96f151f339538cdc14d4e19781de09e8011babcfd1e4809e2", [[], [], [], [], []]}, 0x572) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x222e80, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x8000, 0x100000000, 0x9, 0x3ff, 0x20, 0x1f, 0x3, 0x6, 0x4, 0x7, 0xffffffffffff6e43, 0x1c}) 15:31:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040)="88d41b894b822647aa72a5e2ce1eb9e6e283481fbdf0667c96e189b782adb7efbd75dd540b045b2f9c6fb6010d9149a6fb3d167292999c46aa8fe0a334d612c2e23870ec034fcc33d41c35538f8ddd400f73124bec44de4d99520a8d65e7388104e738f6e743ff43b7c8bb76707b8ed163d525095ae8eebb3a4cd9722f48eaf18a", 0x81, 0xfc7d, &(0x7f0000000180)) 15:31:41 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x5) r1 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="2f3f5f71d5623825fc3ce0c8002dea230382d6d748d07c89afbd09fe9a5fadf3be626b56c2e8ddeb77bc7101512f45d4159e25d64a3b1e52027128905b0c5c50e31b35aab845a252a44bb01fa04ca7e52ad671d56cd2267c9ce170b1127a11c8413dc74856d8e83a8a24dbd59b9813c269a4502111bdf794ad94884aa4e9b4eacd1bd8c4240e074685fa0ad51f7e387867f75baaf7dc891d4efb8a30293b523ee44ed2bc09546c8dc99749c0b1b49eb42df371fdd8cf", 0xb6, 0xfffffffffffffffe) sendto(r0, &(0x7f0000000280)="0b0a59d1b8fc114274941f3945640542701e78a94b05b3b83e862d0c387d0875e4996aad416352310934155e693555907bc113ffc8124e9075d50d937833f2cd6a21fc1e465458734956b3119d9fd47e2692a85dc08e3776c0c230d7e2f8f483f0db5fc80c9deb39df4b842e759204272fa5f7a85f28bec4909909fe7bcefddbd0c23f37c5470335e10bf1b9658876", 0x8f, 0x4000, &(0x7f0000000480)=@in6={0xa, 0x4e22, 0x8e1, @ipv4={[], [], @loopback}, 0x200}, 0x80) keyctl$describe(0x6, r1, &(0x7f00000001c0)=""/149, 0x95) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f000089b000), 0x4) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000280), 0x2e3}, 0x0) 15:31:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000f8d000), 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000113e928626347c288dda7040101ff0080fdffffff4c0a0000000c000100010000007f0000010c000400000079e6fef90000222af15f446f6d97c0da7184b77117eb1d28bf3426f7e064db8baa3f3ed448c189b0934e90697be403349fce0487b90aa5c090483da6bc9cb129700d38cc009ed9cdb412a9c3b04b5207cc70569997c49fa878bb86acca1bd10a0fcbc1fc89"], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15:31:41 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr=0x1, @in6, 0x4e20, 0x4, 0x4e22, 0xffff, 0xa, 0x20, 0x0, 0x3d, r1, r2}, {0x401, 0x4, 0x100, 0xffffffff, 0x3, 0x1, 0x6, 0x5a}, {0xf8, 0x9, 0x2, 0x3}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d2, 0x32}, 0xa, @in=@broadcast, 0x0, 0x0, 0x0, 0x1064, 0x17000000, 0xd49, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) [ 2550.738465] Killed process 25053 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:41 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x3) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:41 executing program 7: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c2d1023e87595c480b05ba7eb7286f798a2f3ebac9631de8ac5cedbba1dc7bd54db6aa40a7a2adfb0c7779821eb348d4f98e862d18b3545a7d65ddaa2fa4bb7610b977be14dae51a825b83c60c1a70a49d346e1dbcd58c3234159e4ebc7d8a07941c87bd0ede4dfc3d7a6d74caae08dc546f4dbf5de819d03de095951f4288fb63484a25260c4bc9f6fbbda40792a84ee6b827e1771a4ae88471e586c460e301cc9cde678fbf0d14ae2843b5691cfb", 0xaf}, {&(0x7f0000000180)="fdf73ef5fdde28d157e6c76ba29781", 0xf}], 0x2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000000200), 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:41 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) fchdir(r0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x400}, &(0x7f0000000480)=0x8) inotify_init() getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r4, 0x0, 0x9, 0x69e3}, &(0x7f0000000500)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@rand_addr=0x26e9950f, 0x4e22, 0x80000000, 0x4e23, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x77, r2, r3}, {0x3, 0x1ff, 0x0, 0x9, 0x40, 0x7f, 0x1, 0x1}, {0x9, 0x0, 0x5, 0xe32}, 0x4, 0x6e6bbb, 0x3, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d4, 0xff}, 0xa, @in6=@local, 0x3502, 0x2, 0x0, 0x800}}, 0xe8) 15:31:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r4, &(0x7f0000000240), 0x8000000008) 15:31:41 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = msgget(0x0, 0x3c4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/27) [ 2550.815590] 9pnet_virtio: no channels available for device ./file0//ile0 [ 2550.827516] 9pnet_virtio: no channels available for device ./file0//ile0 [ 2550.834590] device bridge_slave_1 left promiscuous mode [ 2550.834947] IPVS: ftp: loaded support on port[0] = 21 [ 2550.839996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2550.857310] device bridge_slave_0 left promiscuous mode [ 2550.862768] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.873425] team0 (unregistering): Port device team_slave_1 removed [ 2550.880316] team0 (unregistering): Port device team_slave_0 removed [ 2550.887103] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2550.899531] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2550.914836] bond0 (unregistering): Released all slaves [ 2550.983002] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.989372] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.995888] device bridge_slave_0 entered promiscuous mode [ 2551.005032] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.011386] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.017890] device bridge_slave_1 entered promiscuous mode [ 2551.026904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2551.037012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2551.053291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2551.064490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2551.087173] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2551.093946] team0: Port device team_slave_0 added [ 2551.102121] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2551.108896] team0: Port device team_slave_1 added [ 2551.117187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2551.127627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2551.137980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2551.144970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2551.152557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2551.160480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2551.167486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2551.175084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2551.211890] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.218231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.224730] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.232695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.239393] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2551.361285] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2551.367431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2551.384625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2551.402001] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2551.408162] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2551.414882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2551.421594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2551.437747] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2551.443850] 8021q: adding VLAN 0 to HW filter on device team0 [ 2551.519808] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2551.530688] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2551.535811] CPU: 0 PID: 25369 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2551.543073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2551.552403] Call Trace: [ 2551.554965] dump_stack+0xae/0xf0 [ 2551.558410] dump_header+0x7b/0x460 [ 2551.562017] ? ___ratelimit+0x139/0x150 [ 2551.565967] oom_kill_process+0xac/0x680 [ 2551.570002] ? out_of_memory+0x44/0x650 [ 2551.573999] out_of_memory+0x4af/0x650 [ 2551.577880] ? _cond_resched+0x17/0x60 [ 2551.581742] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2551.586734] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2551.591899] pagefault_out_of_memory+0x4f/0xa0 [ 2551.596459] mm_fault_error+0xec/0x270 [ 2551.600346] __do_page_fault+0x4ec/0x630 [ 2551.604416] ? __sys_socket+0x9f/0x160 [ 2551.608282] ? page_fault+0x8/0x30 [ 2551.611796] do_page_fault+0x37/0x160 [ 2551.615578] ? page_fault+0x8/0x30 [ 2551.622666] page_fault+0x1e/0x30 [ 2551.626091] RIP: 0033:0x43e461 [ 2551.629252] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2551.648249] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2551.653586] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2551.660838] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2551.668099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2551.675350] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2551.682615] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2551.689977] Task in /syz2 killed as a result of limit of /syz2 [ 2551.695975] memory: usage 1572kB, limit 0kB, failcnt 13064 [ 2551.701602] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2551.708350] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2551.714490] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2551.734112] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2551.742731] [25369] 0 25369 17553 8389 114688 0 0 syz-executor2 [ 2551.751571] Memory cgroup out of memory: Kill process 25369 (syz-executor2) score 8417000 or sacrifice child [ 2551.761540] Killed process 25369 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:42 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x400000000002, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/255, 0xff, 0x10000, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @remote, 0x8}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:42 executing program 2: r0 = getpgid(0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f00000012c0)="32727d95", 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fremovexattr(r2, &(0x7f0000000040)=@random={'os2.', ':vboxnet0@bdev\x00'}) write$cgroup_pid(r3, &(0x7f00000000c0)=r0, 0x12) close(r1) 15:31:42 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:42 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:42 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="23faca9b227e1694a78bec037fe9838ff837ba6e9494bf4a6aa8f2cbf53469fcefa75da9fb886a94287da6ef900479bc337bf80a4dd0582f49873528294430e5549a5489d4dd4c609793fb976f3ee059c9605673e2b885dd4e77c647b0f21ebc3c9ac05bfe42756ded6db6ee71a8fa4d51d96caf8eb402081862343cec93f980a9eedb343f7b458286744bd6bc032fe4ccdc8160338bde332cc9a87adb0dff39e00b88fb02f66712fc2eb368b0df7de6d5700fe8b350ed1a2301dddadccdc3ec0d25b5f62302c5afad17ddc61d1d94d652572df6639124d358214d54819dc9ac982dcdfdd46967fc3374a3d917e186e52aa664276868", 0xf6, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r2, 0x1) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) fstatfs(r1, &(0x7f0000000200)=""/2) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x10) 15:31:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000008912, &(0x7f00000002c0)="025cc807a851448f764070") ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) poll(&(0x7f0000000500)=[{r2}, {r2, 0x40}, {r2, 0x8250}, {r1, 0x640}], 0x4, 0x0) 15:31:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x2b, 0x4000000003, 0x1e82) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000001c0), 0x8f) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000002c0)={0x5, 0x8, 0x7, 0x4, 0x8, [{0x0, 0x0, 0x5c, 0x0, 0x0, 0x100}, {0x1, 0x5, 0x10000, 0x0, 0x0, 0x400}, {0x2, 0x7, 0x3, 0x0, 0x0, 0x100}, {0x40, 0x3, 0x80, 0x0, 0x0, 0x400}, {0xeb, 0x0, 0x1c, 0x0, 0x0, 0x500}, {0x4fa6, 0x6, 0x5b, 0x0, 0x0, 0x102}, {0x100000000, 0x8, 0x2, 0x0, 0x0, 0x206}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x201}]}) 15:31:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r3, 0x8205) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240), 0x8000000008) 15:31:42 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) 15:31:42 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:42 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00'}, 0x6, 0x0, 0x3f, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000000), 0x0, [], [0x7, 0x3, 0x0, 0xb836]}) r1 = dup3(r0, r0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000140)) 15:31:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r3, &(0x7f0000000240), 0x8000000008) 15:31:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) close(r2) close(r1) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000180)=0x68) 15:31:42 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0xeb, 0x80, @buffer={0x0, 0xa1, &(0x7f0000000280)=""/161}, &(0x7f0000000340)="572de7dae5aa021a80dc0b0f8114b6ba1f7fe5ec733e49e0f56c9c7a3ab79ee32473bfbe44e1c781acf3d43d085b577dc37b75b4072eeacd927c4cd70e159c0f299103f1ac5b39aaa61a600b746641b995acd295cc8b764e4593e76b456de4e0ee5e8565c4ab7ce6e6b097345a94a713c9cfab9e3e54917f87fe78c207b9f3c5665d257069bc7fd9034aa8858a7b0f5bba0bc89356ced6d93721301e23c8139d224dc3c7b103504442bc42c30e011315ce7e0fdc2a4268239cddedf26fb394633e2bf0e9e697e60cad6762c1a38b34080ca90c7b336e7cb1e81e2754f2f01f704b8abd064e40e3b61863f6", &(0x7f0000000200), 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000440)}) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000000)) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 15:31:42 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x800) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000010c0)={0x0, 0xfffffffffffffff7}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001140)={r2, 0x1000, 0x9}, 0x8) r3 = msgget(0x3, 0xa2) msgctl$IPC_INFO(r3, 0x3, &(0x7f00000000c0)=""/4096) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r3, &(0x7f0000000240), 0x8000000008) [ 2551.851574] IPVS: ftp: loaded support on port[0] = 21 [ 2551.861213] device bridge_slave_1 left promiscuous mode [ 2551.866657] bridge0: port 2(bridge_slave_1) entered disabled state [ 2551.879297] device bridge_slave_0 left promiscuous mode [ 2551.884735] bridge0: port 1(bridge_slave_0) entered disabled state [ 2551.896808] team0 (unregistering): Port device team_slave_1 removed [ 2551.903696] team0 (unregistering): Port device team_slave_0 removed [ 2551.910562] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2551.926630] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2551.941890] bond0 (unregistering): Released all slaves [ 2552.008566] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.015030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.021514] device bridge_slave_0 entered promiscuous mode [ 2552.030640] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.036996] bridge0: port 2(bridge_slave_1) entered disabled state [ 2552.043501] device bridge_slave_1 entered promiscuous mode [ 2552.052524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2552.062773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2552.079145] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2552.090302] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2552.113264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2552.120062] team0: Port device team_slave_0 added [ 2552.128423] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2552.135254] team0: Port device team_slave_1 added [ 2552.143495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2552.154111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2552.164691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2552.171686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2552.179295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2552.187185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2552.194181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2552.201652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2552.238847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.245211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2552.251707] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.258019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2552.264703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2552.389338] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2552.395419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2552.412594] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2552.430281] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2552.436437] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2552.443143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2552.449784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2552.465338] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2552.471432] 8021q: adding VLAN 0 to HW filter on device team0 [ 2552.546711] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2552.557569] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2552.562672] CPU: 1 PID: 25684 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2552.569930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2552.579272] Call Trace: [ 2552.581836] dump_stack+0xae/0xf0 [ 2552.585282] dump_header+0x7b/0x460 [ 2552.588892] ? ___ratelimit+0x139/0x150 [ 2552.592847] oom_kill_process+0xac/0x680 15:31:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000040)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) [ 2552.596881] ? out_of_memory+0x44/0x650 [ 2552.600832] out_of_memory+0x4af/0x650 [ 2552.604717] ? _cond_resched+0x17/0x60 [ 2552.608582] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2552.613573] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2552.618737] pagefault_out_of_memory+0x4f/0xa0 [ 2552.623301] mm_fault_error+0xec/0x270 [ 2552.627177] __do_page_fault+0x4ec/0x630 [ 2552.631215] ? __sys_socket+0x9f/0x160 [ 2552.635074] ? page_fault+0x8/0x30 [ 2552.638593] do_page_fault+0x37/0x160 [ 2552.642379] ? page_fault+0x8/0x30 [ 2552.645912] page_fault+0x1e/0x30 [ 2552.649376] RIP: 0033:0x43e461 [ 2552.652552] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2552.671587] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2552.676924] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2552.684180] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2552.691425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2552.698687] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2552.705934] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2552.713217] Task in /syz2 killed as a result of limit of /syz2 [ 2552.719221] memory: usage 1572kB, limit 0kB, failcnt 13072 [ 2552.724837] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2552.731580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2552.737716] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2552.757329] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2552.765935] [25684] 0 25684 17553 8390 114688 0 0 syz-executor2 [ 2552.774770] Memory cgroup out of memory: Kill process 25684 (syz-executor2) score 8418000 or sacrifice child [ 2552.784735] Killed process 25684 (syz-executor2) total-vm:70212kB, anon-rss:72kB, file-rss:33488kB, shmem-rss:0kB 15:31:43 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f00000013c0)='/dev/vcs#\x00', 0x20070de, 0x400000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001400)=0xc, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) process_vm_writev(r3, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/216, 0xfffffffffffffff7}], 0x2, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/19, 0x13}, {&(0x7f0000001200)=""/247, 0xf7}, {&(0x7f0000001300)=""/87, 0x57}], 0x3, 0x0) vmsplice(r2, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) bind$bt_rfcomm(r0, &(0x7f0000001440)={0x1f, {0x0, 0x0, 0x2, 0x6, 0xe2, 0x2}, 0xdd7}, 0xa) 15:31:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) ioctl$TIOCCBRK(r2, 0x5428) connect$inet6(r0, &(0x7f0000000140), 0x1c) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @multicast2}, {0x306, @link_local}, 0x6, {0x2, 0x4e24, @local}, 'veth0_to_team\x00'}) sendfile(r0, r2, &(0x7f0000000240), 0x8) 15:31:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendto(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000080)=@sco={0x1f, {0x9, 0x2, 0x0, 0x9, 0x400, 0x2}}, 0x80) r1 = msgget$private(0x0, 0x200) msgctl$IPC_RMID(r1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2500, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6, @random="5fbecd3ba44f"}, 0x10) 15:31:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:43 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r3, &(0x7f0000000240), 0x8000000008) 15:31:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4cf8d0b8c214c2119760f3a61495a4413d3fb3e4af3afed98f50afa82bb57ec183e990da6c1506f5aab04eae656078b7aa880438af21", 0x36}], 0x1}, 0x0) 15:31:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2000, 0x0) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000b40)="d5ddf8aada93a90ccd93048e941c0516308a99f30034aff51f1d6e9620ba276dfa5111a039e479145520fd9b01c961a5e0a6b8a19128018bfd15e20905cae3643cf16d8d3f91d911da82a031e58e946574c64c160cd91b49ff276715d42dcde2078e76a0c4e0fcbdb70cbc2cbf68ec6b2037544141130b8fffb3a600a5836f8660047887928381", 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7fff, 0x98c}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000c00)={r2, 0x8}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x5, 0x830, [0x20000300, 0x0, 0x0, 0x20000550, 0x20000910], 0x0, &(0x7f0000000000), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x9, 0x4, 0x8035, 'bridge0\x00', 'veth0_to_bridge\x00', 'team_slave_1\x00', 'teql0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0xff], 0xa0, 0x148, 0x180, [@vlan={'vlan\x00', 0x8, {{0x1, 0x4, 0x88f5, 0x1, 0x1}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x5, 0x7, 0x8, 0x0, 0x0, "aa0cb0f89ca74bfba45e5e44a82a96bc9d2ac637bd20afddec6831ccc91ae4701d598e9ace4e8cfd51456675fb2eaa0b134f9e4c8502358d2a5468019f28c553"}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}]}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}, {{{0x0, 0x40, 0x89ef, 'ip6tnl0\x00', 'teql0\x00', 'lo\x00', 'dummy0\x00', @dev={[], 0x16}, [0xff, 0xff, 0x55624bec9673a4fa, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0xf, 0x8, 0x8ea8, 'bridge_slave_0\x00', 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', 'veth0_to_bond\x00', @random="a8707817a06f", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x2a8, 0x318, 0x390, [@bpf0={'bpf\x00', 0x210, {{0x1b, [{0xf2, 0x80000001, 0x9, 0xfff}, {0x2, 0x41, 0xfffffffffffffffc, 0x79}, {0x10000, 0x0, 0xffffffff, 0x800}, {0x2, 0x4, 0x8, 0x5}, {0x2, 0x4, 0x6}, {0x8, 0x4, 0x5, 0x20}, {0x1, 0x7, 0x10000, 0x5}, {0x7, 0x4, 0x8, 0x5}, {0x101, 0x4, 0x0, 0x3b5}, {0x1000, 0x1000, 0x3, 0x800}, {0x0, 0x3, 0x6, 0x7}, {0x180000000000, 0xffffffff873e75af, 0xcc, 0x1ce1}, {0x0, 0x8, 0xfffffffffffff000, 0x5}, {0x9, 0xfffffffffffff800, 0x9, 0x8000}, {0x6, 0x800, 0x8001}, {0x27, 0x1000, 0x7, 0x7fff}, {0x1, 0x20, 0x7d4, 0x8}, {0x6, 0x0, 0x8, 0x8e}, {0x4, 0xfffffffffffffffe, 0x4, 0x2}, {0x4, 0x4, 0x1000, 0x1}, {0x4, 0x10000, 0x9, 0x8}, {0x8, 0x1f, 0x2, 0x84c1}, {0x8, 0x1, 0x2, 0x6}, {0x1f, 0x0, 0x401, 0x8ca}, {0x4, 0x5, 0x3, 0x4}, {0x80000000, 0x6, 0x1, 0xe6b}, {0x5, 0x2, 0x7fff, 0xff}, {0x0, 0x8, 0x7, 0x1}, {0xff, 0x7fff, 0x8}, {0xf0, 0x8, 0x401, 0x5}, {0x5, 0x4, 0xfff, 0x4}, {0x7ff, 0x5dac, 0x3, 0x7}, {0x2, 0x9, 0x2, 0x3}, {0xdbe, 0x2, 0x5, 0xeee}, {0x2, 0x1d6a, 0x9, 0x1}, {0x93, 0x7fff, 0x4, 0xfffffffffffff801}, {0x1ff, 0x5, 0x2, 0x1970}, {0x20, 0x100000000, 0x1f8, 0x7}, {0x8, 0x401, 0x4bb4, 0x3}, {0x8, 0x1, 0x2dd95cb1, 0xb0e}, {0x0, 0x400, 0x60b, 0x9}, {0x1ff, 0x95a7, 0x8, 0x3}, {0x744, 0xfffffffffffffff8, 0x3, 0x3}, {0x401, 0x3, 0x4, 0xffffffff}, {0x1, 0x8000, 0x5, 0x8}, {0x8000, 0x0, 0x4, 0x8dd0}, {0x4a1, 0x1, 0x3, 0x8}, {0x6, 0x49e5, 0x9, 0x10001}, {0xfffffffffffffe01, 0x1d1c6b0d, 0x4, 0x8}, {0x8, 0xf1d, 0x3, 0x3ff}, {0x40, 0x9, 0xfffffffffffffffe, 0x1}, {0x40, 0x35f2, 0x8}, {0xffffffffffff0cc5, 0x874c, 0x2, 0x9}, {0xfffffffffffffffe, 0x5, 0x7d}, {0xa4d, 0x10001, 0x9, 0x80}, {0x0, 0x8, 0xcd, 0x200}, {0x3e0, 0x5, 0x3ff, 0xfffffffffffffffb}, {0x6, 0xcf1, 0x2, 0x2}, {0x9, 0x8, 0xe43a, 0x7}, {0x8, 0x7fffffff, 0xe5a7, 0x4}, {0x3, 0x80000001, 0x100000001, 0xfffffffffffeffff}, {0x3, 0x0, 0x100000001, 0x6}, {0x6, 0x9, 0x7, 0x1ff}, {0x9, 0x401, 0x3, 0x400}], 0x100000001}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@local}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x6, 0x6, 0x0, 0x0, "469323f24a755f371b33bc0245e91b6d5843eb027c2eec48b184435c9a474458d2e90d8df2a85362122de92841e09fd4089d56b5f0c723e1c7242d31abfd0163"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{{{0xb, 0x44, 0x8819, 'teql0\x00', 'syzkaller1\x00', 'bridge_slave_0\x00', 'eql\x00', @local, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}, {{{0x11, 0x44, 0x8af5, 'ip6tnl0\x00', 'bpq0\x00', 'eql\x00', 'ip6tnl0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xb0, 0xe8, 0x118, [@statistic={'statistic\x00', 0x18, {{0xcc, 0x0, 0x60, 0x0, 0x2, 0x9}}}]}, [@snat={'snat\x00', 0x10, {{@empty, 0x10}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff}]}, 0x8a8) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000c40)={0x0, 0x5}) 15:31:43 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2a9f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xcc}}, 0x4000) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1e, &(0x7f0000000280)="0a2f7ae3a0516bdff0a7a50b9913e567b89233a1ee5b8288401073bab2006809ad88d8d8a8c6bbc81c909b105bff4d06209028152b074eeceaa8920a620f88df94066c81d74095ddd358691293560e64e2aa81ecf6cf63e72174b7a8f0a4ac79622b61b6347e227a87b7660aa32c7a4305400ed607faad3aa95ed431a90e8c655c036604a735f69a8520fb8740fb65a44d972ef7a96924abd268ef5ea51ea2b237eb065e1e3b6e2b4c3255b5ce5ee0f3d3c8a7f100e719a3744f59a95545fca4ddd5de1469b54778e6d08393fac6bd42f7fb6c37eb2ec94a", 0xd8) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 15:31:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2552.795273] oom_reaper: reaped process 25684 (syz-executor2), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 15:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r2, r3, &(0x7f0000000240), 0x8000000008) 15:31:43 executing program 7: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000000000) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x80000000, r1, &(0x7f0000000040)="723f5b3a074bdd38f5fc9ca32baa2fa85a8fdfd4ddf3ec026f702de39f71", 0x1e, 0x7fffffff, 0x0, 0x1, r0}]) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:43 executing program 6: unshare(0x20400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) 15:31:43 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000080), 0x4) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) read(r3, &(0x7f0000000340)=""/128, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x424}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e22, @local}}, [0x9, 0x2, 0x0, 0x7fffffff, 0x7f, 0x19e07327, 0x1ff, 0x0, 0x0, 0x1, 0x9, 0xea3, 0x4, 0x5, 0x4]}, &(0x7f0000000280)=0x100) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000040)="2d1c7d285d7d5b76626f786e657430294000", 0x12, 0x3) 15:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt(r1, 0x0, &(0x7f0000000280)="515c90299ccdf1dcaefe848e0f8d54e02204450d9e3b4a102a4b0c82587237005bafa80153c39b0da376663ab58c953a697b2c4dc01a54be6ca66509521eef92e0ea875c4f9b14c38b6820eca0e0b91ddb135c58c55974b5b1506f2cad90ea2f9ae8c9bb176bfc15fb7788bf86a6468e209cb46ba1ddefda6e86ae15e3ee373026b06e6f91437d1e8dce6f420a95331b") r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(0xffffffffffffffff, r3, &(0x7f0000000240), 0x8000000008) 15:31:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:43 executing program 6: unshare(0x20400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) 15:31:43 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000018c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001900)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001a00)=0xe8) getgroups(0x5, &(0x7f0000001a40)=[0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) r5 = getpgid(0x0) stat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() sendmmsg$unix(r0, &(0x7f0000001e40)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="a37be148f8348af3d7eaa5ee01d01c46d3f3bc9576cb6477e4610bea5f61b3dbe2c197943a0998467d4fdcb74a23a02f32aaf729050158a192924ee1a9f8a4b29194c337185bbd3adf341f0982a78bc2649e0318f415d99be3dffa9b7f3af9419147abd5b2582bb42ae7951afae3fc96d4657c405cbff1ecc048c71382193071202e97452c2928c1507cc0d95499a7bada5a85db5101419e8f46a06835356e465ca05207b658d37e308696d0751124c1dd6f27b0e28072776f4aee2a2268fe0b8087b433eca4fb9a347197a073801ca892d737", 0xd3}, {&(0x7f0000001200)="50777483013b5b8d3a62a775bb08654a57d02e1ad9be6616883bbefca821b2958cab069063c1339d65e0ce1b9a56ed4c0bd4bcf1e8287fa6fb5cdf361cb4c0c9c62080008ec1bbd903f863b1f5175c42073ff01fc33c8fa7ca2f71cba33547c43443f680fe3dd2cd565d5147dfe822d9f52b4f90f5a13eeb1e8922b32d5efd1aae2e70593b78fcc9f3c536e5ac8eb244af1c", 0x92}], 0x4, 0x0, 0x0, 0x4}, {&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001380)="98a6b332d6d1286e5217841cd85945561dee4d3ef6703cc44bfcf2036090944bf1a9825e5e2343cb9feb92fab4d48a077e4a84dbaee068a65e6f6886e36479df", 0x40}, {&(0x7f00000013c0)="49190dd3dc171b3070710c6e697d7ac1bd23df0a210b53a447ef95f6e5d34aa6246e0225944bba26bd2b402c5ab0622187d4bb5fb2406abf8ec828444ad0617f875fe99aaf", 0x45}, {&(0x7f0000001440)="3c599ec3b16145432f099f8ca9e5288c8e28a30e288e3e7efdbdb6949219e7b7c801e9c5807513c3e277df9d2d41e252d03f14568b2ebd48b5f5d3a35bc36e9d4862079bc4410dba3b2985f48abe9436e5992536ee22f2c41df477f12d9d94765731a4a2065afe2979cce53a982aa142047ea92601a21859176672646da9a8be93232285d6a43cf7e3c95361087c20985718ddbd6bec9338c6e6f1f08705fffc6457af3e3fc4b35474510e20c3c247e494016b9698", 0xb5}, {&(0x7f0000001500)="a2fd857d1d3f27147c10c7943a0d4b0ff9902845b0e138595877ef625ecdb73091fcdaee94ff39b85180ce70b0e673a6ad9e40cc29dc801a270c27fec9cf72fb189857f51b18ff05472118614658cae1a1d690ac20c709d7d597bccb1533fc5070669808ab0d30995b7833233d429a25def27ed95e276a50f94a19785d4981b06e501cd986", 0x85}, {&(0x7f00000015c0)="49489c2710427064ed245e3d3091a004e52032d40d0e2c27024158a00a530f25148182f06ee228d74a726a185157274951553f1e5225a3941cba027dc548ec8e42fe840cbd9946c4dfa801e196e42f10deef83c7661805d4e20ec43927a4a8e76442714d442c4e608ed224e46f13a4b564fc1612851f977b3db01e671645056f50fa28431daca3076b8a618610652e6a802e064f20e89a4de3b5acc2fe17d8508a70dc94c8bba323d41fde3bd05ed0c485b543832f004531644f30fc9ef06ca82006b907dcd354d6f1469c7405d583be5d74b0a8fbc5c0376026eaf09e7ffcdf25074609c83a7fb076", 0xe9}, {&(0x7f00000016c0)="897713cd19833ea367c91a2316e4cc036081fff2732476b77559a4b8fae4d2f625d83838525309d66450548d40", 0x2d}, {&(0x7f0000001700)="acbe27ca41c5ba217ad098bf70726b314bf82db33938b1a2a926ff96706655482f21ade3700f001a5628e4d29ab757fe31e21af38acee0133d996248c8030d949dd585f2a79ead26518a622a59138f1d38492eb1633d1d4adc9783334e4125abc69bd69cb1392bbb2ebbb58b", 0x6c}, {&(0x7f0000001780)="a4b77d03a2af70a6b25578d1691e4fbc6183f1d3ea7e0ed628135128d4f68dd645c77f00240793f8e8e289ba5233a8365c9a06cf2b5863d0c1e90cf3c26ec5f986d9a13e1c61b2b48cb407259d7487d979efcc1a9144fd973b6e3c44e20911cf31f14e30a180b856379df7a86895f2b04273ec1b1e774c866a030d1317af8dc9c3820ccf895e7f0d9a319eb63f2817b3127c29eb40f0", 0x96}], 0x8, &(0x7f0000001b40)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x58, 0x20000080}, {&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c40)="8f525c55e7be429d3dd777bea03b4a79ac0a99b390c417f2fee6038e6bd980e058209650a734424c8e3db2a53761356bb0e32e65626488b81a8fecc5acdab841dacb6fe50a00a6a5cceef83b592fcde6a0943608817f75e3d00dc8cdd8fc92135ae902a9a440b78421d103aeb5f824d2407cf364db75dc7fc0ae7dc641be5c2d7d56f585deb44d487ad043c61431bf640bb9c6cf20aebc7a", 0x98}, {&(0x7f0000001d00)="d23bad873c145de1f119f47fabbff6069f1353387a8993ff08faaff02fc1c4af95b24a1c1dfe6ce08094cc8e9bd7dbcef91fe15ca681657c32d30f5b", 0x3c}, {&(0x7f0000001d40)="7053671137909ee78757156349a8470972487237c0c08d723e27381d1ccdf343a17f2fdeede18aa269137321d42af999a8eab1ae3ab0931e0901bd8da0e0ecf6d676881a68c63ae0ea1360e1e3b172fa630de71ee493be537b107895818a4f35d75d1ec5e2d0c37e", 0x68}], 0x3, &(0x7f0000001e00)=[@rights={0x18, 0x1, 0x1, [r1, r0]}], 0x18, 0x40001}], 0x3, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) [ 2552.845112] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 2552.892411] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 2552.914211] device bridge_slave_1 left promiscuous mode [ 2552.919701] bridge0: port 2(bridge_slave_1) entered disabled state [ 2552.931298] device bridge_slave_0 left promiscuous mode [ 2552.936731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.948603] team0 (unregistering): Port device team_slave_1 removed [ 2552.955588] team0 (unregistering): Port device team_slave_0 removed [ 2552.962486] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2552.983634] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2553.005934] bond0 (unregistering): Released all slaves [ 2553.076677] IPVS: ftp: loaded support on port[0] = 21 [ 2553.133648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.140019] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.146493] device bridge_slave_0 entered promiscuous mode [ 2553.155549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.161892] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.168352] device bridge_slave_1 entered promiscuous mode [ 2553.177293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2553.187418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2553.204247] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2553.215265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2553.238265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2553.245234] team0: Port device team_slave_0 added [ 2553.253490] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2553.260286] team0: Port device team_slave_1 added [ 2553.268547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2553.278970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2553.289573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2553.300364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2553.340481] bridge0: port 2(bridge_slave_1) entered blocking state [ 2553.346824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2553.353335] bridge0: port 1(bridge_slave_0) entered blocking state [ 2553.359655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2553.483583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2553.500857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2553.518624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2553.536013] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2553.542118] 8021q: adding VLAN 0 to HW filter on device team0 [ 2553.617700] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2553.628580] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2553.633684] CPU: 0 PID: 26001 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2553.640939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2553.650281] Call Trace: [ 2553.652844] dump_stack+0xae/0xf0 [ 2553.656271] dump_header+0x7b/0x460 [ 2553.659884] ? ___ratelimit+0x139/0x150 [ 2553.663845] oom_kill_process+0xac/0x680 [ 2553.667880] ? out_of_memory+0x44/0x650 [ 2553.671825] out_of_memory+0x4af/0x650 [ 2553.675685] ? _cond_resched+0x17/0x60 [ 2553.679546] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2553.684564] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2553.684568] pagefault_out_of_memory+0x4f/0xa0 [ 2553.684572] mm_fault_error+0xec/0x270 [ 2553.684576] __do_page_fault+0x4ec/0x630 [ 2553.684580] ? __sys_socket+0x9f/0x160 [ 2553.684584] ? page_fault+0x8/0x30 [ 2553.684587] do_page_fault+0x37/0x160 [ 2553.684590] ? page_fault+0x8/0x30 [ 2553.684593] page_fault+0x1e/0x30 [ 2553.684598] RIP: 0033:0x43e461 [ 2553.723592] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2553.742608] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2553.747948] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2553.755205] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2553.762471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2553.769718] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2553.776980] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2553.784249] Task in /syz2 killed as a result of limit of /syz2 [ 2553.790258] memory: usage 1572kB, limit 0kB, failcnt 13080 [ 2553.795897] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2553.802648] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='maps\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/232, 0xe8}], 0x0, 0x200000000000) 15:31:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:44 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) 15:31:44 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x10b000, 0x140) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000001c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:44 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:44 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$sock_bt(r0, 0xdd1f, &(0x7f0000000280)="409e7e40797bb92e50bce106c96a8e5c96fe76e43ff8bb12f3ce4aaf53a2ab3ca86ca41f84ab14b51ed85373b4ae153699d36b40f96da5e1be8d6f454840aff32ef1d74cd150bf9d0bf5cf86ba671801924e2609c7500d84838060bbce376d925a09f5a77efdb4896ef6d2eb27e656421d86185698cd02abb45998b4b1d00498d3d310803de4c9b2a10a45e5be8b87aeaa2fb8f2adac5bf495b8023e73833cd94f446c6ca33263") r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) msgget$private(0x0, 0x381) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:44 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_tables_matches\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x4}) ppoll(&(0x7f0000000000)=[{r1, 0x4250}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) [ 2553.808783] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2553.828397] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2553.837002] [26001] 0 26001 17553 8390 118784 0 0 syz-executor2 [ 2553.845837] Memory cgroup out of memory: Kill process 26001 (syz-executor2) score 8419000 or sacrifice child [ 2553.855804] Killed process 26001 (syz-executor2) total-vm:70212kB, anon-rss:72kB, file-rss:33488kB, shmem-rss:0kB 15:31:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:44 executing program 1: r0 = socket$inet6(0xa, 0x400000000206, 0xffffffffdffffffc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000300)={0x81, 0x8200, 0x36e282ec, 0xa26, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000380)={0x6, 0x4, 0x208, 0x5, 0xfff, 0x2, 0x3, 0x0, r2}, &(0x7f00000003c0)=0xcd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r3, 0xc, 0x2}, 0x14) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x100) r5 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x10000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r4, r5, 0xe, 0x1}, 0x10) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:44 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) kexec_load(0x0, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="7dd5a26bbacee57a4b1b8861534c7cb633a57b8c6f053c8025a0bbee4972c12c34228fe8ad3eb8c75417bc4054efcb33f67a79665b385f5d5428", 0x3a, 0x7, 0x8}, {&(0x7f0000000280)="2b44d3d0b675e30b28bff3f8226b5ddaca1e0c687f9f0c7f11862d4a499be88d37d48bbe29a9a5e9e21603f3b5542242833556dab8554b2c34598b3c81aea04662db06733fe91818dac4403c2ff5de40be2dba8c1886536fbe9a595e7c1e6b6577532862bf3754acfd7d45012852f98513d4a7ca3b4f0c89956de8d92cc8c969f6519420e8bb32611e914b715ce0e357e55c8861e131e3660061a6c1063ff26eb9a02dff9e7b832c6b8d62148294de805813cae0487b4fc1177309e784c537622dee2116cc9f7cae85cc56dc6e0ca591723332f666cac16684c9ff1856463864ed83d075954f28aed2b3d03d1f73646a1b5e6164", 0xf4, 0x8, 0x5}, {&(0x7f0000000380)="c27562791645bf429ca6fc01e6d0ff03e7554871ee00fd9640f0776b38e67346d1b68f726b055cb22063b0a1aaf4dae54105b5d61376731b10ab0c83011b5d93d0c79b7508a8864fe4ec683bc38c266674026fb2a58488e72ab7971a3dbbf55e469a21c5f7251a751c52e5a2da521a8f123aaf26a6ca0efbe0c0511d01f015dd", 0x80, 0x9, 0x8000}, {&(0x7f0000000400)="66557e0d8656d83c99d4cfdbe924396b629c31faebd8266b16f079e3c4328d0928f7cf8ac372cf746f656d31d58d22130c5fc90c02d453443ab0378a99d5da6d0cd6ea307991fbe19ff11a64724fbf060a3ba521aeafd758f1bd7d1475f11f7677ac734adbf1672cf753b16e9e6c1b3f5603a0014ecd008e83e7810bf9487f40b95f13fd3ae37d8d12d7cc739cef51733c64a6a26fa1232eec3a1b86f8933df3226c8befd341bcccf390a517a16ad671cddf166acdef446d9d688d2f5b659bd7b6f895d6fa2bfffbd35dd0727c5061fcac4021675b9f", 0xd6, 0x0, 0x8}, {&(0x7f0000000500)="125f27533910b92e2d77c427f42ed913ec23ed021d4a0f3ae5d073b4e5c3d65411b744381ff4082f6040ab2a9d1d388013e8031f53e931dfafd9bee8f3c3e879a792920f3aaa06e1f72e76cd5282cde668a5153bef3ac6f7d72e9dc1ded30a671434b2c39216a8fa0e75ff43142e43c246389fb39970e2900287ac4dc691e10b78661c8878930c5fb9d3ee", 0x8b, 0x2e, 0x1}], 0x3a0000) r0 = accept(0xffffffffffffff9c, &(0x7f0000000680)=@l2, &(0x7f0000000080)=0x80) getsockname$unix(r0, &(0x7f0000000700)=@abs, &(0x7f0000000200)=0x6e) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000780)={0x9, 0x1, 0x6, 0x0, '\x00', 0x5b4}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000840)=0x7f, 0x4) r2 = openat$cgroup_procs(r1, &(0x7f0000000800)='cgroup.procs\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_settime(0x7, &(0x7f00000007c0)={r3, r4+10000000}) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x14c) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:44 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9190, 0x4000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x33, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 15:31:44 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x8, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x5, 0x8, [0x7ff, 0x6, 0x800, 0x1, 0x6d1e, 0x80000001, 0x6, 0x6cf4]}, 0x18) mlockall(0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000007) 15:31:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2553.941340] IPVS: ftp: loaded support on port[0] = 21 [ 2553.952213] device bridge_slave_1 left promiscuous mode [ 2553.957666] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.968302] device bridge_slave_0 left promiscuous mode [ 2553.973724] bridge0: port 1(bridge_slave_0) entered disabled state [ 2553.987430] team0 (unregistering): Port device team_slave_1 removed [ 2553.994320] team0 (unregistering): Port device team_slave_0 removed [ 2554.001103] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2554.014593] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2554.028830] bond0 (unregistering): Released all slaves [ 2554.092054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.098410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.104929] device bridge_slave_0 entered promiscuous mode [ 2554.114343] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.120691] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.127219] device bridge_slave_1 entered promiscuous mode [ 2554.136196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2554.146345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2554.162786] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2554.173881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2554.195896] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2554.202745] team0: Port device team_slave_0 added [ 2554.210962] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2554.217751] team0: Port device team_slave_1 added [ 2554.225970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2554.236482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2554.246989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2554.257848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2554.297700] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.304084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.310603] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.316931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.440299] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2554.446420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2554.463951] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2554.481269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2554.488064] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2554.506157] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2554.512259] 8021q: adding VLAN 0 to HW filter on device team0 [ 2554.588713] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2554.599601] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2554.604809] CPU: 0 PID: 26305 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2554.612068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2554.621399] Call Trace: [ 2554.623967] dump_stack+0xae/0xf0 [ 2554.627398] dump_header+0x7b/0x460 [ 2554.631019] ? ___ratelimit+0x139/0x150 [ 2554.634977] oom_kill_process+0xac/0x680 [ 2554.639014] ? out_of_memory+0x44/0x650 [ 2554.642981] out_of_memory+0x4af/0x650 [ 2554.646871] ? _cond_resched+0x17/0x60 [ 2554.650761] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2554.655755] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2554.660920] pagefault_out_of_memory+0x4f/0xa0 [ 2554.665489] mm_fault_error+0xec/0x270 [ 2554.669351] __do_page_fault+0x4ec/0x630 [ 2554.673388] ? __sys_socket+0x9f/0x160 [ 2554.677250] ? page_fault+0x8/0x30 [ 2554.680761] do_page_fault+0x37/0x160 [ 2554.684534] ? page_fault+0x8/0x30 [ 2554.688045] page_fault+0x1e/0x30 [ 2554.691470] RIP: 0033:0x43e461 [ 2554.694637] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2554.713634] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2554.718975] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2554.726223] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2554.733482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2554.740738] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2554.747991] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2554.755333] Task in /syz2 killed as a result of limit of /syz2 [ 2554.761310] memory: usage 1572kB, limit 0kB, failcnt 13088 [ 2554.766940] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2554.773712] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:45 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x800) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000080)=0x6e) r1 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x9}, 0x9) 15:31:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x8, 0x6, 0x1, 0x100, 0x3, 0x8, 0x5c8, 0x10000, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000680)={r3, 0x2}, &(0x7f00000006c0)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@loopback, 0x4e23, 0x28eb8a81, 0x4e24, 0x1, 0xa, 0xa0, 0xa0, 0x0, r1, r4}, {0x6, 0xffffffffffffff01, 0xff, 0x3, 0x3ff, 0x7e0, 0x0, 0x80000001}, {0x5, 0x3, 0x101, 0xffffffff80000001}, 0x3f, 0x6e6bb5, 0x2, 0x0, 0x2}, {{@in=@rand_addr=0x9, 0x4d5, 0x6c}, 0xa, @in6, 0x3507, 0x4, 0x1, 0x40, 0x85af, 0x3ea, 0x7}}, 0xe8) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000480)={{{@in=@local, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000580)=0xe8) 15:31:45 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x400000007c, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)=""/32, &(0x7f0000000200)=0x20) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:45 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) close(r1) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x11, 0x4, "55ecaf660559ebe9154d821b02a25cfb9a7ea37d7a30330e79c5dfddfe018de5892eb76c570f56af4b375ecb8477c0c110eeb54668a60bfdca73bf5f98ad031b", "6cff4548677facd56cbaab79dd59552c6d73d45358827597e3f4eb378cf65469", [0x7, 0x3ff]}) dup2(r0, r1) 15:31:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:45 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:45 executing program 7: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x9, 0x2, 0x1, 0x5, 0xd51, 0xd693, 0x10001, r2}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @mcast1, 0x2d5a}, @in6={0xa, 0x4e22, 0xf448, @mcast1, 0x6c}], 0x38) 15:31:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f00000002c0)=""/181, 0xb5}], 0x2, 0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_matches\x00') 15:31:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0xff, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000400)={0xa0, 0x0, 0x4, {{0x2, 0x3, 0x6, 0x8, 0x1000, 0x1, {0x2, 0x100000000, 0x9, 0x0, 0x1f, 0x81, 0x8, 0x7, 0x1f, 0x80, 0xe6, r2, r3, 0x8, 0xb47}}, {0x0, 0x5}}}, 0xa0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000300)="e97e7564d09680cc954054b40a49360434ee9e6a37cdf74b73fba9a885caa537ebeb796a9544a6ca2a877c91785226fe1fc6d453f4de5f2318e84bcbefbdb8a662fcecbeebce47c7c18775bdd601f6da1213ed2c78aa36e035a6bcc9e1c4790e25da58eb7f72b3fcaee5ee914df50f53b89a6f623d6e452be6f3816d3064edb2757fe616b5c5db2134ddc919ab0d7aadebdcef18c4137b0b9f4c000a1aa77b971eea3a6315c2f9443d5bcc67d6ad4bdcb8d155db2b005eb001fb0b7d27824febfbe53ed718e1543aae377d1ee961561afab728508ed63528840c5486b926186e779a00ae", 0x9e) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000040)={0xffff, 0x4, [0x5]}) 15:31:45 executing program 6: capset(&(0x7f0000000480)={0x20071026}, &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote}) [ 2554.779849] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2554.799481] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2554.808115] [26305] 0 26305 17553 8388 114688 0 0 syz-executor2 [ 2554.816984] Memory cgroup out of memory: Kill process 26305 (syz-executor2) score 8416000 or sacrifice child [ 2554.826956] Killed process 26305 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:31:45 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="025cc80700145f8f764070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x8, 0x7fffffff) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xfff, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000200)='./file0//ile0\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x7) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 15:31:45 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:45 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000c4e000/0x3000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x8, &(0x7f0000b93000/0x1000)=nil, 0x7) 15:31:45 executing program 6: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}}, {{@in=@rand_addr, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2000, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000001c0)=""/125) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 15:31:45 executing program 0: mkdir(&(0x7f0000002040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)="e19bb260", 0xfffffffffffffffe, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/7, 0x7}], 0x2, &(0x7f0000000380)=""/153, 0x99, 0x9}, 0x1731}, {{&(0x7f0000000440)=@ll, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/253, 0xfd}], 0x8, &(0x7f0000000a80)=""/68, 0x44, 0xc7e6}, 0x7ff}, {{&(0x7f0000000b00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000b80)=""/30, 0x1e}, {&(0x7f0000000bc0)=""/94, 0x5e}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/22, 0x16}, {&(0x7f0000001c80)=""/240, 0xf0}], 0x5, &(0x7f0000001e00)=""/240, 0xf0, 0xdc33}, 0x80000001}], 0x3, 0x2, &(0x7f0000001fc0)={0x0, 0x989680}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_pid(r1, &(0x7f00000001c0)=r2, 0x12) 15:31:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2554.899301] Unknown ioctl -2147203839 [ 2554.922795] Unknown ioctl -2147203839 [ 2554.923627] IPVS: ftp: loaded support on port[0] = 21 [ 2554.928236] device bridge_slave_1 left promiscuous mode [ 2554.937243] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.949313] device bridge_slave_0 left promiscuous mode [ 2554.954788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2554.969463] team0 (unregistering): Port device team_slave_1 removed [ 2554.976541] team0 (unregistering): Port device team_slave_0 removed [ 2554.983393] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2554.995595] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2555.007847] bond0 (unregistering): Released all slaves [ 2555.076064] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.082514] bridge0: port 1(bridge_slave_0) entered disabled state [ 2555.089109] device bridge_slave_0 entered promiscuous mode [ 2555.098464] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.104843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2555.111325] device bridge_slave_1 entered promiscuous mode [ 2555.120270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2555.130401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2555.147079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2555.158166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2555.180661] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2555.187453] team0: Port device team_slave_0 added [ 2555.195565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2555.202332] team0: Port device team_slave_1 added [ 2555.210466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2555.220804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2555.231055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2555.238013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2555.245576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2555.253510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2555.260448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2555.267895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2555.303524] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.309895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2555.316395] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.322724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2555.329377] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2555.446503] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2555.452660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2555.469545] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2555.486363] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2555.492466] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2555.499189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2555.505861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2555.521855] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2555.527937] 8021q: adding VLAN 0 to HW filter on device team0 [ 2555.601704] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2555.612567] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2555.617670] CPU: 0 PID: 26623 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2555.624947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2555.634317] Call Trace: [ 2555.636880] dump_stack+0xae/0xf0 [ 2555.640309] dump_header+0x7b/0x460 [ 2555.643921] ? ___ratelimit+0x139/0x150 [ 2555.647871] oom_kill_process+0xac/0x680 [ 2555.651924] ? out_of_memory+0x44/0x650 [ 2555.655890] out_of_memory+0x4af/0x650 [ 2555.659753] ? _cond_resched+0x17/0x60 [ 2555.663641] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2555.668646] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2555.673812] pagefault_out_of_memory+0x4f/0xa0 [ 2555.678370] mm_fault_error+0xec/0x270 [ 2555.682230] __do_page_fault+0x4ec/0x630 [ 2555.686268] ? __sys_socket+0x9f/0x160 [ 2555.690133] ? page_fault+0x8/0x30 [ 2555.693653] do_page_fault+0x37/0x160 [ 2555.697433] ? page_fault+0x8/0x30 [ 2555.700950] page_fault+0x1e/0x30 [ 2555.704377] RIP: 0033:0x43e461 [ 2555.707539] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2555.726532] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2555.731867] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2555.739142] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2555.746394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2555.753656] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2555.760918] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2555.768265] Task in /syz2 killed as a result of limit of /syz2 [ 2555.774239] memory: usage 1572kB, limit 0kB, failcnt 13096 [ 2555.779850] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2555.786591] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:46 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x100) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) fadvise64(r0, 0x0, 0x2, 0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000080)) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 15:31:46 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x3, 0x3, 0x2}}) 15:31:46 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f00000088c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008900)=0x14) sendmmsg(r0, &(0x7f000000af40)=[{{&(0x7f0000000040)=@nfc={0x27, 0x1, 0x2, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)="e8d58be0e92d7ccf833a7c162a57345a03164fa97b1fbbad15e93b96dc193571b7bef6abfe3e94ee357458687ea4c563f07d60afeabed42003d61470b4f37adb1766978abe748225cb6418d10979c863960a3437925f5e7fa3ef24ba4f5c1f", 0x5f}, {&(0x7f0000000300)="a6066b241680a3efdb58477ea32e0674dcebffeb785434cfbc21d543662d709c2b028c93d3047bf8c7cf4b55164f204fae43db84812aae51f04f88a7cc3567278f3e3966494fe2647f5337b40f59a4574ee17bc39854d4c185b19f50c016773552e82df57c02cd5a96c624eaab2ce36c12796ee510d9d436796ecb622778553d4583b0e84993840e89078618000caceb235a8351f38364676ccc56e4db64c734fc4f6a167a3a2415", 0xa8}], 0x3, &(0x7f0000000400)=[{0x30, 0x1, 0x5d, "916a82f8b9632ddf1c107c38f318c3262c365b01c62aaea12d"}], 0x30, 0x8094}, 0x982}, {{&(0x7f0000000500)=@xdp={0x2c, 0x3, r1, 0x1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="de00fa686c7167e8b29e1e7fbf79155df5", 0x11}, {&(0x7f00000015c0)="9210adbd25eb769581b4e22b3766aef247465de7e08d33db5b8030e53b5418db42d0e1e4c6e35146", 0x28}, {&(0x7f0000001600)="2cec4f9b4c6973f17a590e9bfb2f3a70a9a40e4ff3b72b2c1ddf63bbaf21d3b416a485c11921bc677c3b9b5fba1890e867101f338911b1448f3ef1c240983167ebae59500dcfb7a1c76f61daf9e80a74752a5d99984a35c45c21dbd4b7c9401bd3d8e59d35c5d8112bae21b49b5b8cdff2a58c86a05be15f5a612a3d2de4", 0x7e}, {&(0x7f0000001680)="f320aee1bf1e9eea5dc9047b33bf73eb73f87f95c898bbfdc0b43ef92584cfb4c04b1f3ed74b755547180b33f07ae67887e150abfc7bb59908ece418bdfe7cb66abf0a5cfe37602116797b14e5a3affa00ec78e2b2f2baab144caafef40453af40fbcc4fda6762f4cf893a524a95743c95bdb333f129", 0x76}, {&(0x7f0000001700)="9520d20a60b034b98afccd037fbc938d226bf70237985da69ece94e2158e4f94d5528402bd801b0304f61e282cd2701f1711896cd8c4d49802a09a39e480963312d472bca8054b5bdc66b5ceb619af20e9441b3497dc046c2f40621a060739d8f79a9703347a1621d12ce858c1d6ab66dcef3ebb49a8ac16d5a6e6493bb00a01722aca21c3e616b8a193d21dd60a66e45e242f24e9f79ea388a2e38185d5ac5b96c8019a368f515207fc10880553236e9ebc9ccffc107692e872ce0d24e85f433ad4b342b5cb37c9b746f0184e05e3653af17cf808dc937c085ad72c4cbbf75ece9a1598ca2e6c11cec3b112891347cb42", 0xf1}, {&(0x7f0000001800)="a5f37064df928d49161be2505887fb66a4ec4076c5d7d5e9aff8df9651d2d208b342d19571f682ef4ebf520bed0bfeb5a49c29a743a0b0ac95dc7dfac0fbbe0522213c3f951962ec0450bfe21ddc3cfdff015a79b7c33a06492c2bc7f31af361a59704857b4017bbcda9f9e99104b0286d7a405a30597edcaf847af9b431053592336eeac0c5df7bdb10ed02c84540abeedc1d5cc2ba5b68006af818863d0d8a853a54cf7dc8c0c65c2e884ef62350e770bd1b5e8a51e1f2f1513d7773cbf7a3fa834104c67c6595a9d23a18808f7a9054993c2b4a6bce0f", 0xd8}, {&(0x7f0000001900)="fcf98af25b894e9e42ab296f44cd917330643dc6652eaadc7e52879db63c974aeba65528d21548573e19e00a4e597aab4510087f819bfd29c225252ab2cc206190379870922e561ed3b9fda62780e62bae789e3db6eac5b1bf87ff3101deed852074216786129b474c23a72f19925e8797290f0ca6bcf92774eb7f91e5b1c76bb2b3b2a6168f479476960f74776df873321d5c14edfdc255cbbd10770d1b3a893d860cfdfcb36005d7e7f9feee61f13dd30ecf07b608f3124f71efb7e408a7ae800c19dacfac83b3b1b55f6255944c80002b2a", 0xd3}, {&(0x7f0000002040)="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", 0x1000}], 0x9, &(0x7f0000001ac0)=[{0x88, 0x109, 0x6, "7f3f17f91e9aa66873f98678f8a3e8a9c8939f12e47cea74373c78d4f84de904a2e45be80e474c1ca228017f381503e37fa609bc8cddcde8a904a852075df843c353a78a392040f7f85812f6793d3515cbc89feea59284439150ce2d75f93775312c5ae786682b194bfd215fb797fc0aa9de50b0"}, {0x108, 0x116, 0x2, "470af337968cbcb8f7bb9876f94975fc8cae7386042483ca4c232b2b5f2ba769ca01f38e206fab031ab8b83b2026f9d559336afbe0f23880660691187e8958c11d135384d874f3a94c72f8559dde16e127af2637d045392a2cb1ddf1d0e2c0fa7001fa90ac9386fdd900c70a96355821bd5106087b36136cf3c15a210bdd67fe6dd4cdd74bfb7598f50b53ba0570b481aaa68c77ffd0fbb3fa097cacccf029a3e523ec15a8c2a3cbd64a6919a0f66168bcccabfd17d9137950ad81922db95408d4df695e41904639ef2352c106dcd7f142962a2d9a0f37c0a0d3b9037cbbf9b655d1145d9fe1ef94c2caaca5676cf8861cce7d"}, {0xe0, 0x100, 0x6, "68e0f0d06b8afec51eb681e474c7ef8eadb239940cba565809126fbc93db48dd8745f2b1ffd358105f29b32714a9a17b67dc74b1d2032afd405e186d59d376f4ae3edb2bbd3a016c5d4f9ac8faa93470952f5e67f87f23325558e90115ee75824829831c6d1f96248c79650bef3eff69faf12232bf3a8f766450c646b5ef67346382d56f9a3d1546e78d74793c303e3e1e511a93cc0be1b4c9d24e1d2801ebcc8d2008abbbf6b1e8d516c51eb299ef55baf72cc39a20c844e4653bd0f213f1b4205a6a5f25379ecc64b3"}, {0x78, 0x114, 0x1, "41a6d3080232f9b295587d6495037658d74db7156a45932dd2670947b28af5b39c9efe9aa8fdb1c56c7e3701e91d3b65456f2170613d397612bf3c3518cbe71906d34f09a5cfdb435fb25d70f437ffba978d507daaff934c8ffc8bd3a0ef7dbe2fe6159f21"}, {0x60, 0x104, 0x9, "94526de84734565727e58199731e74160df57227c8e4dfbd0eb3971c3c3011df1522a671ebb6b9bf1211e0bdae656fccbd2610cae1a59a491044b22e1a695e94a25aed34b2c8b0e610"}, {0x68, 0x109, 0x4, "2ea20438f5391f0dda80ce49bcc8771338a62090b928bd7c9a8f205789aaa301305be22d822d0e40f2d08f8abf387af19dc594b074d86a6315d0ba1e87e9787b28b12b3f1a0278206e259af2a161820fd21573ab53fea891"}], 0x3b0, 0x80}, 0x1}, {{&(0x7f0000001e80)=@ax25={0x3, {"404628dbe3b614"}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000001f00)="d9953f2cf0f471b6894515faf9d585a28b663c888911427a", 0x18}, {&(0x7f0000001f40)="0518ed9f01b6de2073c62ceeecc0b900b19e4980dce872e7ade17abc1572e9b9b18a5c28d5dda768892635015ce8caf9470c5a644b8a27408cab1c4fa00b7568e5ec882469c5d4ef312d0891b6eb4f4801bf25d15f8135c06725b8abcfe9f9f8783e407447dd2d2b4e3460e4b39b7bfcd415f3abb465c546d032de7a806ee947f69111b2217e9d76a4", 0x89}, {&(0x7f0000004040)="52fd11d151eaca35327421", 0xb}], 0x4, &(0x7f00000040c0)=[{0x58, 0x113, 0x2, "c7be49046856ba8ff9556f5514d50dc3ffb796ca772f3b050dc2c82d15fdaf4b2795ad2e5756d0581f1bd545d602818517338e09a9392a813cae997002333ec231209f278e"}, {0xd8, 0x12d, 0x2, "356f6081f36c7e65f6b6d28d582de120991793ddbd1e1e609a6baad5e710c943c2f7dbb55c17bc446582a5e6f2857b3b920869dbbec700a97cce6561c27628363379dd40e026e1a9d76acdb74e092fad06fc3f9af1b6dec556cda0b120bc15cd475d912aea63849cb4592adc803f23794309fe06347818b4caf011f9b84bf8097d8e4aeacbb908815f991a24bf75a7cdc289cdbbc4c1f3ae0906eb1523ebc62cf3a0c67001b1b711d7f9ef1762682017900caf1806f992b8a3f45be2e5005dd9fbcf2726"}, {0x1010, 0xff, 0xffffffffffffc29e, "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"}, {0xd8, 0x10e, 0xc9, "b9a106576a19fd9a1b217b0f5020c44b33b4e715406b03026bd7a092819d89571e6abbb16961e7a084499d0c73c8b0f6981aabd603ad3f4b2ccb567a3317d9813ce3ee662a27ea9046db3bff8049d15edc1652b579e040f5c05c0f85a521363cc31dd3f443bb09f7cc53c927f9969462bcd37999cb5c40e6c19a5e33e5fc9f2c56d243ff22a3996c9a1b257a20f528b02cb39e8c9001984b1cc4d21ae652c204cf462a2fd4206c9b81107fe4d420472d598457ca77bce0de5958d483c8d0b5f464c06e616c62e0"}, {0x100, 0x18d, 0x7ff, "6bee063621845b8c51e3d1adb206b9480a62db0da29a2cd69a7a58d8b20707af7bf066845bffdb5e5e83b183c93fe2495cf543ce7b2e0dbc763326d9aafa43a29c0cc3691d537ad66fa76899e05ac83f3500df4c5e57a597794eab21ff0a6cf94d5f8e693c7c6cf744e425e0b2cf75f6bae066bf8fc2b853e1a9995ad6e2db3f423ca227e3be41b37359b011bf5400911ad46ee7d454d0d702389e350c9f30939184d9e0afb6eb0419912cf8fe1cfce8812965c8fbad4b288e81370957868105ebe22e48381320bf452ceacd647a79a71f000c7239e1d341de42b2a3ac39fe7a47eb0b5310c88a3732870f"}], 0x1318, 0x4044}, 0x400}, {{&(0x7f0000005400)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'team0\x00'}}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005480)="9fef836ffe46a68e3896ccada9e31858", 0x10}, {&(0x7f00000054c0)="a55f960e7ba810e861a68f45cab1119404cefb8a1d3cc702e95fbbc7725d0c8abcb7", 0x22}], 0x2, &(0x7f0000005540)=[{0x90, 0x119, 0x1, "cbbcbc9d71a3617505db3b76fe4046aa8081f899b84700282dd35767cdcfc313cfb06da83e7c776dabdc6f96474f7313dc77e3a6beb9ba590cab5f6527864863bfaa4bc397f5f204574f935d6773177229c8b3c4b4132a2ca0249b72f83ef3be8b886c9a86d591e8cea0044c89d747d096db1c3e6c442be85362b4"}], 0x90, 0x20000001}, 0xffff}, {{&(0x7f0000005600)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0x80, &(0x7f0000005740)=[{&(0x7f0000005680)="2dc42243affcfea73521fdbb9a788cc7a14081a0b6cd9b03d1fee350372861c1d6e6e23a8e5c487f5f4c68054b7154709cdec5ded8fdc43d7c14709792c2530bb1b3ff6be8e89e3e527a7f02a9fdb990cc36c7d7732435685e7c8adb6877949c86b12f70bcd61d7aec281a734784a67d4e683c2fb11bf06966631b38ef4c4de1f3e17197829cd3fb", 0x88}], 0x1, &(0x7f0000005780)=[{0x1010, 0x11f, 0x8000, "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"}, {0xa8, 0x100, 0x8, "aceb22a1b77e98b2ddd4bd374f70de16715fb48207849862ea4979b0ec2ea5ac01c1b701cfae9ce991f55240e42df11ec7024ba8b5c562b6437895e3f68455498b063dda655fdbdd3d26d763c7ad6c1609d6e9e868c6ab4f1a6425a0c80795fdfd1cc289d3a460cb4b6ab6a2037315300e74e6efc0cdac94e8b61435214c6a33cf916213a5aba01905ba467759dbbe71c802032e1e068ad5"}], 0x10b8, 0x8000}, 0x8}, {{0x0, 0x0, &(0x7f0000006ac0)=[{&(0x7f0000006840)="4398b8371e0e9c4840ad7eac9a5732e6e5585745df0f7292e45d04f0173106115ae77ae199972e3681aba4e0fd22e1b1a091687200792a7571d375c20a1fa8c833236c91e01dc6489c07f0d17b74ea1d86fa975131970ee3c632394d13dbb4a16bbebcdb37a7df50bf59a64ad2c4498802237e96da977d80e2a2a2fcb5896db91cb8de1097727df4b971406e79d530b5ce4d8b7be904b4f549516081ef6565292f73", 0xa2}, {&(0x7f0000006900)="f9afd9b94cf81c36d55526889238d9c07de37ab27411e88d66f19c0cc86ef8af6df89ef6efde1486f18a12fe613c7cde63db0f1d4af4964f76d880e25bfa17aa29ab870cfa69150cf70ee182048e74a51178ef5fc05d727bb4143854bc34c18540c83b536d552dfe0dc465b3202ac0f309ff452ab65ee5a97fa1816f4fba864ff2074bb9299f8b1020c0eba7bac56f49bd3f8ce9d8a2fa41c24186eb3625e5558d94b39a3bd87d5931afee18871e23a6f0e90161dc5af8b912c5a6abf0d3a40e4ac9435d28438585c3e7ee19996642de885c1119d7bce53603704f4d86fc0298359fae7e7991acf4aa60d7fb906b82fe", 0xf0}, {&(0x7f0000006a00)="85a6a532fb7e1edf1d8f377605b9f49bebe5d6b3a4c22527844df30520169575a3d07ef2efb4e2c077c84010d18c9d52a0b201e5f0fefec6a61f134d075a99b7724fe21d84c187b24113ce10d86570592e4f0277e5b41678232898205dcdeda2416a037fbf5e98fe4bbbe7636952e3374f53266eca88848afd20bc83e0109fa5eddc1c74ea2afb2986ef87c58a8b3e73b5e82d29", 0x94}], 0x3, &(0x7f0000006b00)=[{0xf0, 0x10a, 0xffff000, "750abedfb222ff4d6666884f77860443b3616c09c544b40a3cafbbf77cc4a467a4f16ed3345131b13f5642b58c31420e5b07931044ab8b034718841ebc5b27bb2c339cb7c9f948001347db75b69293c57b9de258e421efdfef6e031260152051ef53b61452280b1efcfc631cecdd21ae960476f309fca48acfc73751027eb1181001b89dd9c8ef0cafe158bd75c66229253cc1792c497aebbea6ac241ad28354a4e2a5886c7fc2d7f15e9ecc16ab2bc0228bfe97b8680f61598cc26a254f77a162f9d4197ba1539c5610567dc65b8e631fb594b4bf87ddf4c123e7"}, {0xa8, 0x117, 0x3, "c68fb4324d093d9bdcbb31fadcb40d28e82b04a4ee664e91ffdcc378eaee38d6e36b48c790c5bfb517eaf18202cdc135278dc10c77013ed74761b52e1580421901e9cbc1f08332d031fa94a2fe3239e8725c71335f41fab7e7a0f404863492b4fb4589960b8c697684c7463d535ca271b30e6f5d051b02a06b35bfbc5f23ded05715c444fc97c5fb51f8cf488566026bb02a42a3ed4c1d"}, {0x1010, 0x0, 0x7ff, "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"}, {0x18, 0x103, 0xd5e3, "c8b44256"}, {0x38, 0x19f, 0x200, "8d2125fd00d78e6fbc80265dedc20f5930c62a1e99b3dd061c723485c6ad7e2c9fab594ae95e"}, {0x90, 0x102, 0x7, "5a97273bb373793dc0e693527a601a0f8d732201daaeb3c99057743802be88244b89b3fc793456e461cf8ee2da0c9f30c90a1fd5690b55b5c78ceb02532266a6aa5569e258cceddcd5e79bba0dbe732df6cc3dcd1ce2051a059ec2ea6a2c0d8a72baf65a25be3816d861c9e505794f07a73b663b69c882b1116f3a6157a34bc3"}, {0x80, 0x118, 0x1, "1c76656c54f946d34515005df11f0e5a2c34a2a9148749be9f5078162543378d7767ee078b357e108dc3e3712a40604adb151d63be6ca3110c32ac1bc3ea1f72f733a9fdd0d3c9dac4918f01d052352b2a929f41f6eee9d1ca986453fe995c4447862f5acbf6a228aea83d373446"}, {0x108, 0x116, 0x4f70, "51650479157a80aa67dd0a58991f04d270102c3de657cf991950f818d6ca2b64fdaf433b3cd553d33293fef6b7a59e9d37eea2c981343f85152fe70b518cb8b235d4e521c44c31543bbc32d4ebe4d51f641e8f51f0448a7efc1c15b9c24cb78a70ef821d95f80313920bfb6a92f785ec37dd753cf9a222730145c61f6dca5205809d010ae1461893615308a0866f496463cb01f3a7025a85a4719abc148d3454a482842f38d05984568f2fa1f39159a8c8105f2f7e5fea1540d7930f3149ff937a6df552552242fe97d55d671c8b8edf3c9331988720f9c7689b1647f59fc33c3557a2396e9e79bfb4a5285fbffa91108f7b8bcada82"}], 0x1410, 0x40010}, 0x6}, {{&(0x7f0000007f40)=@nfc_llcp={0x27, 0x1, 0x2, 0x6, 0x8, 0x4, "046cdf54b1ba1c4a7f01d427f6263b75f618ae599b217dd6a028ffe4ad04f9be1c906b82a4b9aa2227902fb36b25c08831f5b098bd2bd74c9afcbccc8cec63", 0x17}, 0x80, &(0x7f0000008340)=[{&(0x7f0000007fc0)="0ab20b5417f21e1df068761648e1e52784db1e1d4f9d4508749ee8dbe6bbc6bf504998d2ec7e201a2f2ac27f1a916c9f552c48edc2e8ca35606d744b1e4cfe860fb21b305051e23fb79f1aa739f2676cee5b455acb3f4cea545f2ba8320991f664a8cd669250a612fcd8b4fa1002b5cf4c", 0x71}, {&(0x7f0000008040)="e51431be5fa03805f8d773aaafa7fef475f30d3be02b485291e24b9083d7db18b30109734478d8d520d4471df3f3b9e20d39f8eca24976f859ba0f03cf52947b0b683cf87f1c7785708e88e4ab9d762b29a475c4b65f936dafa6e6e646dc1f42ca16e0f7050e5a6cacf3f765c55cd083cbda4f2ca8675ac79fc8d67f472833816fbd67a02d440dcda7e923305161157d663469f7bb91054d3792a63336576182a4", 0xa1}, {&(0x7f0000008100)="ea36f3ba93db13f7252064592ff250e29b3cbf1a3c8512d45d8f4184881ee71b652c6cbce274b4ee778d64a15e9d297e1b9f21454394b03ddb4f76543c9a2c6c679b020356a41729758502e75e59ecd73ab77c4be517df0f7fcef006ca4168d716c67fc72bb97aad", 0x68}, {&(0x7f0000008180)="b1930e3446673a5fe60f816a5ba3759e57aa587a1964a8f7f5b87ca73665cfbfbba7359d09913914370a317ee8e5a64c7252a4f74e108bfcd392758bd42804562474d679a33e9a5f9ba80664ad21b97d33be6ff3913f8b0babff56aae5fd8820b57b99027fbb0857c508eb7c3c6f8330a0dfd4fea6efd6c02f96d37658bc14f55f762f1a562f516b96f1b136199d8dfd7fb9e629502638fb277159fef2aff0b2372b8878cba9dde04fa2142ffc91cec649643edcf64aa1b8cd2b9de13ebcf7", 0xbf}, {&(0x7f0000008240)="7037f343a8a496221d54a09f8c3a128a206eea898c7601e88767d99aa9aee501", 0x20}, {&(0x7f0000008280)="548c4a8a5703791a9f86fd51f9602104adf632dfaf556427cbd3a5cfcf1789d9b7bf88f246f04146454be64d59ecf980d11d119d9bcd5b5ba0b65929845173daa9ccfca45f970f60b69a9dd2be1b010100dc567b8d7463b264887adb0af440b93647f42288d5878d868e89f7514cc659ebaa629d3a98a1a1ddd857d1607b27346201cc20b754fe9038f675815ffbce2f9a0bf2ff802f9b29c0c3596376e982ec0df69392203627f0", 0xa8}], 0x6, &(0x7f00000083c0)=[{0x80, 0x116, 0x1ff, "e21c6240befd482b73aae28a9e14dc988e952100e4d8f5cdd17af69e59c3afeb3bbb4f082662572a96cd2f192c22f2081295ca66b7bd041fb7a1e0f45be4d5e8a4f0c43ec3d0dd9c270787a3548048080735befa80cee00647842616bc77817e1297542d97ab1db65390135490"}, {0x10, 0x11f, 0x200}, {0x88, 0x19e, 0x9, "b1fb4a96a94f39b0bfe011ef0bde92a9a0d88d0d06153397a763eeb378e00f22d4a5795aedd8170df8d9597b92740748cc11bf81210d5ebaa24f004107349349a9e45bfba053e4c2844a190bfd814df6280bd4a24dc7aac41570d1a6c69ec6353d06316b382c4507378a611a11a56aa6d5c98d"}, {0xc8, 0x114, 0x8, "c4b78bb2b0db615325d6f2ae4916e9800f62777a7beae39e73c92a208897e44006fe6df9ab496a7c7559611a75f427388b77aa92f7096acbd60802e2219ee60c2322cbb36496e7bb3624ac4f6cda5626dddb51cd5d560d31d7c98c7b707a6133b0a970801732cffcf1bf9958d02027c651be6571661a916c099e314b3cca667328f798b555818b93eb6977bbd77b577456886fd5fed26a352036c63b994648eb8ab48d78ab2280e29a519f8a9b207d8d397531"}, {0x60, 0x11f, 0xfffffffffffffff9, "3843d65f55ea7641aa00a4abe496458cee81ed35a2642c18b2f17f8fdfa5b9c257aad1479ce57d6e4a6c095b24d08741647084503e0832488fa7d27b9a3dc6a28c81759b1582c4c12f410b65ed3f"}, {0x60, 0x107, 0x0, "fe87742c46ebb7c6586733d8f6a31e46a040eae17487281d367c7fccf5797805886859e24a101de7fce5da217c79f678c26a9a2219498e75927fae323e3e187f1285d21a32893c96e5db237c"}, {0xb0, 0x10c, 0x80000000, "6118899f3e5292286e55b56f85938c6f2fedb3158f08344aaa982c913a5dd195cc2be6fcb86df76280eed03f605fc740953826660bfc05590d89a07fcf42ce05426b589493bf2f49979e11d21d9d3374ab24e593e75c1409feb8e38e5790f5463bc57f6d542afffeab4a665f5ea77f9a917a4e6233e880390e7c5163b160a1ceb19855004baad5a9ec93a1e2136d49d749675087452aca98f50a5f"}], 0x350, 0x8000}, 0x3}, {{&(0x7f0000008940)=@ll={0x11, 0x1f, r2, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000009a80)=[{&(0x7f00000089c0)="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", 0x1000}, {&(0x7f00000099c0)="73dcaad1ae2e393397156e9092370bd827077d23ca9420b81e57b838a5181473a7cab094615b6a4048c48fa39a68df822ff5c7f3a75760c9cb5a14ea822c1eb5e0cb8b08a38937f5a3c83bbff1d043a5f8220aeb16fbdb4797e4117b98c73170fadd7ea2ccc3627e113efcebf805c122c8f4484b046dfa23bbe159f67867ea0a04ca71ca03c8c889c38ff0d0d3e113c7ec39ffd317", 0x95}], 0x2, &(0x7f0000009ac0)=[{0xb0, 0x3a, 0x5b, "dcbf95b94d02fe5aab4fe68bedb0d24722b2f9128ee5e76315fd09cf478f23a30099fa63c0cb6ee79d7816678ed5cd0a8173ee89a9c7f584570c98418f0a3035b31e07ffdd2b365946b580403040372004172621259541885ad6324e436260c981e6a202348eff644e18a73a4ffe70d318939c9471e37157528143e688a6d70135e1569666901ecf22b5c41054b910580bf0e5c95c52d51ce611"}, {0x110, 0x3a, 0x20, "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"}, {0xd0, 0x19f, 0xffff, "7a5726a734317bf587c44497ec3db390eda717bf697ec5e0808ac2e79df05ebd1df951d320e02f01d0d4167a760d515a0d8dfc6dbba340b2332baca78e153424f154eabd384f4af1a100be818c0ad89747dc0ea17d9ae93c2c676be36b57eb1d32b929d2d10d9981202db33cb294f88271b85528ec10fee563ca1527bf3776a136cbd65d80e2fbcefaef1efa9a16c98487253cd68308ee4fb5c0d36f62d51e22b8342458a2c7a0401e3ace1992caaf432939bb8c302b4d0ddcb2fe51b78d1427"}, {0x80, 0x100, 0x6, "12ed94ced271684c7b29cba102c94de5f197d315cac108a410f4db697069d24a98532b1e064e79a75411f1d71361a36b1c70bfaf2361e3e9c2998466ff26a3afaffaad5531eca689fb3dc8aa68c07a5ad6ddebd23c3c2363063ab353db623637d20b05cd259635bf52daa86987714d"}, {0x48, 0x11e, 0x5, "17f615ce1a3c96a07a9295a2f200d8b633cb59f0238866c23f4dae00d70c5acf47ace36cdcf9831921f7c0a571b851e27a2535f2828f"}, {0xf0, 0x10f, 0x400, "b486f7a17aa82cee62d7e49ca45bdb176f12094f5d73f265d29def9f6be11cf7fa96cac8e885625dfeeb358f29ea5a3fd6535b92baf21737bcc4cc8ec34d78d7922d2afeb013ff647b94f9d6e1408e17d37e1201c2f85988e8cca15a37a9f561c7ba4d733fa505fe832115a517e2cc492e797ad41530c88396ac759eccf03ce6946952d648102304c299b23ddb3d24ea0b24933aae858f9ada6736593a7fc789661399178518d70cd6caa54fe6015530a0a37dcab0834915963728a92a10ded69947080f627dfb379384e3105f5873983e4b394a212a20e63b0d"}, {0x1010, 0x109, 0x3, "34bb74a475d03b55179776d894272d6d2ec3967378df14baf744d832127cf60a08fd065a389cff7f19f0c45c608de8b1a44909bd6013532ccf5adcaa26081113c8d0ea7dcafc1a79fd41e87c053327fd36ac53dc4e7b30a45f62fbf8f4c0f6810ece6d8610ba2d7d22b7b05d76bdf6f740266f4b7505b25fcf33622289e6cd6d30fc5c0f220d6ff1de31bbb2e3b17c7b20e3a27b23213c563afdb9a96d894cb449eda8fa77c6c0e6312afc1b89f3701b5028009e372ca9f5338b066faa567a3780cf7d57000326e36024db8190d64b0431ea9be298157bdb992b5072be02ea3bd0f5cf89978e3e8b399a02243f79046379cf11a15d1b7d467d95c5589a3cedfa33f8775b0c8dc4082990449dc9ab8329fa208db0e099334190caea513acb5f00793391bc09ad9e66949fad5fa35f4ce994e388d1219a4f19fdfb26dc53765c02ed3ae98350f6b5462ca71010767ff9359b2e922acb79fcf28657113029e8a003f7b9c675d40e21a25cb045761d2ab379105bb5af7801d7b086dbd78b12fcb59772e9525ead4dea4f032b0f79929cf01ccaa3eec2e2bffc0e5dbf4eb2ac7a7b4563a546ff790e56cc7f2457f87fc0e4de6e3b05e0b73c934faa7ea3d4aeb61e6fcc6428641acc257fd673191e4228687cf979280640cca4801b091a3d484b23bf44d7ef9a65ba2a20f27bf799a0387dbf5001be52204404dc572ad6e8b9a9ccdbac8af21663f6cebb22babab064bed027a9b987123574c41e43a957cd03dd459aaf13f89987ab3e832892201bf1dd4829b0fc7da65240d54891a57d84f8ea685c4b11dfc065a57e6078566fbf1a9eafa623185bd0be5de37de061b14239c99d2ef00fd208fa06ce1489fc30a6575656cec78d2c3e54e9c918e635e257f21334bc7617b6ed4b7780f1a04a383818faae59e17ba7b2710179baa9e0d53582a4afb8edb521b9befc38f950453c54e6d378b1f1b782947baab2b52e7b1c4cb97641f2addbc1159ae5b9b5065adc1a92a4ae5f953caf9e6acc2bf4b23896a3041095997856894a13afbe82b2d6bcfdeec5c644a2e65212bba210641eab256422ececc6acf9fc3618e02a3607544560dc29c41c04ac282a420deb0146292a6407dff650f6271187155c5824421e2ae8a34ee276844af590af0286d8ae7804de1ddc18191f7f86153591cc0fe294c9bdfefd4ee12b5db23ddbe3ecfbf53eaf09fb0799e39f9b74685d83660c0e25fe7bedbcf2984f7dbfb2a22d485fdf744d6b71b756cf02584a36ecf3505eb8949585b73efcc8a0ffe8d7879a917eedc7278bae75fc9b94cafff7a92747a662b9f04bb47cd94ae780dfec32bbeebf516175663d86d76f6ab82c57a39d4c0f6673f13a766cef524e638b391772954091dee5ee17473c2048e79a5deb551b2f1fc1b2283ff42d603d66186b0a0fbe1b42008868786a0b29eae9e6cb21116e908976a4a42406cb5a01b1d9b373ac2fd4b4aa29f416fb9991812c1042f6688cc27460486c8c705befca1f2e5154badd732e5d5c7333c70d274e74e45b4bd9237854a511a5169b9c691aded2a6593a6d2439b97d8266cad9fa6c1e731633aa9e0fb6afef13c8cb2f439c26ada9dc21a1a9b666f201593356a2ab4717465de1b071f1ff8f3f49b9e107cc80fe9d77c13be10336198e701f9b47da80bf4d7d06fa0ad55c8642295e1b20b4ef9bbe558ca4280713fc291552aac959ba88d9f301cf78bb8207cdbc93559efd97f681406cb5324549cae34daa2866690450d6b19763368bc916fee9c5a11d9bef9a0c5e650fc410f5f735cdefad1a155e1fd76742090e617f546f3cf01bfde06c7d6276d3c79c0ba6c25d1a66f97936c2c773992d62362f91c4bb99c55b2ecd31ca7b0e225c3ffb0a034d7d2209d446536a4100133d8f4aea5b4b39f90bb00ea087a0fd5c3e41247a093392026148631614eb86837074797f1959ac2be7dda79448b6231fabe538e014f6f2be1c266aadaec3063546e4c8e04e96503ba9dbeda1d8c649e4ba5ee9f5ddad1c62d201875295342e43d11e75ccf4178cbe01c6a58dbd9b306901f04984668249c341babc2858f941bc99b24d068fe9e607eaf947196d2b073c60afec09ed7885136358f647cde27490ca6ec7dacf81224a73c86552dbd871421650fdb255c573e56136e89ae74333a60b727e0141abb1a639949af54b529356025b70d7e591f5135f86b50dc32000c2e32e10fce038ca0ab847dcc1fcdee52e6df314157fdb03d5e5a315688eb5d02a517c00ae334242aa82463b5ebe7451bf2f8090d253d3b54423f599f56ca8b16cedc7b7c81e2e3a5e5d63fa3cca8797b658241fa274305545bd6809b8d73f1eb0e22045804da1674eaee74599fe037de3a974412553825e5e63f74fd1fc23a06c5c0f04fb9af448b8ccecdf59f8ee6e9b680bd7f34f5ae265b96de419a3f145cf78b8a038972e4e7906dee169d2341be3664f184007e81c3caa96405f60ca0cb7ae51ae7c493632661b2fd8f5e444a4b071cea4e0683fa1bd924e49259f58de6b4debad84f57f238f06152584583dd0d8cf13857a2b56fe5c70934e23cf3f5363cebddd77a5a2254bb15c1dac8e048db6f52877dbe02de3f270224b2d98ad764965f8bd2b1369a1a4f38193b075ed1ae0ef6172f7e40032efc498a55b3626b75bcd90ffe5418fc3d14103621758e27c7908f86e7926399533d79425c1b063b4faec87b6e35e0df5b0738a9ad433e6617befde2a48cdcac37022f53aafdaff16bb73f35f9d708d7b6a0e7198d772fa80dead81890e2f2cf7aa012f03f3447f71de10e18bf04dfb86c94360022dcfc711f1b4b199b42f8aed6a9f718c8f2dd86a61c72e2f67d75724c61797371925a9afc71697478c2966980467a2816d29128876cee79a98f7f4fda38337db06c0d0c2e05b966f13063e42654ac23d7d7d9af9698b1c191564115ee855b8adbb4fd67bb312bbc7cbf02ab688a3a7a4ea8f03945824bd02465d027757bbd674270609f08c9a63ab12f0874e02dadc1b7bf3a89426526e62b3a395a76b845f8ef0adc97db9b63d68e57737a22357f611263758a55fa719f54eb2f0444e7ab456229f969222ee009c36bf61e3da5489f328890410b3f7f08c5e8b0f7546b75e53f9232cbe453b03c6b27025d19f60a867058023666da66549a83c698a550dfc6bcd7bdc35ca032f84ff20a24143324d18d96dee78f311fa32e75597d89c52e40a8a92abbb13d6095383e935b587be6769343cc6150bd61a93e181721f64f146fb7a5b98aef081a5dae9f3d95ab71068507ef7069f3b99fbcf074254b848432b2c0fb2987d5fb8a45d20fd814d087f96170d865c8e2904c03711022290d1b87c9d892f33b40626c89d6b86febf09a504fb1480e5753d7748e8a09214165517006074b8c3806339d8e98e0aa2f217ffd2835d2f002d4c7794b50e879d82548074a29f2ac50e9b881ff4d57b96e3b570c6e1efcf15e0f71aab2caf9f6106d75be8396816a4e4001569e8705fbdff3ade5db98a20db878cd63ae9074234f612a3c2bfbfe8fc9d6f6614df70e1d29d62ea33bd1c3130d62151b913e20d1553b4cecc214cbfcf6968d23c42ffb11808fb918c94e58aa9662f0735a6c41165a0c4f9573edb2fbda5c38c5f28c20e781d2194f43a40f9cd77bed20c9627e579a39d171396204608f854ec32b0ff9130bf57bacfbb5ae71dfa448ee80b3478224865a0b7af3db63523a5c14b4c60789a26f8743ae9c69bb7a982eec060955f84a14341800bbce442c5d0d4e75beedfd4796018547edd0eb22d0b7f52ed4d9f698b47d0ad8ed233abb43f073f5fa5383e2526fc245f32a3bf1d33588b6651d7f3ed9e8be5eee7f8bfa27a5bc6be1c37ee63e1b377632d11abcb366e781d8c06062983996d4e67549d943dca3e20613fe4574e09b4e9f7188d5c45885b6291602620181641555db2c353c422edf0d344f1f0a83ec1f5ab50d08261595e9ace0f265fbf5ae586b81149eea133cde817e9e205006c605cbeff962a4b28d607652c99ce2a1d00c2b61c2f977bed570cb6ca26bdd6ea30ec040ebffc094e1e1905966acc113cc45a4e05a331d04ee16cf56a2ea906cc09ebec03cc41f9bf542dcdd397ff173f6fb4455f49a82b28c9aa546fb93bb2ac91ff02c3847e5fcca3ee9e43971dbd8c456431768b11e6afdd73ebcfec720adee7ba152fc2d5b9003e5061c7c90fdea299ad8e6557c543fbf5f6ec5097fd92a387f96ecc6dfd1ac2436650314d437be213eb1cf1910e040e5706282ef81e29561dca7d6881e90cd1804da7fec238d7c2ac5314bc2728e5657d31de2743db90dff830257392bb6d704e9d8f344bc84c91772a0c4f34d097cb41cff98b0f603e1d136fa79398d6c4dc1cd52a4be0f4a8c32b1f44bb9c0591600846e937c9fcb85edb1cf3e6f251e935013a1acb1edb8ca30b7cacd37827ce45911ecb1e9e655d9ed0a9e5f76bd23805f5a57d5b0af2a25e0be41baaa88fce59e8173c46f0b9940c79afae13d6087b38bef090cd135752c542b1460bbbd86a927da37fce03efd78d489f4c4f70d0a0cfbb11ec0d175212c18e24704b526797054c9fc8fceec283188c6049460fdab3045c8b5670f1da3e13ae44deb1923ed1011e324625aaae5cd061f1f9ce1e9d8e57fca5a591b940eed6e4f0fe291cc0f14b312586e524e835fb22def7d3da5a8070cbce09d215e26776cddf28e5160d16342f6bd47d972c7cc3f5a53bb71b6b3e10e9ced600b592faab6b7ac34528d6a003fc7d140ea22ffe5cad2338d218e28eecc399a70f57e213f9b439cfb63ab673d725d47e0bbcc6194e98b6cd7d56d9802ddf5f2ef27e5ebf422589bb2ee60d0506ed0c8f60600b5f03bacae4b1d4f4b8a5604e43d6141bd694ce2fccdeab52f6d24574bbb68be94183b246c00507c52789ab8339ea9a152b9ce896a4ef80411e813cb07c1ab71e1f1bad7a283c8c4c27ec331a7260fc0601f3cdd2bf93ef3b027cafb0fb10aba486cf12b108622ff10b75f0bd76dd42683ba234926885e0054d6bcbe7749203c41fd690f91fc0ffd6c0309b92ed50f5028bcea9b0444e981d567666b81ea0cfa785ef6f3bac96e230d05a9a7f9c22c0130e90af1196cdc5207a961611fdcf1edee81875e9e2452e34a82051a47cd74779f1aab0c1df5ffafd470c1ea2c1eaebe8c10b2ad9ad6172a726c275b408cad408579178a506024deda5c2fcd9ea3d53bc7bd3b2cc1c5405abe922db1857705508cf8a23fe8681b76655c0ec4a860dd2cd79b2b1c116be2f9587f70c5f40d991178c4c005f1a382cd50ab8a777a2d84ff8b4fc46cd8e10c1b9471427ba0b870c597c2b00c824d0cc5ba610036f61631990127aa37ce5969b6a73c16d3f7e0e67fe6ac98158bcc43b9a838818708b7acc1af6834180e2d85580d4097db7f58ce41685adfa0144722896db0dcf648fdc12791a172ef2f753284c22b202bc29107b0dba34344eed3ed5b331ee8ce1a547d11de37081a9e0b46b5477763bbba3b7100db5cd087312ff05207fd946d78aa0bf7c751389a794b9b97b6d13db2774d6cc525f8eea53bfc36f88dc552e4a31a0f650cc4c36b35c216d8cfe8e91d3d9a0cf4e67e74e7611452aa5aee69ff026fa9f53647cad5bd09e634652195a9359deefe5c72eeb80785074a36caccb8b6afda0ab652503cddc7012ad02ea17d56a20360f3ad98501fc741dc7bf3520b71a6c926b5c37f5e47af9c58400075e4746767ef025e1aa6f5a91e8913db83629f50af7a8821c10"}], 0x1458, 0x20008080}, 0x100}], 0x8, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl(r3, 0x80000100008912, &(0x7f0000000100)="025cc8070050fa8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x5}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB=',']}) close(r5) close(r4) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:46 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:46 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x4, 0x4, 0x6, 0x11, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x348}}, 0x4000) 15:31:46 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000280)={r1, 0x1, 0x6, @local}, 0x10) mount(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "01b5671fa3539a4b84bf0f73e22c308873d2b191a2f7"}, 0x1a) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x40}, {r2, 0x8000}, {r0, 0x400}, {r0, 0x2}], 0x4, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000003c0)={0xb6}, 0x8) fchown(r2, 0x0, 0x0) prctl$getname(0x10, &(0x7f0000000300)=""/163) 15:31:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:46 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback, @in6=@loopback, 0x4e23, 0x5, 0x4e20, 0x0, 0xa, 0x80, 0xa0, 0x7f, 0x0, r1}, {0x6e0, 0x100, 0x9, 0x2, 0xfffffffffffffffe, 0x20, 0x5, 0xd51e}, {0x80, 0x2, 0x9, 0xfff}, 0x1, 0x6e6bbb, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x100, 0x4d2, 0x3b}, 0x2, @in6, 0x0, 0x4, 0x1, 0x0, 0x3, 0x7fffffff, 0x400}}, 0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x101000001, 0x0, r2}, 0x2c) [ 2555.792720] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2555.812331] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2555.820935] [26623] 0 26623 17553 8389 118784 0 0 syz-executor2 [ 2555.829767] Memory cgroup out of memory: Kill process 26623 (syz-executor2) score 8418000 or sacrifice child [ 2555.839728] Killed process 26623 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:46 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = dup(0xffffffffffffff9c) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:46 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x100000000}, &(0x7f0000000080)=0x8) flock(r0, 0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x30}, &(0x7f0000000280)=0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000180)="e4726f63720023000006000000", 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f00000003c0)={@multicast2, @local, @multicast2}, 0xc) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000400)=0x4) 15:31:46 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:46 executing program 1: r0 = socket$inet6(0xa, 0x80007, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:46 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:46 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x3) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)='ppp0#:-md5sum.\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r2) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 15:31:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x9, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f00000003c0), 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}}, 0xa0) [ 2555.902965] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2555.926098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2555.930621] IPVS: ftp: loaded support on port[0] = 21 [ 2555.946016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2555.955806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2556.009200] device bridge_slave_1 left promiscuous mode [ 2556.014640] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.025323] device bridge_slave_0 left promiscuous mode [ 2556.030736] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.042345] team0 (unregistering): Port device team_slave_1 removed [ 2556.049408] team0 (unregistering): Port device team_slave_0 removed [ 2556.056453] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2556.067616] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2556.080810] bond0 (unregistering): Released all slaves [ 2556.102725] bridge0: port 1(bridge_slave_0) entered blocking state [ 2556.109122] bridge0: port 1(bridge_slave_0) entered disabled state [ 2556.115640] device bridge_slave_0 entered promiscuous mode [ 2556.126697] bridge0: port 2(bridge_slave_1) entered blocking state [ 2556.133060] bridge0: port 2(bridge_slave_1) entered disabled state [ 2556.139584] device bridge_slave_1 entered promiscuous mode [ 2556.148899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2556.159120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2556.176177] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2556.187583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2556.210009] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2556.216814] team0: Port device team_slave_0 added [ 2556.225050] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2556.231864] team0: Port device team_slave_1 added [ 2556.240131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2556.250409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2556.260756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2556.267768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2556.275374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2556.283249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2556.290274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2556.297768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2556.334389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2556.340735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2556.347255] bridge0: port 1(bridge_slave_0) entered blocking state [ 2556.353583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2556.360258] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2556.479647] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2556.486348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2556.503300] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2556.520412] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2556.526515] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2556.533276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2556.540067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2556.555897] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2556.562000] 8021q: adding VLAN 0 to HW filter on device team0 [ 2556.637730] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2556.648656] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2556.653772] CPU: 1 PID: 26927 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2556.661026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2556.670367] Call Trace: [ 2556.672930] dump_stack+0xae/0xf0 [ 2556.676358] dump_header+0x7b/0x460 [ 2556.679963] ? ___ratelimit+0x139/0x150 [ 2556.686467] oom_kill_process+0xac/0x680 [ 2556.690504] ? out_of_memory+0x44/0x650 [ 2556.694452] out_of_memory+0x4af/0x650 [ 2556.698330] ? _cond_resched+0x17/0x60 [ 2556.702209] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2556.707217] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2556.712389] pagefault_out_of_memory+0x4f/0xa0 [ 2556.716959] mm_fault_error+0xec/0x270 [ 2556.720823] __do_page_fault+0x4ec/0x630 [ 2556.724878] ? __sys_socket+0x9f/0x160 [ 2556.728767] ? page_fault+0x8/0x30 [ 2556.732284] do_page_fault+0x37/0x160 [ 2556.736059] ? page_fault+0x8/0x30 [ 2556.739577] page_fault+0x1e/0x30 [ 2556.743026] RIP: 0033:0x43e461 [ 2556.746188] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2556.765206] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2556.770563] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2556.777828] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2556.785072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2556.792416] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2556.799674] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2556.806970] Task in /syz2 killed as a result of limit of /syz2 [ 2556.812953] memory: usage 1572kB, limit 0kB, failcnt 13104 [ 2556.818569] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2556.825319] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2556.831467] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2556.851083] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2556.859703] [26927] 0 26927 17553 8389 118784 0 0 syz-executor2 [ 2556.868658] Memory cgroup out of memory: Kill process 26927 (syz-executor2) score 8418000 or sacrifice child [ 2556.878637] Killed process 26927 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) sendto(r0, &(0x7f00000000c0), 0x26e, 0x0, &(0x7f0000000180)=@nl=@unspec, 0x80) flock(r0, 0x4) 15:31:47 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x240240) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) 15:31:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:47 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0xb7}, {}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1) r1 = semget$private(0x0, 0x6, 0x400) semop(r1, &(0x7f0000000080)=[{0x7, 0x7f52, 0x1000}, {0x2, 0x8, 0x1000}, {0x2, 0xf8, 0x1000}, {0x3, 0x1, 0x1800}, {0x1, 0x5, 0x800}, {0x2, 0x80000001, 0x1800}, {0x68e69f313d056527, 0x8001, 0x1000}, {0x2, 0x4, 0x1000}], 0x8) 15:31:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) 15:31:47 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) poll(&(0x7f0000000000)=[{r0, 0x1400}, {r1, 0x11}, {r0, 0x8}], 0x3, 0x3590) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:47 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:47 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x28000004) syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x9, 0x2000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="ccfac8437e5242cfca97e9a1f33fe377d5cb6cf2b305e07c5ecc812241e722149f8ea2f87eb866dcd031bb4079d2c6008b1cc76e7391fe143d8dbacb9cab5271bb1c7e45c7b0f0f10899e2eaf89b66e160d4553f06f83cdeca09cf2a5eb76fffc40213bddcb2e2eda6a255011f07e99b4d78286f7461f680367c65315f1a45ed51e4541843f8a2d6a2c12d8a266f894a187702872284f5827c2a7b8a99941bcaa7ad2aa91e44f4fdaca9f6321c61892acbc580de06282e33fc4cf30b2d655f867e89a5de1cf48e1064cf84215002ed3611e20b34", 0xd4}, {&(0x7f0000000180)="cb5e26a201edb7b4694191377d8b02a6900198e5c284418ec13cfa533d32bd", 0x1f}, {&(0x7f0000000300)="de480c9b5ca9b1d4207ffc103af9bd627912bb201f79fac2f491f50a43513987761db7d5be55252e70587b133d0f967562253f81ec76b95e5ed04245b30534856f50e330c161f8ac0dd715bc87ebe9a587bcd24773470abf2d9830f24b98263edb44c75c5273d5f1942b91754c8fd2457392272b3db65c4600d29da2e20c43993063b8e780a7ceee898c7472c8c3d9dea4db071bc978b2339f81abc243fe0a268e571b12a22d921c55d58374a23387a9f950599a8e379b7e33a011cd61b9581e7affa91d13f9db96a9e2e531134a635f24187646b8902d6cbecec40024", 0xdd}], 0x3, &(0x7f0000001580)}}], 0x1, 0x0) 15:31:47 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000200)=0x8) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) 15:31:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:47 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00') r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) 15:31:47 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = gettid() sched_getscheduler(r1) 15:31:47 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) fcntl$getown(r1, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000002c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000300)=r2, 0xa) 15:31:47 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:47 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000000)=@ethernet, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/174, 0xae}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)}], 0x7, &(0x7f0000000600)=""/54, 0x36, 0x5}, 0x40) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) [ 2556.929250] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2556.965904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2556.970664] IPVS: ftp: loaded support on port[0] = 21 [ 2557.022215] device bridge_slave_1 left promiscuous mode [ 2557.027669] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.037298] device bridge_slave_0 left promiscuous mode [ 2557.042701] bridge0: port 1(bridge_slave_0) entered disabled state [ 2557.054559] team0 (unregistering): Port device team_slave_1 removed [ 2557.061463] team0 (unregistering): Port device team_slave_0 removed [ 2557.068351] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2557.081607] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2557.098993] bond0 (unregistering): Released all slaves [ 2557.127899] bridge0: port 1(bridge_slave_0) entered blocking state [ 2557.134259] bridge0: port 1(bridge_slave_0) entered disabled state [ 2557.140745] device bridge_slave_0 entered promiscuous mode [ 2557.153324] bridge0: port 2(bridge_slave_1) entered blocking state [ 2557.160566] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.167068] device bridge_slave_1 entered promiscuous mode [ 2557.176581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2557.186835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2557.205227] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2557.216458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2557.240651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2557.247450] team0: Port device team_slave_0 added [ 2557.255944] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2557.262768] team0: Port device team_slave_1 added [ 2557.271390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2557.282218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2557.292909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2557.299884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2557.308295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2557.316986] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2557.323998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2557.331674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2557.371595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2557.377950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2557.384453] bridge0: port 1(bridge_slave_0) entered blocking state [ 2557.390793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2557.397535] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2557.528567] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2557.534680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2557.553948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2557.572263] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2557.578408] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2557.585107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2557.592530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2557.608987] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2557.615093] 8021q: adding VLAN 0 to HW filter on device team0 [ 2557.696741] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2557.707677] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2557.712785] CPU: 0 PID: 27238 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2557.720065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2557.729403] Call Trace: [ 2557.731968] dump_stack+0xae/0xf0 [ 2557.735402] dump_header+0x7b/0x460 [ 2557.739008] ? ___ratelimit+0x139/0x150 [ 2557.742961] oom_kill_process+0xac/0x680 [ 2557.746996] ? out_of_memory+0x44/0x650 [ 2557.750946] out_of_memory+0x4af/0x650 [ 2557.754810] ? _cond_resched+0x17/0x60 [ 2557.758674] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2557.763667] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2557.768835] pagefault_out_of_memory+0x4f/0xa0 [ 2557.773394] mm_fault_error+0xec/0x270 [ 2557.777276] __do_page_fault+0x4ec/0x630 [ 2557.781324] ? __sys_socket+0x9f/0x160 [ 2557.785193] ? page_fault+0x8/0x30 [ 2557.788707] do_page_fault+0x37/0x160 [ 2557.792482] ? page_fault+0x8/0x30 [ 2557.795998] page_fault+0x1e/0x30 [ 2557.799422] RIP: 0033:0x43e461 [ 2557.802585] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2557.821581] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2557.826915] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2557.834160] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2557.841407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2557.848654] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2557.855899] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2557.863175] Task in /syz2 killed as a result of limit of /syz2 [ 2557.869152] memory: usage 1572kB, limit 0kB, failcnt 13112 [ 2557.874768] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2557.881506] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:48 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x9, {{0xa, 0x4e23, 0x4, @remote, 0x8}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x0, @loopback, 0x5}}, {{0xa, 0x4e20, 0x2, @empty, 0x7a0}}]}, 0x190) 15:31:48 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0x40000000}}) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 15:31:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0x4}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x2857}, 0x8) 15:31:48 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:48 executing program 2: socketpair(0x10, 0x800, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1344}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xffffffff80000001]) r1 = gettid() waitid(0x1, r1, &(0x7f0000000040), 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) 15:31:48 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:48 executing program 7: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0xffffffffffffffff) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x98, r2, 0x14, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x304}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 15:31:48 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = gettid() mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) write$FUSE_LK(r1, &(0x7f0000000300)={0x28, 0xffffffffffffffda, 0x6, {{0x3f, 0xb70, 0x1, r0}}}, 0x28) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000100)) getpgid(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x202100, 0x50) mkdir(&(0x7f00000002c0)='./file0//ile0\x00', 0x156) write$cgroup_pid(r2, &(0x7f0000000280)=r3, 0x12) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000480)="130000001000ffdde200f49ff60f050000230a009d00", 0x16) [ 2557.887639] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2557.907252] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2557.915857] [27238] 0 27238 17553 8389 118784 0 0 syz-executor2 [ 2557.924687] Memory cgroup out of memory: Kill process 27238 (syz-executor2) score 8418000 or sacrifice child [ 2557.934655] Killed process 27238 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:48 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x10000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) 15:31:48 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16f8, 0x1340, 0x0, 0x1258, 0x1408, 0x1258, 0x1660, 0x1660, 0x1660, 0x1660, 0x1660, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0x1118, 0x1140, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x0, 0x6, 0x0, 0x2}}, @common=@unspec=@cgroup1={0x1030, 'cgroup\x00', 0x1, {0x0, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x3e29df9b, 0x1ff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@empty, @remote, 0xffffff00, 0xff, 'bond_slave_1\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}, @common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x84, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x101, @local, 0x4e20}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x8, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x3e80, @local, 0x4e21}}}, {{@ip={@multicast2, @remote, 0xffffffff, 0xffffffff, 'ip_vti0\x00', 'gretap0\x00', {0xff}, {}, 0xec, 0x1, 0x8}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xdd79, [0x6, 0x2, 0x4, 0x5, 0x100000001, 0x3ff], 0x1ff, 0x9, 0x8b9}}}, @common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'ifb0\x00', {0x2d, 0x8, 0x14, 0x401, 0x37, 0x3f, 0x8, 0x80000000, 0x40, 0x68}, 0x6}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1758) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x100, @time={0x77359400}, 0x5, {0x4, 0xd302}, 0x7, 0x3, 0x4}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000001ac0)="acd5143bd0e98114504bf74a08032e41314781ff523d9ec39db79a10f0be988b1ecb0e2732ea37e0562f1ebfe7b3cb33c6c1835d1b08026c5c16b9ba404ff60ab5610d46d14cdca617805a6103055da0ce70eb838ba1bd224374bbbe6b5175eab6b69161c1c171053cb92f718ea1390b47c7466346f9079ca6787dbe9db105664de995222582227c87eaaf72fd", 0x8d, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) 15:31:48 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0xa000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0xffffffffffffffff, {{0xa, 0x4e20, 0xc9a, @dev={0xfe, 0x80, [], 0x1d}, 0x237d}}, {{0xa, 0x4e21, 0xffff, @mcast1, 0xff}}}, 0xfffffec4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) dup3(r1, r1, 0x80000) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000240)=""/69) 15:31:48 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) r2 = shmget(0x0, 0x2000, 0x402, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) munlockall() r6 = getegid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) sched_getaffinity(r7, 0x8, &(0x7f0000000440)) r8 = fcntl$getown(r0, 0x9) shmctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x6, r3, r4, r5, r6, 0x32}, 0x6, 0x7fa5, 0x4, 0x1, r7, r8, 0x7}) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) accept4(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80800) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 15:31:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x202) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/123) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000000c0)={0x4, 0x1, {0x0, 0x3, 0x6, 0x3, 0x1}}) 15:31:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x7f) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xff54, 0x8001, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @local}, 0xfffffffffffffef4) 15:31:49 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:49 executing program 5: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0xffffffffffffffff) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x98, r2, 0x14, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x304}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) [ 2557.975906] IPVS: ftp: loaded support on port[0] = 21 [ 2557.977748] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:31:49 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x208000) bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000200)='./file0\x00', 0xfe) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:49 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000b45000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000c37000/0x1000)=nil, 0x1000, 0x13) 15:31:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/216, 0xd8, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0xabc, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x1ff, 0x40000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000380)={r1}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000300)={0xb274, 0x7, 0x0, {0x0, 0x989680}, 0x100000000, 0x400}) [ 2558.018868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2558.044723] IPVS: ftp: loaded support on port[0] = 21 [ 2558.062641] IPVS: ftp: loaded support on port[0] = 21 [ 2558.107206] device bridge_slave_1 left promiscuous mode [ 2558.112717] bridge0: port 2(bridge_slave_1) entered disabled state [ 2558.122318] device bridge_slave_0 left promiscuous mode [ 2558.127766] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.139580] team0 (unregistering): Port device team_slave_1 removed [ 2558.146538] team0 (unregistering): Port device team_slave_0 removed [ 2558.153430] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2558.165610] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2558.176970] bond0 (unregistering): Released all slaves [ 2558.225183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.231547] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.238073] device bridge_slave_0 entered promiscuous mode [ 2558.247223] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.253561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2558.260031] device bridge_slave_1 entered promiscuous mode [ 2558.269463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2558.279687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2558.296018] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2558.307178] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2558.330646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2558.337457] team0: Port device team_slave_0 added [ 2558.345632] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2558.352399] team0: Port device team_slave_1 added [ 2558.360765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2558.371341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2558.381982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2558.392789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2558.432738] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.439104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2558.445626] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.451943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2558.580034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2558.597076] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2558.614613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2558.633342] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2558.639432] 8021q: adding VLAN 0 to HW filter on device team0 [ 2558.711742] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2558.722639] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2558.727750] CPU: 1 PID: 27558 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2558.735010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2558.744356] Call Trace: [ 2558.746919] dump_stack+0xae/0xf0 [ 2558.750351] dump_header+0x7b/0x460 [ 2558.753951] ? ___ratelimit+0x139/0x150 [ 2558.757921] oom_kill_process+0xac/0x680 [ 2558.761978] ? out_of_memory+0x44/0x650 [ 2558.765937] out_of_memory+0x4af/0x650 [ 2558.769797] ? _cond_resched+0x17/0x60 [ 2558.773658] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2558.778643] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2558.783820] pagefault_out_of_memory+0x4f/0xa0 [ 2558.788374] mm_fault_error+0xec/0x270 [ 2558.792236] __do_page_fault+0x4ec/0x630 [ 2558.796287] ? __sys_socket+0x9f/0x160 [ 2558.800148] ? page_fault+0x8/0x30 [ 2558.803660] do_page_fault+0x37/0x160 [ 2558.807430] ? page_fault+0x8/0x30 [ 2558.810947] page_fault+0x1e/0x30 [ 2558.814384] RIP: 0033:0x43e461 [ 2558.817543] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2558.836548] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2558.841904] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2558.849162] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2558.856406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2558.863648] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2558.870907] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2558.878293] Task in /syz2 killed as a result of limit of /syz2 [ 2558.884272] memory: usage 1572kB, limit 0kB, failcnt 13120 [ 2558.889896] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2558.896635] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 15:31:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x4000000000000027, &(0x7f0000000000)={@multicast1, @loopback, @multicast2}, 0xc) socketpair$inet(0x2, 0x4, 0x9, &(0x7f0000000040)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000300)={0x100000001, {{0x2, 0x0, @multicast1}}}, 0x90) 15:31:49 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:49 executing program 5: mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x400007ff, 0x5, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0)=0x7f, 0x2, 0x0) 15:31:49 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x101200, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x20) r1 = openat$cgroup_procs(r0, &(0x7f0000000180), 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:49 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:49 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000001c0)=0xd5) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x100, 0x3, 0x5, 0x72, 0x9}, &(0x7f0000000240)=0x14) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffc) vmsplice(r2, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) arch_prctl(0x1001, &(0x7f0000000280)="cad71c6d469bc917911d7ab35356024a965b893a54160e07db8236efbfb84ea85036c8ab21828c9d071433d1f2147c271c30dc67097b31acb375b815338b66c011269f82913ccf9b28580093907484f227efa140a92caa125d522df8c7a149811ddf63718ee531f83e7cba30b834342345fcc0dbf52b82fe631f8d4b0d21bfad55140e5f1d7c55e9a418ceeb29f2df0c40e3fc8177de707925fb9a2dc5f0373836783997e72da79397e1f30c2d5e5f66bbbe8b650058808e91c112a201d98e77b73ab78917eff93d34482be341f18018438d") getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000380)={'icmp6\x00'}, &(0x7f00000003c0)=0x1e) 15:31:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x200, @ipv4={[], [], @local}, 0x2}, {0xa, 0x4e20, 0x6a, @mcast2, 0x9}, 0x3, [0x8, 0x9, 0x0, 0x8, 0x101, 0x7, 0x9, 0xfffffffffffffffd]}, 0x5c) [ 2558.902770] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2558.922382] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2558.930991] [27558] 0 27558 17553 8389 118784 0 0 syz-executor2 [ 2558.939837] Memory cgroup out of memory: Kill process 27558 (syz-executor2) score 8418000 or sacrifice child [ 2558.949799] Killed process 27558 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:50 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:50 executing program 3: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x800000000000) accept4$packet(0xffffffffffffff9c, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000019c0)=0x14, 0x80000) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001a00)={@mcast1, r1}, 0x14) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) r2 = geteuid() r3 = geteuid() setresuid(r1, r2, r3) r4 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 15:31:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) accept(r0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10001, 0x100) accept$alg(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) 15:31:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x20000000805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040)}]) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r5, &(0x7f0000000080)="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", 0x0, 0x200000008004, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x20000000}, 0x11) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20480) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000040)={0xcb0, 0x6, 0x4, 0x9, 0xe7f8, 0x9}) socket$inet6(0xa, 0x5, 0x2) 15:31:50 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ce4000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xffffffffffffffff) 15:31:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x200) futex(&(0x7f0000000000)=0x1, 0x7, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)=0x1, 0x1) 15:31:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = getpid() fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x7, 0x9, 0x8b, r1}) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) open(&(0x7f0000000080)='./file0//ile0\x00', 0x200, 0x90) 15:31:50 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 2558.988672] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2559.028185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2559.034664] IPVS: ftp: loaded support on port[0] = 21 [ 2559.092201] device bridge_slave_1 left promiscuous mode [ 2559.097661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.109279] device bridge_slave_0 left promiscuous mode [ 2559.114911] bridge0: port 1(bridge_slave_0) entered disabled state [ 2559.130491] team0 (unregistering): Port device team_slave_1 removed [ 2559.137395] team0 (unregistering): Port device team_slave_0 removed [ 2559.144345] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2559.156614] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2559.168839] bond0 (unregistering): Released all slaves [ 2559.205880] bridge0: port 1(bridge_slave_0) entered blocking state [ 2559.212284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2559.218754] device bridge_slave_0 entered promiscuous mode [ 2559.228058] bridge0: port 2(bridge_slave_1) entered blocking state [ 2559.234417] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.240931] device bridge_slave_1 entered promiscuous mode [ 2559.250498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2559.260873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2559.277393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2559.288454] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2559.310625] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2559.317401] team0: Port device team_slave_0 added [ 2559.325497] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2559.332282] team0: Port device team_slave_1 added [ 2559.340403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2559.350665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2559.360883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2559.367866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2559.375446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2559.383509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2559.421660] bridge0: port 2(bridge_slave_1) entered blocking state [ 2559.428021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2559.434519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2559.440829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2559.558278] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2559.564420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2559.580778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2559.597081] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2559.603228] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2559.610192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2559.616907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2559.632277] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2559.638489] 8021q: adding VLAN 0 to HW filter on device team0 [ 2559.709744] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2559.720666] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2559.725774] CPU: 0 PID: 27878 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2559.733025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2559.742354] Call Trace: [ 2559.744915] dump_stack+0xae/0xf0 [ 2559.748340] dump_header+0x7b/0x460 [ 2559.751940] ? ___ratelimit+0x139/0x150 [ 2559.755886] oom_kill_process+0xac/0x680 [ 2559.759915] ? out_of_memory+0x44/0x650 [ 2559.763858] out_of_memory+0x4af/0x650 [ 2559.767719] ? _cond_resched+0x17/0x60 [ 2559.771575] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2559.776560] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2559.782025] pagefault_out_of_memory+0x4f/0xa0 [ 2559.786579] mm_fault_error+0xec/0x270 [ 2559.790435] __do_page_fault+0x4ec/0x630 [ 2559.794484] ? __sys_socket+0x9f/0x160 [ 2559.798345] ? page_fault+0x8/0x30 [ 2559.801858] do_page_fault+0x37/0x160 [ 2559.805630] ? page_fault+0x8/0x30 [ 2559.809168] page_fault+0x1e/0x30 [ 2559.812594] RIP: 0033:0x43e461 [ 2559.815753] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2559.834747] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2559.840082] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2559.847372] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2559.854620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2559.861863] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2559.869104] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2559.876370] Task in /syz2 killed as a result of limit of /syz2 [ 2559.882348] memory: usage 1572kB, limit 0kB, failcnt 13128 [ 2559.887969] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2559.894706] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:50 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/227) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) dup3(r2, r0, 0x0) 15:31:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)="4550d4141f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xf9, 0x1000, &(0x7f00000002c0)="91ba0d9b53bf5223bc217ab4f9c3839ce5ee6ffc5c86c76537121a872491d1cad6992a596e1f3ffbdd9231bfa6821ba7fe37c8c2862afb2caaf00fd622a3757ad1112433ec344ec4ad92a3685367b2c195fe7b3e10735a2fd99672a809a6936feca401841a211a77958d467f503930157aa95c25bff378a6a26e08432da6018f2dba9633b3dfacc7a15035e31d158bfcec4bc0953cad2112471ec4d4a5c8124550f0af2e72a16202f1f4d48d7d50f867534a62a030cb4d0762611c08cfcc420516b6e8dc1981ba3641a62103711eb44b40919c0b9e88b7e88f8dc1d7a6d9e1f90d702a83528b3bb0cefafd39b26396cec2feec9376c9ee3bb0", &(0x7f00000003c0)=""/4096, 0x2}, 0x28) 15:31:50 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0xd, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x200}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:50 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) 15:31:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0//ile0\x00') r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:50 executing program 7: r0 = dup(0xffffffffffffffff) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) pkey_alloc(0x0, 0x2) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:50 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:50 executing program 3: r0 = socket$inet6(0xa, 0x7, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:50 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000280)) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x22c, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) 15:31:50 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r0, r2, &(0x7f0000000240), 0x8000000008) [ 2559.900835] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2559.920455] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2559.929053] [27878] 0 27878 17553 8389 118784 0 0 syz-executor2 [ 2559.937881] Memory cgroup out of memory: Kill process 27878 (syz-executor2) score 8418000 or sacrifice child [ 2559.947854] Killed process 27878 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:51 executing program 7: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4803) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:51 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x100) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x7) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:51 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x2, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:51 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x1) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 2559.992530] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2560.038761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2560.048405] IPVS: ftp: loaded support on port[0] = 21 [ 2560.098253] device bridge_slave_1 left promiscuous mode [ 2560.103672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2560.113331] device bridge_slave_0 left promiscuous mode [ 2560.118763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2560.131516] team0 (unregistering): Port device team_slave_1 removed [ 2560.138407] team0 (unregistering): Port device team_slave_0 removed [ 2560.145190] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2560.159574] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2560.172858] bond0 (unregistering): Released all slaves [ 2560.196934] bridge0: port 1(bridge_slave_0) entered blocking state [ 2560.203303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2560.209816] device bridge_slave_0 entered promiscuous mode [ 2560.218873] bridge0: port 2(bridge_slave_1) entered blocking state [ 2560.225207] bridge0: port 2(bridge_slave_1) entered disabled state [ 2560.231824] device bridge_slave_1 entered promiscuous mode [ 2560.241995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2560.252360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2560.269076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2560.280183] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2560.302047] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2560.308844] team0: Port device team_slave_0 added [ 2560.317018] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2560.323771] team0: Port device team_slave_1 added [ 2560.331693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2560.341818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2560.351721] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2560.358695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2560.366267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2560.374087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2560.381017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2560.388466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2560.423711] bridge0: port 2(bridge_slave_1) entered blocking state [ 2560.430056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2560.436558] bridge0: port 1(bridge_slave_0) entered blocking state [ 2560.442871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2560.449508] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2560.567104] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2560.573232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2560.589786] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2560.606841] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2560.612998] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2560.620478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2560.627096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2560.642396] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2560.648469] 8021q: adding VLAN 0 to HW filter on device team0 [ 2560.719726] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2560.730582] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2560.735730] CPU: 1 PID: 28207 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2560.742988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.752315] Call Trace: [ 2560.754877] dump_stack+0xae/0xf0 [ 2560.758303] dump_header+0x7b/0x460 [ 2560.761907] ? ___ratelimit+0x139/0x150 [ 2560.765895] oom_kill_process+0xac/0x680 [ 2560.769932] ? out_of_memory+0x44/0x650 [ 2560.773878] out_of_memory+0x4af/0x650 [ 2560.777746] ? _cond_resched+0x17/0x60 [ 2560.781642] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2560.786636] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2560.791834] pagefault_out_of_memory+0x4f/0xa0 [ 2560.796387] mm_fault_error+0xec/0x270 [ 2560.800244] __do_page_fault+0x4ec/0x630 [ 2560.804279] ? __sys_socket+0x9f/0x160 [ 2560.808190] ? page_fault+0x8/0x30 [ 2560.811745] do_page_fault+0x37/0x160 [ 2560.815521] ? page_fault+0x8/0x30 [ 2560.819031] page_fault+0x1e/0x30 [ 2560.822456] RIP: 0033:0x43e461 [ 2560.825614] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2560.844653] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2560.849990] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2560.857257] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2560.864501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2560.871742] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2560.878984] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2560.886249] Task in /syz2 killed as a result of limit of /syz2 [ 2560.892245] memory: usage 1572kB, limit 0kB, failcnt 13136 [ 2560.897858] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2560.904598] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x100000000004, 0x4, 0x1, 0x0, 0x1}, 0x11b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) [ 2560.910744] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2560.930374] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2560.938981] [28207] 0 28207 17553 8389 118784 0 0 syz-executor2 [ 2560.947824] Memory cgroup out of memory: Kill process 28207 (syz-executor2) score 8418000 or sacrifice child [ 2560.957800] Killed process 28207 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:51 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x3ff, 0x954b, 0x9, 0x1, 0x8000, 0x63cf]}, 0x10) 15:31:51 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000280)) getitimer(0x3, &(0x7f0000000080)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r0, 0x400}], 0x1, 0x4) 15:31:51 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 15:31:51 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x401, 0xc35c, 0x7}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x8}, &(0x7f0000000300)=0x8) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080)=0x1000002, 0x874733edef6b69f8) r2 = socket$inet6(0xa, 0x400000000002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15:31:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) lseek(r0, 0x0, 0x7) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:51 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:52 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) fchmod(r1, 0x100) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:52 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x400000, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000000480), &(0x7f0000000600)=0x4) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0//ile0\x00', 0x40000, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000300)=0xc) write$cgroup_pid(r1, &(0x7f0000000340)=r2, 0x12) sendto$unix(r1, &(0x7f0000000080)="d7eb217f994edc2931ebefeba41d4bdfff5623bf8965ce855149f1a28074799c6377a289", 0x24, 0x20004010, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000003c0)) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000380)) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000500)="0cb08630b07259ba5d78c4b7d497466a37118ef22c5ba388cc310586ed21bc870300e901954a1bc6b2230d5b1f43ff282a262977094bd36ce7d3131690c937a1efbdf27bb3fe5975da8e4db3800e5a8f144aca4d187253e6c39cea8f810d4b5b27155f883729927cce0a198afd65c4f6bc6ac8f640d7c23232d37f639a6699a7e0f760202d78b1585ea19e0f450c10789736a6e9a7424455cc4b3bbc80fcc4306919e48b6f5434910a5e61bff920b06f8daf0c0c266bd582b79bd9f596fca3960d3f1940b54373456a52e36c") syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0xe09, 0x40000) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000004c0)) r3 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x30) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 15:31:52 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x40000) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1be9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x6b8, 0x490, 0x0, 0x138, 0x278, 0x490, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5, &(0x7f0000000080), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x1a}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'bridge0\x00', 'bcsf0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x4, 0x5}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x80, 0x64}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@loopback, @port=0x4e22, @gre_key=0x60}}}, {{@ipv6={@remote, @ipv4, [0xff, 0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xff000000], 'bridge_slave_1\x00', 'irlan0\x00', {0xff}, {}, 0x6, 0xa7, 0x2, 0x20}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d3, 0x4, 0xec5, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv4, @gre_key=0x1, @port=0x4e23}}}, {{@uncond, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@inet=@recent1={0x108, 'recent\x00', 0x0, {0x3, 0x6, 0x8, 0x0, 'syz0\x00', 0x7, [0x0, 0xffffff00, 0x0, 0xffffff00]}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6, @ipv6=@local, @icmp_id=0x64, @port=0x4e21}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x3bd6, 0x4, 0x1, [0x7, 0x401, 0x9, 0x1000, 0x1, 0x1, 0x80000000, 0x7f, 0x0, 0x7f, 0x7, 0x1, 0x10000, 0x4, 0x1b5, 0x18dd], 0xa}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6=@mcast2, @ipv6=@mcast1, @gre_key=0x66, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80080, 0x0) 15:31:52 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x10) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, r2, 0x10, 0x0, @ib={0x1b, 0x3f, 0x6, {"a67e72062116bf53aedf940d85bfd4fb"}, 0x3, 0x2, 0x1}}}, 0xa0) prctl$setfpexc(0xc, 0xb0003) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r3, r4, 0x1, r0, r0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x3, {0xa, 0x4e20, 0x2, @loopback, 0x9d20}, r2}}, 0x38) 15:31:52 executing program 1: r0 = socket$inet6(0xa, 0x3ffffffffffe, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200800, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$xdp(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2c, 0x0, r2, 0x29}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="735f780d28a0105bea509ed621da978a0a2a56f5d4245f6d1544eeb92718bddb4150987eb6e13dfc412d636ccc9e026db9d75436c1741e60e9d1fc80dfa1ba9e210895fb95ac2b5e0ba2fb34b59e2ea325c60b691a4f91b2b958cb4c93c7afd7e251c4dd012d11deb3dde4b4f48f132e67b0d2820f4052c259cb0db4b8fb855c1c49dd96d139fc0d278791951166e30ba4c3054907990b0b135053307e65c2a6d0bd283e81117433084b2e24175c915c8a36f1e23817dfe6e29f8d958b67", 0xbe}], 0x1, 0x0, 0x0, 0x20000040}, 0x11) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:52 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000280)="1b920aa3b41541e1e6938184f5dc12592a382d5b639d2d61f44059e9925efbea7f36283b50892f9f9c366a79147623abf9c151c45a5a7254b333cc5f0c75f594e1bad98bcc10d81c7f526ec444c31a7d4d9be2da0d96db2b883d8e2d3f855df236cc8811b0de9d0d475d4ffa73c21abf1dcd0457e51ee86304e5c321feb593416851965c9059235eb3a6f2d0bfa9062343b73a7210a6db0b74c6cd41e808543a6325be315ec2f64d4c64176b906fe4d3cc958c3a5ad4018d7b750b7540f984e2a3441418135eb2337766b5049e1c3e56edb62ffb11ad6f8b9f979c18bd32e5431ee8796d5c47", 0xe6, 0x8880, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x149) [ 2560.998974] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2561.031473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2561.051120] IPVS: ftp: loaded support on port[0] = 21 [ 2561.104204] device bridge_slave_1 left promiscuous mode [ 2561.109643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2561.119352] device bridge_slave_0 left promiscuous mode [ 2561.124754] bridge0: port 1(bridge_slave_0) entered disabled state [ 2561.138468] team0 (unregistering): Port device team_slave_1 removed [ 2561.145444] team0 (unregistering): Port device team_slave_0 removed [ 2561.152448] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2561.166646] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2561.180878] bond0 (unregistering): Released all slaves [ 2561.214205] bridge0: port 1(bridge_slave_0) entered blocking state [ 2561.220574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2561.227091] device bridge_slave_0 entered promiscuous mode [ 2561.236603] bridge0: port 2(bridge_slave_1) entered blocking state [ 2561.242945] bridge0: port 2(bridge_slave_1) entered disabled state [ 2561.249412] device bridge_slave_1 entered promiscuous mode [ 2561.258397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2561.269285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2561.286018] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2561.297006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2561.318904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2561.325691] team0: Port device team_slave_0 added [ 2561.333885] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2561.340676] team0: Port device team_slave_1 added [ 2561.348855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2561.359248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2561.369429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2561.376476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2561.383931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2561.391748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2561.398718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2561.407077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2561.442721] bridge0: port 2(bridge_slave_1) entered blocking state [ 2561.449064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2561.455562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2561.461889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2561.468525] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2561.586680] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2561.592782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2561.609550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2561.626333] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2561.632523] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2561.639218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2561.645870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2561.661379] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2561.667454] 8021q: adding VLAN 0 to HW filter on device team0 [ 2561.739708] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2561.750578] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2561.755711] CPU: 1 PID: 28509 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2561.762978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2561.772307] Call Trace: [ 2561.774868] dump_stack+0xae/0xf0 [ 2561.778296] dump_header+0x7b/0x460 [ 2561.781896] ? ___ratelimit+0x139/0x150 [ 2561.785848] oom_kill_process+0xac/0x680 [ 2561.789887] ? out_of_memory+0x44/0x650 [ 2561.793836] out_of_memory+0x4af/0x650 [ 2561.797696] ? _cond_resched+0x17/0x60 [ 2561.801557] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2561.806546] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2561.811709] pagefault_out_of_memory+0x4f/0xa0 [ 2561.816266] mm_fault_error+0xec/0x270 [ 2561.820132] __do_page_fault+0x4ec/0x630 [ 2561.824175] ? __sys_socket+0x9f/0x160 [ 2561.828080] ? page_fault+0x8/0x30 [ 2561.831615] do_page_fault+0x37/0x160 [ 2561.835400] ? page_fault+0x8/0x30 [ 2561.838920] page_fault+0x1e/0x30 [ 2561.842347] RIP: 0033:0x43e461 [ 2561.845555] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2561.864579] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2561.869920] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2561.877166] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2561.884428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2561.891694] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2561.898946] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2561.906296] Task in /syz2 killed as a result of limit of /syz2 [ 2561.912289] memory: usage 1572kB, limit 0kB, failcnt 13144 [ 2561.917896] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2561.924640] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:53 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x105000) semget(0x2, 0x3, 0xb4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) semget(0x0, 0x2, 0x200) msgget$private(0x0, 0x6) r2 = fcntl$getown(r0, 0x9) write$cgroup_pid(r0, &(0x7f0000000200)=r2, 0x12) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 15:31:53 executing program 2: prctl$intptr(0xf, 0xfffffffffffffff8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40003e, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x8000, 0x4, 0x8, 0x100000001}) 15:31:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="40f2670853c132ca17e3002d4947a41e3dac102fcc78e52c5973ca7ad175", 0x1e, 0x8004, &(0x7f0000000040)={0xa, 0x4e20, 0x859, @loopback, 0x705}, 0x1c) 15:31:53 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x10200000088) 15:31:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:53 executing program 1: timerfd_create(0x6, 0x800) r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x2, 0x10}, 0x0, 0x6e6bbf, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580), 0x0, 0x10000}}], 0x1, 0x0) 15:31:53 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10102) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x9, 0x4) read(r0, &(0x7f00000000c0)=""/113, 0x71) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) sendto$inet6(r1, &(0x7f0000000140)="d7", 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x40004e23, 0x0, @loopback}, 0x1c) 15:31:53 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) [ 2561.930769] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2561.950402] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2561.959022] [28509] 0 28509 17553 8389 118784 0 0 syz-executor2 [ 2561.967865] Memory cgroup out of memory: Kill process 28509 (syz-executor2) score 8418000 or sacrifice child [ 2561.977829] Killed process 28509 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:53 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:53 executing program 0: mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000340), 0x4) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0//ile0\x00', &(0x7f0000000200)='exofs\x00', 0x40800, &(0x7f0000000280)="35ad916a8d81122968fe68dd728db83bff69dc814ab2290d27fa37db13a357be") openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimensat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) prctl$setptracer(0x59616d61, r2) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0xa95, 0x44a000) 15:31:53 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x4, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x4) r1 = dup(r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0xfffffffffffffff7) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x4, @local, 0x2aa9}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @rand_addr}, @in6={0xa, 0x4e24, 0x8001, @local, 0x80000000}, @in={0x2, 0x4e20, @local}], 0x68) 15:31:53 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73797a317e7db83b168002f5f6baac1cfb92a79ee61d0d0af287c82ebc666360507470456dd0e717d4d1031144ef2c8f75f41143d62e3f3f45fadd4c39071960"], 0x3a) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:53 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x90300) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r0, 0x8}) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:53 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0xd, 0x400, 0x7, 0x20, 0x2000000096e}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={r1, 0xb5, "0daf7c44d605a107d4a091a272938c732c2aee95b0bc37d8f373882f970372ef4744e654192efacbb20ce532c02d29da065089c9cef2771d0e3b26294d864544ff87c1ef1e9019b711d81aa81baf52aec6f09ea9fa9f68199d7624de9aac9cd042b954a818fb3cdd5591594beb030d68e978c2f7a57786c69b13b0696b5435d7a2f806df37a10b2ba4685df2d9de45d6d6117a9671a47bcd6e07f5f31c0b0704e5afb3b2018819e7aea76446380e9928c8317abbdf"}, &(0x7f0000000080)=0xbd) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004440)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000004480)={@empty, @local, @remote, 0x1, 0x8, 0x5, 0x100, 0x3f, 0x44000000, r3}) 15:31:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)='+', 0x1}], 0x1, &(0x7f0000000140), 0x0, 0x4}, 0xc100) r4 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000780)="562d3f3bcdaa4b85d0eca2c89f7f795eb5fbbb654372bb243376a9e419d8708905053fd46072d540e2402760cf248192a7eda37e6a5f40a1447c40d6a7bbf0ea2cb1a35b58fd81413f734c4ad666b38cc8770a2bd24d4e6ed543a10b4a393727ce2b84f64f49f1cf121531264ff9e43275ea6be89bf6ff49706314deb23f3caf51e388c3eb63b877cb376db5a0c701db23a0d044dd332838", 0x98, 0xfffffffffffffffa) stat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0x0]) keyctl$chown(0x4, r4, r5, r6) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000840)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0c3bb7ad55fbe3b25fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da48ec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35fdc8d11badab97c50a244dd84b35563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701b5c5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e2313e945b835655b5930b0fa8abc59fd9fc5e0a2d050ea91a93b2dbcdeea8fdfdb5574b8648c46c08a13a909f4f91bf2e0975f8cec686185eb12f446fd958194716f0da1ea9549f18fcba6d154fc95f0c64db22aebce36df3dc31b274f1024de42813da35c41600090e8b4e93348dc8a42ec4f6ed26cc36f5258655254a479d238dd3394431a70a263a26a1e34ae1345078275e31393dff5a170c422e6938b32a7fda09282aa2d545b702c4b5cf2ce88c6d50129ad9081ac3036440f33d2b5fa9e248b0187bd79679926c5555d9483125655564ec5c9919bd1307982cfe74706bb6c6c219e143d68686f2f8804ec23d2967e9f81bb8c69aa0ff3c9f681560eaaaeae1fac89d3dcc5c92d1480b5b43b8338ee4630868a68320204ed4dc52fdb620ab91ab3aef66931fcb7e1da77c8b0334ddc0efa540d307eabe7a7af631e72226b81871b74166eab403422e844f3a1d211be421f54be188a1ed4849dd6b8be9db13aa8c8f9b9a56a64303ff8f008b4ca0a0c18f8752f7cf95beb5a3893fa3ba49d0d34924056b7a183761ad05e77435de543c7c575b71641600c2c8f8fcfc96a66807e66a71ac1315e70e6a98fecd7593daab479f1b062c6fffe9c12157f2ce20b299140686320cee60325b0dab1b5632e6ee918ffef0080feb3a3b15b598dc7619d6edc9bbb92a24ef4f06ec22f449d556e35ab2fa220103604e1cc2e4eb026357cdc22cdcf5133e22e6af81efa47db92622c633240257bfff77801cf2322587f187b7b36d1967161688a3188e36c1429170d13ada468c75e4f23366d41f6bc3e2f7a5fc7d8278a87ff8e166ed44b98c12ce910f042bee601cbb6fd5bb1bb700fe3fa80be6a1d4fb61441c4e6fb04dc7819e44b4fa692ec1de27fe7901f7ec47c85bcef060ce95fab9a9f69fa67bd0430c646c9b3d869fd13d6e1a09eff9c700100af710e314deb162ef461adf64117c227738af13c0cd8b1d723dcdf93522288236c2921281c4d5316c28e679d291f87d041dd3b70654154247886db8f8eedd1e1d13fd17e06dac7506139f7f1371257313464d71cf4c506a4c23789c9cfe132d063d13793f91aad26b0b730ce1f24f56c140f5d99774f594db4f217265a24a915f97f15a2fc27f306e47ae186df3231ddbbb3df43272738aea556dea2da6394d07c97e2cff7612b77abd124950c5506252bd7f903ba383f3c107564ab7a5e4443eba9c4aed2ebd203f29879b22d2c8a86bdeb1d75a71b943e3492c0177c468a6f82154706876d63e693b3356c2e791989b53a9beeb499c2ca0cc2d47cefd9784634f20ae8fa51410677b4b25c42bcc473193990e3b6eb5395fee36eed53c2ceed9113e79f09117ccdddef227c05c8ba8bede7ecab4b98b7a0656a78e0bdd0ca3193ecdee18705cb970753f387a6a160500716aa58f953516038e6eb40383938360bc8e3c8914f02e5ad55887ebbc40440d54c08f5b1ec5b61a4399bb3c701b14b6191e28383a163562d0f4d9af74e0df0664d70b322864684d51bd0359e75e8f6533d10ca7d87a01366e28263375e3c9071842d53009911ac9e65b1202a435ae1a3ef1fdce8e869528f0a3929353837b5114588ced2de5dbf67df9645444c3a8e23215d1f4255a294d099c1de6f79e4626b00020e3884bae9e1dd1f2d12f46374a92209b7c63b4573c52bddac9a9b8e810a1d863860e85c41b5b074064a0856483c9aae603e117e8d8af45eb2c544f2854cf4a5c31723f5c81c83810e9ae748a11b0d66b127d154a7a77253d78b5870332cfbaae3114e4c954bdfbcf09b7c8201ee07b31b0cfa02c36e6934d756662d9ae4010afb8bb9c28cd7ea62602f92e8e120689f2b7ed5588583cd55e807dec33fb2ffbb020b53e341929e748eee1cc693ccf5dc5e840458865554742322aebc04eb82d74769db2074193a530e85d0fde2e4325fcbce50f41212710f43d155fc79af2981898282ec2acc37a0ac77e8d7dcd40adbbd384a31b56faa008f512010567313c0e9161d1f3a400eda66a3090052cbb0d48159899f34993f2f5fbeec671c6cc9e516ecd6ab03e6b698e47ca4d4050564825fd94dfaeec1efc8daebc4ce69aa009c7a47047985456371eb4e86a50b0f220bee72817bfbd7883cdfcab1868e429526ed9a56653207a8ea835c58833e9f33da0e32a2f436b44b496fe07f133c54521f1f992554bfadcba0140c0886a07bf9666728e91dd5c80d14ebc43575beeffbad13b9d10f572c91e04307d7ebea9485251b304f6dceaa774dd6b1d664906c419559e43426e2ead10c067224936a5a7300920c6e1cf6c1223005fbe132a11b80e60000000000000000", 0xbd0}], 0x1) write$P9_RLINK(r7, &(0x7f0000000400)={0x7, 0x47, 0x2}, 0x7) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x410000, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000500)={@dev, @remote, 0x0}, &(0x7f0000001540)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f00000006c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="e80100001c0000092abd7000fcdbdf25ff000000e4000600ac1414bb000000000000000000000000ac1414100000000000000000000000004e2100064e240005020080803a000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="00000000000000000000000000000000000004d2ff000000fe8000000000000000000000000000bb0400000000000000040000000000000005000000000000002f5300000000000002000000000000000200000000000000ffffffffffffffff07000000000000001f000000000000000010000000000000ff00000000000000ffffffff0000000000010000000100000200000029bd700006350000000003032000000000000000f0001200726663343130362d67636d2d6165736e6900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001805000000000000b2dabb61e6f1541805cadbf9fdc45956e2c7317af7f0b7733da9adc4836b1b0bca5d2d2bbc87d5924bf816c5145caa31f83532d919ac0b4553aa8bbe1d5cc7ba9f93ae3d4c987c719161f21def66334f783146c6da2851301b64617c8ca2dde2491d6084e79d9bde77b4424e9ca6b37a5bb8af5abdc7b6d38c49f9b1d4608dae8e877562bec0a1ae564d41b396020000003e4e984450e92baa9bacbfc0981baa8b4e0965704379002229f04a545069fd1de20d5203927bec576fe33b8292a3f641266f1668acadb0b4fef51bd8aa16dff4e754b44874fb908899b03876f1cb0839646b92b12e8c"], 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x1) [ 2562.068670] IPVS: ftp: loaded support on port[0] = 21 [ 2562.093201] device bridge_slave_1 left promiscuous mode [ 2562.098636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2562.109313] device bridge_slave_0 left promiscuous mode [ 2562.114759] bridge0: port 1(bridge_slave_0) entered disabled state [ 2562.128458] team0 (unregistering): Port device team_slave_1 removed [ 2562.135278] team0 (unregistering): Port device team_slave_0 removed [ 2562.142046] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2562.155616] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2562.170863] bond0 (unregistering): Released all slaves [ 2562.227577] bridge0: port 1(bridge_slave_0) entered blocking state [ 2562.233938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2562.240416] device bridge_slave_0 entered promiscuous mode [ 2562.249472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2562.255807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2562.262260] device bridge_slave_1 entered promiscuous mode [ 2562.271673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2562.281719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2562.297938] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2562.309135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2562.331368] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2562.338192] team0: Port device team_slave_0 added [ 2562.346272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2562.353021] team0: Port device team_slave_1 added [ 2562.361310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2562.368993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2562.379290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2562.386250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2562.393814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2562.401629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2562.408589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2562.416044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2562.452639] bridge0: port 2(bridge_slave_1) entered blocking state [ 2562.458994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2562.465505] bridge0: port 1(bridge_slave_0) entered blocking state [ 2562.471816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2562.478501] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2562.600137] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2562.606241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2562.623426] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2562.640343] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2562.646480] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2562.653130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2562.659848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2562.675065] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2562.681152] 8021q: adding VLAN 0 to HW filter on device team0 [ 2562.754720] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2562.765580] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2562.770720] CPU: 1 PID: 28821 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2562.777999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2562.787328] Call Trace: [ 2562.789887] dump_stack+0xae/0xf0 [ 2562.793313] dump_header+0x7b/0x460 [ 2562.796912] ? ___ratelimit+0x139/0x150 [ 2562.800856] oom_kill_process+0xac/0x680 [ 2562.804885] ? out_of_memory+0x44/0x650 [ 2562.808827] out_of_memory+0x4af/0x650 [ 2562.812684] ? _cond_resched+0x17/0x60 [ 2562.816542] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2562.821528] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2562.826687] pagefault_out_of_memory+0x4f/0xa0 [ 2562.831238] mm_fault_error+0xec/0x270 [ 2562.835094] __do_page_fault+0x4ec/0x630 [ 2562.839127] ? __sys_socket+0x9f/0x160 [ 2562.842985] ? page_fault+0x8/0x30 [ 2562.846508] do_page_fault+0x37/0x160 [ 2562.850280] ? page_fault+0x8/0x30 [ 2562.853797] page_fault+0x1e/0x30 [ 2562.857220] RIP: 0033:0x43e461 [ 2562.860376] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2562.879365] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2562.884699] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2562.891936] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2562.899176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2562.906415] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2562.913656] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2562.920920] Task in /syz2 killed as a result of limit of /syz2 [ 2562.926892] memory: usage 1572kB, limit 0kB, failcnt 13152 [ 2562.932495] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2562.939228] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x2, 0x4) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x0, 0x1, {0xa, 0x4e23, 0xfffffffffffff800, @dev={0xfe, 0x80, [], 0x1d}, 0x40000000000}}}, 0x32) dup2(r1, r0) 15:31:54 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x8) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioprio_set$uid(0x3, r2, 0x7a2f) getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000a00)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000a40)=0x0) write$cgroup_pid(r1, &(0x7f00000009c0)=r3, 0x12) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=""/100, 0x64) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) r5 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000740)=0x0) getgroups(0x1, &(0x7f0000000780)=[0x0]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000007c0)=0x0) getresgid(&(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000008c0)=0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000030c0)=0x1, 0x4) stat(&(0x7f0000000900)='./file0//ile0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000003140)=[{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000480)="d4a50c06e3aec1a0db4edc8f4b12510870d0900bf9e51764572ea40cbc0bba27dbc82257af8dc63bb2ae021879a22a9cec4353ed01f3874755912a1b1a99c13b1c19cfbce1949c40f8af313ac60ce7524d0310e991d7b7118f57b10d33dd5d7fa8b7c6415bcecfec54b9fb75bb9069db53479d4bd9955fbb4962534d4a4565e60d36139139ac4e20f485987f633c1a4fa0f74dd58b358fea10cab20a1572fa6d1126fa067cc5d0cb65308d8272831b64171301e5e9ae251aa01bf5c63cbe468b754dade01a0586c1816fdd7f66c21c60063a032c5394c4d088e1df7cac48c5dd3de938a4", 0xe4}], 0x1, &(0x7f0000000580)=[@cred={0x20, 0x1, 0x2, r4, r2, r5}, @rights={0x38, 0x1, 0x1, [r1, r0, r0, r0, r0, r0, r1, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r0, r1, r1, r1]}], 0x88, 0x4}, {&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000006c0)="c746f77716da845c645d829c594270e9ce31abfceec90bf3cbd8ff7d0bff25efb74b3d4eb2648e3caba05fbcc70b5e2c6345b76f0799bbdc80032c1eb80d2ec5e37697f905a777b00ae4", 0x4a}, {&(0x7f0000000140)="94ed570ef1be997b481ab50ba4f7ce6deef69832c8", 0x15}], 0x2, &(0x7f00000032c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000002000000000000000010000000100000039156c90c19a0f587792b718b9bfb408789827d8ac05eb0c384a3eed20d91e65546573b98f26877a5ffcfeb5d3984f41cb7a2e8a3b0300ed37feba6b2f6ac27d10ca13dd14b85b56783ccd8129e22b30a7e1000000000000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x10}, {&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="4d161af7001f5d9ab37a8ce9653cc3d4812dc62f70b62ad4d220623a96c1ffd901218e5bcc0a24eaef4b19", 0x2b}, {&(0x7f0000001bc0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4041}, {&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002c80)="25e460d81208ba8e80a297341b06adabc7194c6a7290157d5aeab26bbb21745926b2b6404838c840f9bf9be550440f49e0450e691bc900b02a0a49408a1bed527cff0b2e5eec", 0x46}, {&(0x7f0000002d00)="272590b9ea74e1d98e8d0521e4076128def4a4ee98036ea7d6816f9c6e1fc066bad398bd57227456db9e298b421ccf478b56d08eedfd61a417fc4b1b85f08484801c9a63cc4b4f", 0x47}, {&(0x7f0000002d80)="f33a6d52b01a990a9cc3a58608a6d8390c1f6e46a0c202db366fbbb83d11ad8eda8a6efc6c0437c16c087c18ddf89bcaf3a3de69c6283235b464a51da527701425ea27", 0x43}], 0x3}, {&(0x7f0000002e40)=@file={0x0, './file0//ile0\x00'}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002ec0)="5917f9a53d9f97e3f8ba5e6c69841a39a4591ef05d047043b5d0391fbe44047989fac7581fea6eeded369f31d09fb21206d4a90ecb1eeca07f663226612580e5fafe78b8dc42a1cb3abf158a6f9baeddf16625dc0e618c647f3c120135d5d4c7166bc503594f3fb0d51cf9fa709e37f71f34593a9bae7d4cfd863928d313f84d383d461c744e9e2004d58645", 0x8c}], 0x1, &(0x7f0000002fc0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r0, r1, r1, r0]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x70, 0x40004}, {&(0x7f0000003040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000030c0), 0x0, &(0x7f0000003100), 0x0, 0x80}], 0x6, 0x0) 15:31:54 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/157) mremap(&(0x7f0000bd8000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000d21000/0x2000)=nil) 15:31:54 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:54 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) fcntl$getflags(r0, 0x40b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x18400, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0x7fffffff, @mcast1, 0xfffffffffffffa21}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e22, @rand_addr=0x2}], 0x55e87552) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendfile(r0, r0, &(0x7f0000000000), 0x3) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e24, @rand_addr=0x3}}, 0x4, 0x2, 0x6, "8c503460116ee0d22b7835fba45bd1407b227f25fcc3934db700c55de96485c9280459961b47b15f031daeaaca6724303759e414cc2e7f9c8f98833dd6778049467f21d5bd255745bc7887b886cb52f8"}, 0xd8) sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="d70ce4860d1de373d1a0c745f6af70f5ad609837d36d7a52d0c5aafafb21b52086ae19dc2f97da926d87b5695cd9d24183beead630337ff370801719e039bc940257098aee0c9178", 0x48}], 0x2, &(0x7f0000000440)=[@op={0x18}], 0x18, 0x81}, 0x0) accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000400)) 15:31:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc8070031") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x45a25576, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x105000) semget(0x2, 0x3, 0xb4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) semget(0x0, 0x2, 0x200) msgget$private(0x0, 0x6) r2 = fcntl$getown(r0, 0x9) write$cgroup_pid(r0, &(0x7f0000000200)=r2, 0x12) r3 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) [ 2562.945353] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2562.964970] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2562.973571] [28821] 0 28821 17553 8390 114688 0 0 syz-executor2 [ 2562.982394] Memory cgroup out of memory: Kill process 28821 (syz-executor2) score 8418000 or sacrifice child [ 2562.992352] Killed process 28821 (syz-executor2) total-vm:70212kB, anon-rss:72kB, file-rss:33488kB, shmem-rss:0kB 15:31:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc8070031") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x45c000) sendto$inet6(r0, &(0x7f0000000340)="1cfd96a6b95692fb74d4c25eb5e2a2533862954e400f922277219267abe2f74f8eb1d9b33d93e386f2f0545f350af91ce6d92645d64b3c9076167857e4841438b9ab613e32411a26b52af51fd542f97cf2a43582e8db82eb3db07c88d468b25daaff4b5fbbc6ca16b3494f8ec46e0f05a85e9ef6cab212347cc6b2a00288f3146cc80254092d5a3352580f268d8b07fb6dba7ef377cfd3eac8b602870fb256e87599c71bff89bd524e2227c49abbee34b8873dfec9b956e06f325b469875f32c776627ec8800fed3f238478151b9cdfa81b5c0d149678a30bd0d0d9ea80ccef813871665ffa4df3f1ef752", 0xeb, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x2e, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0xc46) bind(r0, &(0x7f0000000100)=@ethernet={0x306, @local}, 0x80) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') 15:31:54 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:54 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x3) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:54 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x3, 0x1}, {0x4, 0x6}, {0x8, 0x8}], 0x3) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x10, r1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x11, &(0x7f0000b45000/0x2000)=nil) ioctl$sock_bt(r1, 0x0, &(0x7f0000000240)="12e1ac376349c1444504cd4b92e5ba86606a80c10b418f98e6742b0f4e20f25b2bf1d1dce3ab54bf46b89eeb2c8968a673cfdc1340249a07f04d52952e685bac107d9ee25e79249e142b0db026ff600e26456026fb1c7c7f65c5a7a7ae153a99c4e3b047ea9c30dfb9e2c537f3258415a09ba16b8486ef96311f") r2 = semget$private(0x0, 0x3, 0x88) semctl$IPC_INFO(r2, 0x7, 0x3, &(0x7f00000000c0)=""/43) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/194, 0xc2}, &(0x7f0000000000), 0x20}, 0x20) 15:31:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="86ed75bcda7cfc045e8541bc970d5c7f40b814fa6ffea4291aa694dae087da88a52f9d648e0283df49404df0c0a8c04d4c99321d43ceb1aec6ab5f979ecaaba62acc27d1ee3a9a6af9fa16f04fabe3fc88d54e711960d291769350a1d654a9e530d350b3bb5f89b93f3bc007835ec61692b628bef0ae3913fac9bebb4c4f9ac171c524fb340827d17e804a7cbfc1c3ea3bac30955da5fc16287953f9d70f", 0x9e, 0x20000005, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @loopback, 0x5}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:54 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0xffffffffffffffff, 0x3, 0x8, 0x3, 0x7af6}, 0x3, 0x10001, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0x0, 0x6, 0x1000}) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc8070031") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:54 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x80000000, @loopback, 0xfffffffffffffffe}}, 0x200, 0x1}, 0x90) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000003c0)={0x1, 0x5, 0x9, 0x2f}) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000340), &(0x7f0000000380)=0x4) [ 2563.031959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2563.053114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2563.111200] device bridge_slave_1 left promiscuous mode [ 2563.116613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2563.126305] device bridge_slave_0 left promiscuous mode [ 2563.131697] bridge0: port 1(bridge_slave_0) entered disabled state [ 2563.145491] team0 (unregistering): Port device team_slave_1 removed [ 2563.152403] team0 (unregistering): Port device team_slave_0 removed [ 2563.159185] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2563.173587] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2563.188866] bond0 (unregistering): Released all slaves [ 2563.263737] IPVS: ftp: loaded support on port[0] = 21 [ 2563.315923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2563.322373] bridge0: port 1(bridge_slave_0) entered disabled state [ 2563.328855] device bridge_slave_0 entered promiscuous mode [ 2563.337938] bridge0: port 2(bridge_slave_1) entered blocking state [ 2563.344266] bridge0: port 2(bridge_slave_1) entered disabled state [ 2563.350729] device bridge_slave_1 entered promiscuous mode [ 2563.359568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2563.369454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2563.385198] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2563.395620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2563.417541] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2563.424339] team0: Port device team_slave_0 added [ 2563.432416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2563.439238] team0: Port device team_slave_1 added [ 2563.447391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2563.457689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2563.468120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2563.478836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2563.516218] bridge0: port 2(bridge_slave_1) entered blocking state [ 2563.522557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2563.529052] bridge0: port 1(bridge_slave_0) entered blocking state [ 2563.535359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2563.650958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2563.667305] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2563.683739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2563.700586] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2563.706679] 8021q: adding VLAN 0 to HW filter on device team0 [ 2563.778720] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2563.789593] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2563.794706] CPU: 0 PID: 29141 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2563.801956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2563.811281] Call Trace: [ 2563.813841] dump_stack+0xae/0xf0 [ 2563.817277] dump_header+0x7b/0x460 [ 2563.820875] ? ___ratelimit+0x139/0x150 [ 2563.824817] oom_kill_process+0xac/0x680 [ 2563.828847] ? out_of_memory+0x44/0x650 [ 2563.832789] out_of_memory+0x4af/0x650 [ 2563.836667] ? _cond_resched+0x17/0x60 [ 2563.840525] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2563.845533] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2563.850695] pagefault_out_of_memory+0x4f/0xa0 [ 2563.855247] mm_fault_error+0xec/0x270 [ 2563.859138] __do_page_fault+0x4ec/0x630 [ 2563.863197] ? __sys_socket+0x9f/0x160 [ 2563.867059] ? page_fault+0x8/0x30 [ 2563.870569] do_page_fault+0x37/0x160 [ 2563.874352] ? page_fault+0x8/0x30 [ 2563.877864] page_fault+0x1e/0x30 [ 2563.881287] RIP: 0033:0x43e461 [ 2563.884461] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2563.903453] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2563.908805] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2563.916071] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2563.923330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2563.930574] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2563.937817] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2563.945165] Task in /syz2 killed as a result of limit of /syz2 [ 2563.951149] memory: usage 1572kB, limit 0kB, failcnt 13160 [ 2563.956766] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2563.963506] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:55 executing program 6: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:55 executing program 7: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f8571") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="f9fdd8d3b763c7a7596dd333dc517f12091955320bde2001d8d73b537024ab76e4f554de59875762f36f4a831608d2d8718cc662a0c95c96", 0x38, 0x4000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7f, &(0x7f0000000040)=0x80, 0x4) 15:31:55 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r2}) 15:31:55 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) r1 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000100)='cpu.weight\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_GETXATTR(r0, &(0x7f0000000140)={0x18, 0x0, 0x8, {0x8}}, 0x18) r3 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x3) pwritev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='b', 0x1}], 0x1, 0x0) 15:31:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x5, 0x10040) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000380)) getsockopt$inet6_int(r0, 0x29, 0x5a, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x4e20, 0x94, @loopback, 0x1000003}}}, 0x88) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7fff, 0x200000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000300)=0x7, 0x4) 15:31:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) unshare(0x20400) fstatfs(r0, &(0x7f00000000c0)=""/155) ioctl$sock_bt(r0, 0x541b, &(0x7f00000000c0)) [ 2563.969636] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2563.989252] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2563.997853] [29141] 0 29141 17553 8388 114688 0 0 syz-executor2 [ 2564.006680] Memory cgroup out of memory: Kill process 29141 (syz-executor2) score 8416000 or sacrifice child [ 2564.016678] Killed process 29141 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:31:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x80002) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f8571") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x8000b, 0x2) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) select(0x40, &(0x7f0000000000)={0xfff, 0x9, 0x3, 0x5, 0x400, 0x0, 0x0, 0x46bf40ec}, &(0x7f0000000040)={0x1, 0x7f26, 0x1, 0x4, 0x5, 0xfff, 0x3f, 0x8000}, &(0x7f0000000080)={0x6, 0x80000000, 0x0, 0x8000, 0x4, 0x5, 0x7ff, 0x8}, &(0x7f00000000c0)={0x0, 0x2710}) 15:31:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) setresuid(r4, r5, r6) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r7) 15:31:55 executing program 7: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='&(\x00', 0xffffffffffffff9c}, 0x10) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/122) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:55 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1f, 0x5, 0x8000, 0x8, 0x9, 0x80000000, 0x0, 0x7, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r1, 0x80}, 0x8) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x7, 0x8000) open(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x60) 15:31:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f8571") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f8571") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:55 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) [ 2564.057282] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2564.072498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2564.104633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2564.117284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2564.132956] IPVS: ftp: loaded support on port[0] = 21 [ 2564.172239] device bridge_slave_1 left promiscuous mode [ 2564.177695] bridge0: port 2(bridge_slave_1) entered disabled state [ 2564.188309] device bridge_slave_0 left promiscuous mode [ 2564.193706] bridge0: port 1(bridge_slave_0) entered disabled state [ 2564.205495] team0 (unregistering): Port device team_slave_1 removed [ 2564.212368] team0 (unregistering): Port device team_slave_0 removed [ 2564.219133] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2564.230628] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2564.248859] bond0 (unregistering): Released all slaves [ 2564.285927] bridge0: port 1(bridge_slave_0) entered blocking state [ 2564.292284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2564.298720] device bridge_slave_0 entered promiscuous mode [ 2564.307737] bridge0: port 2(bridge_slave_1) entered blocking state [ 2564.314054] bridge0: port 2(bridge_slave_1) entered disabled state [ 2564.320597] device bridge_slave_1 entered promiscuous mode [ 2564.329414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2564.340515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2564.356778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2564.367370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2564.388715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2564.395465] team0: Port device team_slave_0 added [ 2564.403512] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2564.410265] team0: Port device team_slave_1 added [ 2564.418336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2564.428533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2564.438711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2564.445712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2564.453319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2564.461698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2564.468619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2564.476287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2564.510825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2564.517176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2564.523701] bridge0: port 1(bridge_slave_0) entered blocking state [ 2564.530037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2564.536687] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2564.654985] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2564.661072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2564.677779] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2564.694289] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2564.700375] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2564.707018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2564.713684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2564.728854] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2564.734923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2564.804725] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2564.815585] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2564.820683] CPU: 1 PID: 29455 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2564.827933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2564.837260] Call Trace: [ 2564.839825] dump_stack+0xae/0xf0 [ 2564.843249] dump_header+0x7b/0x460 [ 2564.846896] ? ___ratelimit+0x139/0x150 [ 2564.850852] oom_kill_process+0xac/0x680 [ 2564.854882] ? out_of_memory+0x44/0x650 [ 2564.858824] out_of_memory+0x4af/0x650 [ 2564.862684] ? _cond_resched+0x17/0x60 [ 2564.866560] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2564.871551] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2564.876714] pagefault_out_of_memory+0x4f/0xa0 [ 2564.881277] mm_fault_error+0xec/0x270 [ 2564.885139] __do_page_fault+0x4ec/0x630 [ 2564.889181] ? __sys_socket+0x9f/0x160 [ 2564.893038] ? page_fault+0x8/0x30 [ 2564.896550] do_page_fault+0x37/0x160 [ 2564.900321] ? page_fault+0x8/0x30 [ 2564.903831] page_fault+0x1e/0x30 [ 2564.907252] RIP: 0033:0x43e461 [ 2564.910409] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2564.929400] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2564.934752] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2564.941993] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2564.949236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2564.956490] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2564.963749] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2564.971078] Task in /syz2 killed as a result of limit of /syz2 [ 2564.977047] memory: usage 1572kB, limit 0kB, failcnt 13168 [ 2564.982659] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2564.989397] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:56 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x476a6be24c2352d7}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r2 = eventfd(0x0) r3 = dup3(r0, r2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000280)=0xfffffffffffffffd) 15:31:56 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) ptrace$poke(0xffffffffffffffff, r2, &(0x7f0000000080), 0x1) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x10, 0x1, 0x8}, &(0x7f0000000140)=0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0}, &(0x7f0000000f80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002e40)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000010c0)=0xffffffffffffff2a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0}, &(0x7f0000001140)=0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000002c80)={0x1, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e24, @local}}}, 0x108) getresuid(&(0x7f0000002a00)=0x0, &(0x7f0000002a40), &(0x7f0000002a80)) stat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r4, &(0x7f0000002c00)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x250000}, 0xc, &(0x7f0000002980)=[{&(0x7f0000000280)={0x18, 0x2a, 0x10, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x63, @fd=r0}]}, 0x18}, {&(0x7f00000002c0)={0x43c, 0x17, 0x14, 0x70bd2a, 0x25dfdbfc, "", [@generic, @generic="dd21d1c687784bdb23d19cbb05ce55fc16b8ab8ea223ebea639e23e624ffcd99b0b738c08c4fbd72ff20e8d54d881e9402e9584b4c1a8887ffa243c859a6070b31d53c9006c4785447537bc7914f1e4b1f84a50bb409ac7c1af4b0526a283860508b97bf116b9086f54cc5cf1663ab3066cb9ed5dabf0c3864f07829dd1bd6a3a0d4d9a5ca1c60a2352d98f65218493d367e05295a46cf9f11770e7ae756fad22a01e2446c9f8228188d8449d1f2231e83d05673e364484b387d13f0bfe5d5f59639e2f7a65a09ab8bde3ea73da6fd12b4", @nested={0xb0, 0x13, [@generic="004e79ab6c21bc7b088160de4a50265377cf2e8d4bd7bb962ceb48ff9da48eca587f532d489634eb522227c0286b144da8331dcd3fc2e7626088d4329174664484c1735a08ef4409dd39901f34d2a512ac0703113c066b9a6e8d819bd41d2f9246d9279871cd9ae4e3b460629c77cb8dd449dc90fe76acc5bc2f8e1db0f558d8fea5bf0c1548447a30c830ecfa63a55ff8320227427e03b2c0feaf9a37e0ee3dccade8742f04bc689c"]}, @typed={0x4, 0x78}, @nested={0x2a4, 0x95, [@generic="52145ce1c78d14ca1f34b7", @typed={0x4, 0x6e}, @generic="ea4908d5cf8616e5da3a6cdaa49fbc710ddc31331d4f222a855f75ea1511a56d05494054dd1a09b822bc47187b039e560269fb24633ff5ecaaabb545fdbd83da3f543fa22d7ace1e1f7e74f29dd67c5c44c4eb85a64790d073712abd859a6119ccf865069a44b67e8ec3c8cbfd262a899c292c8cc3133d6203d8828ccead60d6d2f12b77fc4c440beca74be727321079db2f90f7b8ef9b103b23c6be53cff42235", @typed={0xf4, 0x1, @binary="4cb15da654a2d6c5c0d7e79d1cb2948a1d49c95ec6cbb3df7b3e90017d70aeba1fb63cc6ea42eb5d884f0882255a0cee2fbcc43a9e5e78f9a1b001b460106345547f4d69e857719802ed7b96c147392968cfd834db59d51fa67d32e78995dec7f27000adb3063552b4bab5f979130990359aeaf807d6be24fbd04f7cd58d4b3f3d6457628a9213990ee17c0317b78d7bacd0eac0f5f68e41d730174a376d164a0823104663c0b04a259103e3bd3ed6538f4c03aac17b3d8072c71acb336811789fc0099e63194e528c1d024ad1da4007e4329d77a6383035fadd0b5ae36b18fe862a49c159044724ffa2189394e6c4"}, @generic="33aee3240185d0fb8d46ed7e7b3a0870dd3de5f35a7c99329dbc123b9c275691351e1aafabc60acab4202e3be7663030f6d062d708ba4a15ad1e831945cbe9b1fc15ee", @generic="f86c32bde388f783babc910e172f5deea5666d30437dc0589e2c7df229f56cbadd7c1e43c6ad419dcec7c80b36039c5322593e319723ccbfb5303cae962836390e1c578805c5fffefcc9313d3f2a3cdd1eecb70b98c86603fa582d63b49eeff5609cf647224c6f0ae9b773e34689054c6253292633b19bb735522ce615ead695255ffede885dfb48606c7e37c7119e6705d23c05e1450e7e7de9015e7b7e23067449651bc6d57897094e2ec1dbe62d1cdfa5925058a0eef3"]}]}, 0x43c}, {&(0x7f0000000840)={0x2cc, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x61, @fd=r1}, @nested={0x84, 0x42, [@generic="bdc2e22eec0dc9e34c40eedc9bbd39215b6dccaf1b13a6f2609445b529bea61942f4cedd1ec4f31b33f110b27c19b8c485b729d1e12d2bd9a4753bf56d0d0afbd3d294ffba2d91c41a3af65a385ee697268ed7eae21792b35bbba245deec75f1f626f08185be89179f7ce311b32ebbc004d09bb823dd8d1fa0171bfb0dba82"]}, @nested={0x220, 0x6c, [@typed={0x8, 0x7a, @str='\x00'}, @typed={0x8, 0x91, @ipv4=@remote}, @typed={0x4, 0x1b}, @typed={0x8c, 0x9, @binary="359937554e11922c844ce2d54b8bf08f1732e8f14c7cd253502567f40e24b86927054df7efcabe6eebf7164f21cdab9e1ef8f64662d54a07bef26e1e0df03492ab2798130c59b3dd007f550f9f38fe267c36f60da8cc43fa404a5961f763fa1363e6ebd43d2fab07da22e782e2b57213d31bb6bf85f57b0a8bc702dac72619cf62eec08161"}, @generic="ec848996016aab834d7b60c896b6b1d81cc39e3f1aed813fc6c4f746e54875ddc1688edd688965dfa42d2c40d1ded4e711c89e7207e4a9a4397d2abcd58204da956eeb4ccf1cfff9a7c944fa50e495dc54abe7003aea0c27e0146d011ff965d0f9439fa2ce2253d86fcc0509c6d2d788d22ebe64e4960823854aa7a8625e3cf090eafa1488a4b04a635486ef", @generic="f8307ea41038002adf8577cedf396ec9415e3adddbd755aebdb68958771d237c5925204a423537b782344358f424ea32454f1f5fec55d401d2fab1f9d518ed9ec15b7d68576e1bb7212cf07f5b296ea1bc9249998723d249282f438c7e2596cf9afa19fd516ed0894579179acecbb660dd2ba52a31931d51cea05c30e6cc2da85020f3855f7ad894555c58d95b3150ef16fee0435c02fd1b6d4d8fa74386d324109afa8aea4b353981f34b1f8dd41693fea6b8e1e067d5c1c7692d985dade63480f34e327104f8ede126d2a2e8708cda02e95ea7bad2cfeac6", @typed={0x14, 0x31, @ipv6=@mcast1}]}, @typed={0x8, 0x87, @u32=0x7f}, @typed={0x8, 0x44, @uid=r6}]}, 0x2cc}, {&(0x7f0000000b40)={0x3d8, 0x37, 0x800, 0x70bd29, 0x25dfdbfb, "", [@nested={0x88, 0x8b, [@generic="f40d841eb16c167c2076326ac472645a366c320748e6ab1a230d3e53b4e35faace5315e1cbd8fbc2f2e1f93ea7acdb3c712d7d3a7c48e404ba9110681e1f1a6fa73d705efca315bd1ed099c43721c8b0fcf5396f3d3f800aa9d07603259879ff118c52668227744b2f6158423abffd107f543864e57232dbff33827d6d9fbd490c9d"]}, @generic="834f211fc6a993a80680a424b62aaffa7e1e7220057de433dbb07b3a5d869b389e2164f7c6879ec1a8530fb18b4cb9bed0b0f31506bdbd43509685b1631d42503f99512a7d12ba26983379510b0cca37c92920055e0b987a1be41d049d6debc40b9b5737939bb20050331b07753f6973f9fc98c482b9dbcbec7eede0246e8ae56702610823a5b13adf2b46083fb52c810fa8060c0b7147f26822afbd8bf321672fc0a34aa2", @generic="b40d3f2f4622f41b3aa23d202dbed515fd5a98f3fa86f4579fc43e2adbdb539d56d79ca3eb966583e6d65b0c3e2f85190c239baaaeef0e882bde41662739cd71404f9a2b010bae8ff0c930dd79fae0660d092540c2e0b68a7b42ccd51830d4eb3d2802c2243777d65be32d4cc5f1db27c6574f4480e6107b28276f93148bdd5f0c7005d89337e2cc898e38", @nested={0x210, 0x21, [@typed={0x8, 0x4b, @u32=0x6}, @generic="aa1767d398f7e35ef321fb5afae37fa46a781dfdaa1353917c9d7209c543d640565c50e69e41963b5585cf3bfa70794ec6a48a4d9ac7a45e7f0d71f9b4dde3a3ce4f4e80b7d650435a3c0ff7b82716a1fc52c780992658b6712c16c5f7d8aefe1a28e312a857fd6817767fda6e10989a228be305e057592a88012a6db20174191b1f31", @typed={0x8, 0x8c, @ipv4=@multicast2}, @generic="d19962f7d23fa8f3f77e675a08ddb537f53345014fa57aedb0d0eb1eee41e3d7878bb3bb12d7b7a28c41497b53bdfc5dff6f80fd5ee6804ff405add0403282341bec1801fde689", @generic="7654457ef02450fb33d03f0a17b075d80b81922bfab90940d5bd99bb1b44a39ecf431695a61802726df3f4118efe46c5c296b62208282d6788f25ea17607f9a2a07eb10d2e9ee896901eb09138c5584dee4422ca7179f57db4dd65c834fcfed8deec85bc320d96557e63a18462a1cfa4f6aa18fa25f40ee99fab35e90a6af26f8948c333e1d9c67be785f831f1308d1034c995459ac326c33b493cf2af6867a99ae1e34f010e1c887bca631035f6747f174ed66ffffe822293deddcb296b05a107e10a5f558a577aa06f0243869b5c1a2d25e5fbff1d67b5d790a301f405a2be0f1b641035fe1229c9d3e8d1adcd9f", @typed={0x4, 0x3}, @generic="1ea5cba250bbd697051af24825402d6ba335208b2102348c784f2e3d99f779d888f1c57337839eda8aaad271b236949c8151adc30f05f74c3094", @typed={0x4, 0x5b}]}]}, 0x3d8}, {&(0x7f0000001180)={0x17d0, 0x2d, 0x0, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x86, @str='eth0*\x00'}, @typed={0x8, 0x7f, @uid=r7}, @nested={0x30c, 0x5, [@generic="c426fbd889ad8ea396d677a0d59bf6130c627cdf77483538a2a30a5b3216a6986923426ec19042676d34f5317a3e4e4d03d9692e2026667afd5a2ef8ac5ba751d713c6c8b9b4b2b2221105d3e41627007a5e2f8d0b186a847c2c1fb3fe33c1e1170a212d1359aef70d9adcb18ff4d285d27ed3220960b0df7f964c78c41e699f7de91a64e82163219c7a93feb86c81ac952f8d3f71678959dce36279677561155d8e848aed3628c39b2816cc02544ba014429e298d74da7fe93f08b73d22b5cb9c1392bb4078798d44a53663efbb6ea5fadf462e4aede470de4be5f1d113b67fd84050d3d1b34f738b06b0d0d3d14fe50d7f0b1e023072", @generic="7390afc3d3a3e5d3df39059bd5ce06cc1b7af60686f187e2d78c104e05db91daf842124f9073c7eac7451474460d178f29c78e3fadfb16cdc4c6d16260e75d184cef576f4d37edae0f52398a18d603461e62d9852223395c0bf7b9e941c3e6eca74b6da73cea3cc39a213d7480141f5e0f6fb50c4f495de16d326209cd2e0f5c704cb18e77f419b15b9f4c756651e660a1abce4f75e33fedeb5deb837d7e4ec15f8ffdd5d4378425d38e3376094768f84773ae66878bdf31775537bbd6109dd89ef07f56510f4dbe1ad963ac1aa52139fadf4f423ca713c153bf27e3ad991966a86bef680b9ce393d6bf06d2dea9e3", @typed={0x8, 0x29, @pid=r2}, @generic="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", @typed={0x8, 0x79, @pid=r2}, @generic, @typed={0x14, 0x79, @ipv6=@mcast2}]}, @nested={0x11d4, 0x48, [@generic="e059e4f7ca76cba62e31afccf64ebb6f0746c7753dda5f00df18ff1914498366a6cf2a547ab371ea415ebb0f592390b364e6ecb81e424327646c5aa9165c70ab6837b10198be433f0434f7325ceb048c872504c821c146e3aa231eb292a09fcc77d8823314feb885b180c4b2e1f248823357bc8631662191228ccd53aef4e55ad837", @typed={0x14, 0x8c, @ipv6=@dev={0xfe, 0x80, [], 0x12}}, @typed={0x8, 0x26, @uid=r8}, @generic="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", @generic="2d0395488aaa11d42adcadee113f9f9503686da9fbbfdc65d248a3dcf0d2242e1f4d95db4ddefa21d85543633a3e7b9295976aa41df52ee7b2cb6dc0b75279e7d612e584f1d8214a39b503667d7c4618ad380c2f18ee8a5816728cd55a9a7ace2c80498a6f0c0b0d2592016a682b65963ce9a64ff130300b27701519c65c148864ac24fc7647d3cf2e887dfb0003670ee8e7611cddab4fb6885a4e9dc49983834a3db65897193fdd2f865dd3fb59de1ca7b6e55f2c154fecea5b6fa867ebc776cebcd3", @generic="1e1942e8dfba84b7b80f1eea6e3d85470712bf1cf1719468f68b299ebf023a77db2d111f7731459b889c13ca9948e7d4dad51ab757683a7d4f6e0f5a52aafbcf048d4276c0e0248f8e7ed04259fa5b8e6a77c6b5ecd7887c27d70430", @typed={0x8, 0x8c, @pid=r2}, @typed={0x8, 0x5a, @uid=r9}]}, @nested={0x130, 0x8d, [@generic="950e603e7341641c8b63f4863fab8eee75bb6882e28fc5999096ac93b0b3579773b12bd71c5d2f07a8762ef3be4a7541ee846452c4e1bddc596089f1118d9b02bbe4b9c56e941c897d124739c0e68a9d383d5b19c53541e1911581b733fe5b5e44f7faa0b98772fe7b08d02f2f248b5a6a4355b5b01f81957f0a6e80d549267e01bc49d5fd1a20afac3adfc053da2510b57e0a1a306a94c040af28d0c25963dd427a1eede282c32795ed12600ff98cfb34a8e52ccd3819f021ea5851395b501caf8804fb3d8ec4206b9d8e19370fb50e1963de9896cb210fd445322977535bb53a8de07b23bf78ba47f0b522cf8fa01ec6c42d", @typed={0xc, 0x27, @u64}, @typed={0x14, 0x26, @ipv6=@loopback}, @typed={0x8, 0x85, @ipv4=@loopback}, @typed={0x8, 0x84, @fd=r3}, @typed={0x8, 0x3c, @str='@\x00'}]}, @generic="dffdba922dfcc607d785ef0870ba0fa48e25cd49a8630682d9cdca3db646b566c33216aeb73d2ca24a71498b32b4bf9af703a15712ce782a8bc540850fc69280230e0a3a985a89219753eaa4a6e1508dbc", @generic="47325eafe2ade0464b45edefde34b8dbc1564133f99ddf27f8dbba4b499afec6955bdde6277f317784fcc1a0571c4ae65c69d7a8a2ea8e4458e28706db7c5a00b82522c7eb6b5bbe669aacdd62547c499deec8c42c03d21b1eddd334cff136a4bee04ae6dfd84ce3b59b9ba6cb6768e6676b173d31905d7535a8f29d3cb99c529ca433753e3b6b", @generic="0f3a3d5fcd6a7e78d0f37b63f29f045788cbfffc54e86b14a7222821ab09867893030bb8a501c10506dbd03adcdbb8f9298472eec4d279794c52c8fa26188e326236b083c506ba90579c91390c3d7f1b6241cab7b9555a452ba25db3f32b1af74e5031a496510b6a66ecdbb69d5de23fcd3af75201c8850d9c78a5fba6ae8564bdaaed45e03114e23519939c724eda68cf6b02266e78c14bf47a7154b6a55c3abd4c60cb5232c5f0b921de2220eafef7fa3da9274c790ae7c441ebf7a03e64da77061049"]}, 0x17d0}], 0x5, &(0x7f0000002b80)=[@rights={0x28, 0x1, 0x1, [r1, r3, r3, r3, r3]}, @cred={0x20, 0x1, 0x2, r2, r10, r11}, @rights={0x20, 0x1, 0x1, [r4, r1, r3, r0]}], 0x68, 0x10}, 0xc080) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e21, @rand_addr}}, 0xffff, 0x8, 0x2, 0x100000001, 0x20}, 0x98) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000fc0)={{{@in6=@dev, @in=@rand_addr}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000002c40)=0xe8) 15:31:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f857140") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x200000, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000002c0), &(0x7f0000000340)=0x4) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) bind(r0, &(0x7f0000000240)=@generic={0x5, "e9831e41b1072b714a0c2313e05007aecf9537ec07314eaa5c335b1e6160ce62502566f86d68c88fc89434acc71bdf12b62f15d40d46cf4c0cf0a8055ab094ec570e4ce0645c610e133215acf8f83bc906d72a26150f4280cb73e8c0884194c4b0e057423f130e3bd65f2851dbf5b3ad9f1ef3a6bba80da01c1438d333d8"}, 0x80) r4 = fcntl$getown(r1, 0x9) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40001, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000380)={'security\x00'}, &(0x7f0000000400)=0x54) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x14) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000100)={r5, r0, 0x40}) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) accept$inet6(r0, 0x0, &(0x7f0000000040)) 15:31:56 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x230000, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) ioctl$TCXONC(r1, 0x540a, 0x401) 15:31:56 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0//ile0\x00', 0x1200000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x40000000}) 15:31:56 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1f, 0x5, 0x8000, 0x8, 0x9, 0x80000000, 0x0, 0x7, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r1, 0x80}, 0x8) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x7, 0x8000) open(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x60) 15:31:56 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) [ 2564.995523] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2565.015163] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2565.023773] [29455] 0 29455 17553 8388 110592 0 0 syz-executor2 [ 2565.032600] Memory cgroup out of memory: Kill process 29455 (syz-executor2) score 8415000 or sacrifice child [ 2565.042573] Killed process 29455 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:31:56 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) rt_sigpending(&(0x7f0000000000), 0x8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:31:56 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$unlink(0x16, r0, 0x0) 15:31:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x61, "48708b4600f8815d10cc5e93b404586e8690ddb4ab541f0bc69a77f4f8a1ff0ae178ee0eef99ca4a3f4ecc32fa75ec57330b57b41441c4f9a11f5d8dbb533ddce80c30b40108eeec089099b5d40c77da7e266e32a198cf81d40fad3851f448695b"}, &(0x7f00000000c0)=0x85) 15:31:56 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\\-\x00', 0x2) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x0, 0x0, 0x2}}, 0x14) r1 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:56 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) r1 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='#d', 0x2, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="bdc2583a90ad38b1e52fc54b1474fe9404166995084ccfbb8f89951b640ee75dda29", 0x22, r1) keyctl$invalidate(0x15, r2) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) socket$inet6(0xa, 0x6, 0x3) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x600000000000, @loopback, 0xb297}, {0xa, 0x4e22, 0x80000000, @mcast2, 0x8000}, 0xdf05, [0x8, 0x800, 0xbcb, 0x1ff, 0x7, 0x9, 0x80000000, 0x4]}, 0x5c) 15:31:56 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x4000) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0//ile0\x00', 0x8) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)) mount(&(0x7f00000001c0)='./file0//ile0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='omfs\x00', 0x8000, &(0x7f0000000400)="f47a3d346690f262") getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000005c0), &(0x7f0000000640)=0xa4) 15:31:56 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x8000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:56 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000200)=0x7) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5cb5b18d}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 2565.081649] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2565.093263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2565.133981] IPVS: ftp: loaded support on port[0] = 21 [ 2565.186204] device bridge_slave_1 left promiscuous mode [ 2565.191633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2565.201305] device bridge_slave_0 left promiscuous mode [ 2565.206709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2565.220530] team0 (unregistering): Port device team_slave_1 removed [ 2565.227450] team0 (unregistering): Port device team_slave_0 removed [ 2565.234277] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2565.245670] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2565.258864] bond0 (unregistering): Released all slaves [ 2565.291299] bridge0: port 1(bridge_slave_0) entered blocking state [ 2565.297693] bridge0: port 1(bridge_slave_0) entered disabled state [ 2565.304178] device bridge_slave_0 entered promiscuous mode [ 2565.313543] bridge0: port 2(bridge_slave_1) entered blocking state [ 2565.319866] bridge0: port 2(bridge_slave_1) entered disabled state [ 2565.326326] device bridge_slave_1 entered promiscuous mode [ 2565.335374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2565.346286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2565.363195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2565.374226] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2565.395731] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2565.402595] team0: Port device team_slave_0 added [ 2565.410694] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2565.417524] team0: Port device team_slave_1 added [ 2565.425751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2565.436258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2565.446662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2565.453609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2565.461221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2565.469062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2565.476058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2565.483568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2565.520095] bridge0: port 2(bridge_slave_1) entered blocking state [ 2565.526435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2565.532940] bridge0: port 1(bridge_slave_0) entered blocking state [ 2565.539312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2565.545966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2565.662059] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2565.668176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2565.684781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2565.701460] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2565.707569] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2565.714404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2565.721115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2565.736553] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2565.742666] 8021q: adding VLAN 0 to HW filter on device team0 [ 2565.813706] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2565.824590] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2565.829698] CPU: 0 PID: 29764 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2565.836950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2565.846303] Call Trace: [ 2565.848867] dump_stack+0xae/0xf0 [ 2565.852294] dump_header+0x7b/0x460 [ 2565.855894] ? ___ratelimit+0x139/0x150 [ 2565.859837] oom_kill_process+0xac/0x680 [ 2565.863869] ? out_of_memory+0x44/0x650 [ 2565.867812] out_of_memory+0x4af/0x650 [ 2565.871671] ? _cond_resched+0x17/0x60 [ 2565.875530] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2565.880532] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2565.885691] pagefault_out_of_memory+0x4f/0xa0 [ 2565.890242] mm_fault_error+0xec/0x270 [ 2565.894185] __do_page_fault+0x4ec/0x630 [ 2565.898230] ? __sys_socket+0x9f/0x160 [ 2565.902088] ? page_fault+0x8/0x30 [ 2565.905600] do_page_fault+0x37/0x160 [ 2565.909373] ? page_fault+0x8/0x30 [ 2565.912897] page_fault+0x1e/0x30 [ 2565.916319] RIP: 0033:0x43e461 [ 2565.919478] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2565.938469] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2565.943802] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2565.951062] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2565.958325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2565.965569] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2565.972827] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2565.980185] Task in /syz2 killed as a result of limit of /syz2 [ 2565.986178] memory: usage 1572kB, limit 0kB, failcnt 13176 [ 2565.991815] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2565.998555] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:57 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000), 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x80000001, @mcast2, 0x6}, {0xa, 0x4e21, 0x100, @mcast2, 0x8}, 0x1, [0x1, 0x1e4, 0x3f, 0x7, 0x2, 0x3f, 0x80000000, 0xf628]}, 0x5c) mremap(&(0x7f0000ac5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000c9d000/0x1000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x20, 0x3, 0x8004, 0xa3be, 0x9, 0x4, 0x10000, 0x100000001, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x400, @mcast2, 0x80000001}}}, 0x84) 15:31:57 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_getevents(r1, 0x4, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x77359400}) socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x800000000012, r0, 0x0) 15:31:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x101001) ioctl$KDSETLED(r1, 0x4b32, 0x2) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = memfd_create(&(0x7f0000000000)='em1.\x00', 0x1) getsockopt$inet_buf(r1, 0x0, 0x2d, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f) 15:31:57 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f857140") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:57 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x80000000000c6, &(0x7f0000000100), &(0x7f0000000080)=0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xab, 0x10001) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x9, 0x9, 0xc, 0x1a4, 0x100000000, 0x2, 0x7, 0x5, r2}, 0x20) 15:31:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) write$9p(r1, &(0x7f0000000180), 0xfffffe55) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000380)=r4, 0x12) r5 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3bec0849", @ANYRES16=r6, @ANYBLOB="00002dbd7000fddbdf25040000000800050000800000080004000800000008000500810000002c00020008000500b212000008000b0002000000080002004e24000008000400ffffff7f08000b00000000000800060000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 2566.004691] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2566.024306] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2566.032911] [29764] 0 29764 17553 8389 118784 0 0 syz-executor2 [ 2566.041744] Memory cgroup out of memory: Kill process 29764 (syz-executor2) score 8418000 or sacrifice child [ 2566.051715] Killed process 29764 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:57 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x2}) 15:31:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) inotify_init1(0x80000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x280, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x7fff, 0x0, 0x1ff, 0x0, r2}, &(0x7f0000000100)=0x10) 15:31:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x10001, @local, 0x8}, {0xa, 0x4e24, 0x100000000, @remote, 0x3}, 0x0, [0x3, 0x6, 0x1, 0x100000001, 0x43, 0x100, 0x8, 0x511]}, 0x5c) 15:31:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x20000, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200400, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/152, 0x14000, 0x1000, 0x2}, 0x18) 15:31:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0006c00000000ee00000000e0000002000000000000000000000000"], 0x1c) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:57 executing program 7: r0 = socket$inet(0x2, 0x6, 0x6612) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x80000001, 0x200, 0x4, 0x429, 0x1, 0x10000, 0x7fffffff, r1}, &(0x7f00000001c0)=0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f00005a1000), 0x0, 0x2) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) write$P9_RLCREATE(r3, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x40, 0x0, 0x7}, 0x7}}, 0x18) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000957000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) r4 = socket$unix(0x1, 0x5, 0x0) tee(r2, r4, 0x3, 0x4) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socketpair(0x11, 0x5, 0xbfb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@remote, 0x1a, r3}) ioctl$KDADDIO(r1, 0x4b34, 0x1) 15:31:57 executing program 1: r0 = mq_open(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x1, &(0x7f0000000180)={0x9, 0x6, 0x8b49, 0x3, 0x7, 0x100000001, 0xff, 0x3}) mq_timedsend(r0, &(0x7f00000001c0)="aed282387156", 0x6, 0x9, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x400000000002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x4801) ioctl$TIOCSTI(r2, 0x5412, 0x8) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:57 executing program 7: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10200020008) [ 2566.092434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2566.130651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2566.171256] IPVS: ftp: loaded support on port[0] = 21 [ 2566.195202] device bridge_slave_1 left promiscuous mode [ 2566.200671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.210325] device bridge_slave_0 left promiscuous mode [ 2566.215729] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.227464] team0 (unregistering): Port device team_slave_1 removed [ 2566.234414] team0 (unregistering): Port device team_slave_0 removed [ 2566.241314] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2566.254670] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2566.267830] bond0 (unregistering): Released all slaves [ 2566.316830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.323186] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.329718] device bridge_slave_0 entered promiscuous mode [ 2566.338734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.345074] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.351544] device bridge_slave_1 entered promiscuous mode [ 2566.360845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2566.370940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2566.386946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2566.397739] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2566.419762] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2566.426574] team0: Port device team_slave_0 added [ 2566.434714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2566.441492] team0: Port device team_slave_1 added [ 2566.449577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2566.459816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2566.470321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2566.477259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2566.484785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2566.492594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2566.499511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2566.506944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2566.542662] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.549012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2566.555515] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.561915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2566.568567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2566.686440] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2566.693178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2566.709977] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2566.726734] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2566.732852] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2566.739952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2566.746628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2566.762192] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2566.768283] 8021q: adding VLAN 0 to HW filter on device team0 [ 2566.840705] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2566.851571] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2566.856670] CPU: 0 PID: 30094 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2566.863920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2566.873248] Call Trace: [ 2566.875826] dump_stack+0xae/0xf0 [ 2566.879254] dump_header+0x7b/0x460 [ 2566.882851] ? ___ratelimit+0x139/0x150 [ 2566.886795] oom_kill_process+0xac/0x680 [ 2566.890823] ? out_of_memory+0x44/0x650 [ 2566.894765] out_of_memory+0x4af/0x650 [ 2566.898625] ? _cond_resched+0x17/0x60 [ 2566.902490] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2566.907478] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2566.912639] pagefault_out_of_memory+0x4f/0xa0 [ 2566.917236] mm_fault_error+0xec/0x270 [ 2566.921118] __do_page_fault+0x4ec/0x630 [ 2566.925170] ? __sys_socket+0x9f/0x160 [ 2566.929027] ? page_fault+0x8/0x30 [ 2566.932537] do_page_fault+0x37/0x160 [ 2566.936307] ? page_fault+0x8/0x30 [ 2566.939819] page_fault+0x1e/0x30 [ 2566.943243] RIP: 0033:0x43e461 [ 2566.946402] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2566.965395] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2566.970733] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2566.977976] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2566.985220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2566.992462] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2566.999705] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2567.007085] Task in /syz2 killed as a result of limit of /syz2 [ 2567.013077] memory: usage 1572kB, limit 0kB, failcnt 13184 [ 2567.018686] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2567.025438] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:58 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) close(r1) 15:31:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f857140") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x48000000ffffff7f}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xe}]}, 0x28}}, 0x0) 15:31:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080)="97de798e1fc54427a5ced479344d", &(0x7f0000000340)=""/4096}, 0x18) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) delete_module(&(0x7f0000000140)='\x00', 0xa00) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x1) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000180)={0x2, 0x21e, 0x2, 0xb2, 0x1, 0x1}) getdents(r1, &(0x7f0000000240)=""/172, 0xac) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000100)=0x2) 15:31:58 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000080)=""/4096) mremap(&(0x7f0000bc4000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000c48000/0x3000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mmap(&(0x7f0000a5e000/0x4000)=nil, 0x4000, 0x300000c, 0x104010, r1, 0x0) 15:31:58 executing program 0: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000480)=0x1c) pwritev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="ca949edd1b8a2b6b037c9b5cf7b53dba54d65ba12a6f21da359d9457cda391a4b784ce61080677e43dda76ef6c5e1330780ae641cf2290237cdf8ddf10df8ff117bf28160ac896a7879d272319350d2d06f33c76ddfb685a7b7a71e89eaf33adf821cececfd9ea93320120c63a0490ede208a26c965cf2c54d19ddfa642dfd18298f45a37851dda8145f60355e9318e9ebd6f2a9", 0x94}, {&(0x7f0000000640)="cadb0a19dcc07bdd7ad8b6cee60f7bc82fb18d66fe94eaaf38e65f7ee173f3ae08bae58aef58a94181608c1037ec8ac01f05d6821f891536f5baf0fcdb288d5f687481a5", 0x44}, {&(0x7f00000006c0)="75b4d2fe268a9b222fa76d29dc538d97a497c932205c69e82962510fefa0df68b1a06c57c3b05e1a56bd92284ed692323297e00883eb8abd359df97f9937e750b690ae2c93115307b16dd2097c8be334c0fe41b8b30c7053328a522374cd7d238b51f654483c03db3047def91a97a9b745e50fa06344e2af6988a2da4444cd6024", 0x81}, {&(0x7f0000000780)="723117038ce07984608b038a86f481796245494f0076b42e4cb6f594ba0627756e0bd570715cf1084059ce147029cf311023f5d6211ab89ec1fdf2d451680b7eebb1f5ab42659339b976dfd6b91f28b5903af603ba47725ceb668d25147c2a134313775b71c12c8253875918831aa2d8f1fe0db58ed9c8cf2bfe635abf14c8d3a2688760265a04cfa826e22210ceed182828ffb05b5d66f89fc1e04bdb0b6a31919927d9e22a1f28f429d466760b9317dadc6f1f83ba69bc0e528e", 0xbb}, {&(0x7f0000000840)="c31239c7208ea6d1e3ee032c1bc05669e4b026537666156f07a10edc035e947bb881d656ff1ab77e184c1817d4addef0937724f257fb4754bf2545baba64832672ae7ada340122fe3a95f4a656e0a0c41661f610498cb92efc0253bafe205b5829862630e614ab5806ed986c272de400181a57ee79f1164094ed14851fe7ae2450b9c148cf4b0ce0e9b060255e2515ee87753885dfed6b883dceeeb434e8c7756952d5aeb209c4d29432058fec865460190d17f64bb5e4f2cdb4f2cf6c64547cb118ba028144b12edfb771e48b5f99b9522cb1bf785a31ff6a25dfdac103a39dee48", 0xe2}, {&(0x7f0000000940)="f70f0e2c248d188605bf74368b445191107b9acc9133d90e7e192d10b78cf4a4ea135baa43d96f93917218fb19b8cc29c4fcb733304c6385d17941cb1eb6ae4cde1189451775caeb2f91f6391281b3f6b26803e0e1695c07b8b4159091ffcee8a2b6169e11524d93914c97b6be52b7fec6bebf579b33148ddd3d315755c48e89229d946b9bce0cd045e1551b576b3fd93d5767dde258110d39a5506f510e6e9f2b7ccc468872e62f1cc99ff30a6059258db2fb76698b8ba56a2c863a2943e8699ce37a4c01c22e7ab8bf6ebcf6e2", 0xce}], 0x6, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$inet(0x2b, 0x400000000000801, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xfffffffffffffece) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x800000031, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=ANY=[]}, 0x78) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x3, 0x7b, [], 0x0, &(0x7f0000000080), &(0x7f0000000280)=""/123}, &(0x7f0000000380)=0x78) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000400)=0x1) r3 = open(&(0x7f0000000200)='./file0//ile0\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000080)=0x8001) r4 = dup2(r3, r3) write$FUSE_OPEN(r4, &(0x7f0000000240)={0xfffffffffffffe52, 0x0, 0x1, {0x0, 0x5}}, 0xffffffee) r5 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) 15:31:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xffffffffffffffff, 0x0, 0x1}, {{@in6=@local, 0x0, 0x103}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x100000001, @mcast1, 0x1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x4c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x1d}, 0x24, r3}) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200000, 0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2567.031577] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2567.051214] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2567.059828] [30094] 0 30094 17553 8389 114688 0 0 syz-executor2 [ 2567.068658] Memory cgroup out of memory: Kill process 30094 (syz-executor2) score 8417000 or sacrifice child [ 2567.078640] Killed process 30094 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:31:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0xe}, 0xc) fanotify_init(0x4, 0x41800) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x3) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) write$cgroup_pid(r3, &(0x7f0000000200)=r4, 0x12) 15:31:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) socket$unix(0x1, 0x1, 0x0) 15:31:58 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r2, &(0x7f0000000240), 0x8000000008) 15:31:58 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x0, @broadcast, 0x4e22, 0x0, 'sed\x00', 0x8, 0x6c95, 0x75}, {@broadcast, 0x4e21, 0x3, 0xfff, 0x6, 0x514}}, 0x44) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:58 executing program 3: r0 = socket$inet6(0xa, 0x40000003, 0x2000000000000001) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000580)={@multicast1, @empty, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in=@multicast2, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000ac0)={'nat\x00', 0x0, 0x3, 0x85, [], 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000a00)=""/133}, &(0x7f0000000b40)=0x78) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @local, @local}, &(0x7f00000007c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) accept(r0, &(0x7f0000000940)=@ll={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x80) accept4$packet(r1, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c80)=0x14, 0x80000) getpeername$packet(r1, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001080)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000010c0)={@local, 0x0}, &(0x7f0000001100)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001140)={@local, @empty, 0x0}, &(0x7f0000001180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000012c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001300)={@local, @multicast1, 0x0}, &(0x7f0000001340)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001380)={0x0, @remote, @local}, &(0x7f00000013c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000019c0)={&(0x7f0000000180), 0xc, &(0x7f0000001980)={&(0x7f0000001400)={0x558, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1e4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xa1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb0, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r10}, {0x15c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x1000, 0x10001, 0x1ff, 0x100000001}, {0x1, 0x53da, 0x2, 0xffffffffffff40dc}, {0x8, 0x3515, 0xc29, 0x9}, {0xdb5, 0x1, 0x8, 0x7}, {0x6, 0x8, 0xfc, 0x81}, {0x101, 0x100, 0x6, 0xac}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r13}, {0x134, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x10, 0xba, 0x7, 0xfff}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xd67}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x558}, 0x1, 0x0, 0x0, 0x20000010}, 0x40800) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x9, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r17, @ANYBLOB='^\x00\x00\x00', @ANYRES32=r18, @ANYBLOB='\x00\x00'], 0x138}, 0x1, 0x0, 0x0, 0x50}, 0x1) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:58 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/55) r1 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) [ 2567.152237] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2567.172696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2567.182269] IPVS: ftp: loaded support on port[0] = 21 [ 2567.214225] device bridge_slave_1 left promiscuous mode [ 2567.219655] bridge0: port 2(bridge_slave_1) entered disabled state [ 2567.230328] device bridge_slave_0 left promiscuous mode [ 2567.235730] bridge0: port 1(bridge_slave_0) entered disabled state [ 2567.247551] team0 (unregistering): Port device team_slave_1 removed [ 2567.254473] team0 (unregistering): Port device team_slave_0 removed [ 2567.261376] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2567.274680] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2567.295859] bond0 (unregistering): Released all slaves [ 2567.345550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2567.351920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2567.358408] device bridge_slave_0 entered promiscuous mode [ 2567.367643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2567.374002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2567.380485] device bridge_slave_1 entered promiscuous mode [ 2567.389488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2567.399512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2567.415597] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2567.426413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2567.447605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2567.454368] team0: Port device team_slave_0 added [ 2567.462332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2567.469111] team0: Port device team_slave_1 added [ 2567.477117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2567.487379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2567.497556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2567.504527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2567.511992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2567.519848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2567.526785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2567.534236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2567.569485] bridge0: port 2(bridge_slave_1) entered blocking state [ 2567.575829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2567.582367] bridge0: port 1(bridge_slave_0) entered blocking state [ 2567.588676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2567.595300] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2567.710308] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2567.716413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2567.732914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2567.749136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2567.755267] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2567.762670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2567.769332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2567.784470] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2567.790571] 8021q: adding VLAN 0 to HW filter on device team0 [ 2567.860709] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2567.871592] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2567.876723] CPU: 1 PID: 30400 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2567.883991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.893354] Call Trace: [ 2567.895916] dump_stack+0xae/0xf0 [ 2567.899339] dump_header+0x7b/0x460 [ 2567.902937] ? ___ratelimit+0x139/0x150 [ 2567.906882] oom_kill_process+0xac/0x680 [ 2567.910912] ? out_of_memory+0x44/0x650 [ 2567.914855] out_of_memory+0x4af/0x650 [ 2567.918712] ? _cond_resched+0x17/0x60 [ 2567.922569] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2567.927553] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2567.932714] pagefault_out_of_memory+0x4f/0xa0 [ 2567.937265] mm_fault_error+0xec/0x270 [ 2567.941123] __do_page_fault+0x4ec/0x630 [ 2567.945166] ? __sys_socket+0x9f/0x160 [ 2567.949027] ? page_fault+0x8/0x30 [ 2567.952555] do_page_fault+0x37/0x160 [ 2567.956325] ? page_fault+0x8/0x30 [ 2567.959832] page_fault+0x1e/0x30 [ 2567.963255] RIP: 0033:0x43e461 [ 2567.966411] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2567.985402] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2567.990735] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2567.998016] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2568.005284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2568.012531] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2568.019772] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2568.027060] Task in /syz2 killed as a result of limit of /syz2 [ 2568.033039] memory: usage 1572kB, limit 0kB, failcnt 13192 [ 2568.038649] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2568.045388] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:31:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0//ile0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0//ile0\x00', 0x40, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000082}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x12a}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x365e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x96b}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x4800) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r2, &(0x7f0000000240), 0x8000000008) 15:31:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xfff, 0x7, 0xfffffffffffffffa, 0x7fffffff}, {0x80000000, 0x2, 0x8, 0x1}, {0x7ff, 0x6, 0x3, 0x100000001}, {0x800, 0x5c2, 0xffffffff, 0x1000}, {0xe92, 0x5, 0x5, 0x10000}, {0x9, 0x6, 0x2, 0x70af}, {0x7fffffff, 0x14d, 0x3, 0x2}]}, 0x10) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) 15:31:59 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="56b140b85c4b2900528be15e5c4cac092799c9442baac4b606337c", 0x1b}, {&(0x7f00000000c0)="4c69833bccacd029b6fdf18b6f9d6fc359c8e2c0c8b0d3ad350af772fb0c4b54490a50b412c1d41204a0c285de65803738a9250370a8cb2ba1fe366fafa1abf7584d1e900c7fdea48b7b6e6e3a5c345a5101ab8720bd95ca20", 0x59}], 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x4, 0x31}, 0xc) 15:31:59 executing program 5: r0 = socket$unix(0x1, 0x10000000000007, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x5, [0xc06, 0x0, 0x0, 0x6f58, 0xa1]}, &(0x7f0000000200)=0x12) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r2, 0x0, 0x9, 0x9, 0x0, 0x88f4}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x9, 0x8, 0x1ff, 0x0, 0x1}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0x1, 0xf744, 0x5, 0x400, 0x3f}, 0x14) read$FUSE(r3, &(0x7f00000002c0), 0x1000) 15:31:59 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c833, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000180), 0x4) 15:31:59 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0xa2, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6be35e7815c9a34a2fa566872052319734a783f575720e84b24ce2dc0493946111e4741ef944375e17bc06fa0f6a8729c3be7a2ebaf800c8e45dbb3e02d131740e4f96b883655a75db36d00c32341224474"}, &(0x7f0000000140)=0xc6) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) [ 2568.051536] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2568.071172] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2568.079782] [30400] 0 30400 17553 8388 114688 0 0 syz-executor2 [ 2568.088613] Memory cgroup out of memory: Kill process 30400 (syz-executor2) score 8416000 or sacrifice child [ 2568.098575] Killed process 30400 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:31:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = gettid() tkill(r0, 0x2f) personality(0x400000d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18000, 0x41) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100)=r0, 0xfffffffffffffe25) 15:31:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8205) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r2, &(0x7f0000000240), 0x8000000008) 15:31:59 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='='}], 0x1, 0x0) mremap(&(0x7f0000a36000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000bd7000/0x4000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001700)="833b10fc81fe9af090681d70102d45e9155b6a4f4779d8d2b1bf39373763151cacd5ad9af2534701ceee880f7d16dbc9e2cdd82979f7c824020b8ee49558cf1f1a3aff1aa0228fa79bf0faf70d50caf93986b8dc5068c703de4d20633b84a13acfef2f51879c2f06694dfe5613940fa8e9fea9301eafca5da784f8c7f506242693e068058e691703539d105dc5b45d9d2188b3f8974f19b0ac0739c0effaa81aac8b59d8b73f76cedc310bd8177fa6bdcb981e1060c40cafa386a40f1f201f36220c14aa467c3c8ea35513493e59a1872af52bdaa27126586e993e3388534903db2ea6707a45f18cf2d8c4806185afec1676", 0xf2, 0xfffffffffffffff9) keyctl$describe(0x6, r1, &(0x7f0000001800)=""/159, 0x9f) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vga_arbiter\x00', 0x100, 0x0) sendmsg(r0, &(0x7f0000001580)={0x0, 0x26d, &(0x7f0000001500)=[{&(0x7f0000000000)="14fe1e1d385067f3d2ec1f1ba877931a6ea70d5cc7224501400a7e4b99643641f2d75b83a59035d3e1791cbc7da95f3736014f43298406eb82ced6584e5ac2bd2785201c5f49ce9cada0976453f0e27aab4aeb06b5260171b5d5c1007d4d2ac9697054a6a2607215f471bc8288e1fef6fa7b81fc876de78bbb6bef8528df85ea7c073bf450a588573f227402ea8934d1362e1535d97d3850c8e57f69e185b4c5b64fdc7300381c165d350868621adf411771887bda41bb79fc5cf1fbab", 0x9e}, {&(0x7f00000000c0)="9d585d2326e62de99613d6ccaab5f5a757b1f6c469deb0bff487fb7da975a9de005e3a66ef0f", 0x26}, {&(0x7f00000015c0)="eb8cf90f3882c9ef8388c976067d232e6d40fedff1a5f3a539986ee33e16800f4f7ec3cd8c0f96c9c8c98c613a7941b36d4a4cb282c4d9958e6f6da29efa2c7ea601188147fd60c251f8493713a0a9d05b3c047b40bd36c6a4f45511f1afa5c80f68b27a8a7212a52ef8f5c037de166f194db7c3815a3740b9312572071e8a58051b799a357a8cb0", 0x88}, {&(0x7f00000003c0)="994ce5a494be183dc15d7751c9d81843f82087aa59ef20fc11dd307765e96914ba04a650482d8b13cb7788de4d819c98d57efee001078072bdcebd542b69438380b5ffc59c787e47a85684ba92cd1f193df9b4aeb2908a58c3c7ba0dec464a4d2b73d6addaea42e747efd7584a99afcdfd0897fc7b12170a02eea9f070e5246858c8cf4a83f7db708b8a7facd3b5dbdbe8800d2d7351448c189182babbec7fe7d71c090977cf674089bc496a86124dbd0a53bcee4ed34d7d183c8809f3f91d5d997b9fdd6368d2de37a4c76ac656229aa4cbaf5e3d9a35dff67ccb32084fb070d449a8d1ed064dd6f266f279cbcfba2d1713f887450942056cd36cf9ee51af613f823a29648b990f99c43399b0cea212691cf175da689f925a7eda21b1000f19923b4a0cb14571eed3692b8a3a2310ef34d764ef1ee4da2caa30ca78c1c72de684dc3424e272bc5634be4c0a7ff4d3b4d726585f37b16cef042ade65b988c79b9a398022953e4cf64848f09a92d6c2528920c47c35322a645c49d9618d1cd0dee233e11434cbdafd896ccf2ea5369b7345cbc8076699551178f3ed998c15cc4d63645a4fe8ec4ea17e133c72e05844dd0afe0337f20ee23e0d33723f12dec4438274316dae435b49fac2b132e8f45757c4888aad654ff4cbee6f27915949dfeb10aa48d38dabdb33bee821bfd842e71f54135f28e03d8411a47f7688429499468e528c3a3ab3548eb8ee98458f7dc11c03de7c66a80b8db190e1c1945c01c7ec4a7dbd9b4636a4a40d9a3c11e855f4652b84ebefd4c0ad24695edc3e30691b06af6cb67a5f373192ef2c8b01b87bf952598bfbbe7ce88e35f06938d9bbb9026c01bdcbed1d50ef2e4d7c7ca73ed1ccbfbc22e4da12b63b5ed378bf5683fcea7d572f700da9c145f5dbe42826e329b5a65de114e21cb43e98cb46c0fa98e9b91b294591647fe5e1fd68fcae7f66ac2e0a4618120de073451269382029b82ba67051e1abde2234f6292de48bbdd8c1abc14b1970ad7fc54d5d38a3b222170c5db01f93d30da441bf7f556d1cfa473524c76c1ed8bb25d237f3c541a3ddab5729bf3b5e1cd7f7487d0dceeee9fc9b8f51a4994b40db0e88306ccb40f88c3eacdb5a98a3bbe0ce7ae9c455584c88ea7e9b6bb7f9dbfb367b169b21d8cc446099c6c9aed355d8f62296a08a5cd7a70eea963319a8f4fb84a13d9e655c267a5367dc39d594b55f4a15f728fa2403e8a75dcc6b89f333a655bde249ac289d2ea84eea5ffb062e951f83a40ec7ff03fa7994eb1f54bb1f8ff283edf026a65deaee100f39829105f655d90b735718513fee6b9d914282a4c916ecd5e528466167082e47c844c73aa84c2c698d5a59d3b2ff7b7d2f90155de1114c995273064618daa99f8ef52d2ea4785ac2d6c907d25859b380a37ce89b3aa7f95337734207a8101382882bc76dc0a87373b50602b38435f03433bd3f950fe6da868b41402dfbdb5fd2d418cbb8ee1e69d22b2e7d73e08096039fe32251212fc346d8347deaa5d1ca6aac1600cc68a711afd4844298a48647b81add0dfb36157b343b1f00e5193ba7302585a6e32eafd830f68dfda1b5f71584e01751fa5e6ad7c7880abcb960ea6e4a16e8478e79dcfa62f0e4e83986839db315e4e6f60356cda80e6da43d3363959a9b8b0a357ec72415dd1db1a81565e86269c57d5082dfe30ffcdc8ff10cf9f1d89f4f0e70c119061a2261a5ee9f39d4ee04ea29a24c5e878b3d061aaf56aeeaf8d45f012306a2564274379c2d29428f4ffd700a104a59b7f38e1d8a026a4113cfa9e80d4c1b2088f7bb3421c26e553e1dc8a03ed44d34ed86ddee272b6cafdc608515681eb843dc04b370ccfe06bd87211eed897838b36bc70acee1a08aedde462333b730f562ee429c45517831dbf691d6caeebbf13adf047416271f43fcb006f479f9e5f37e9389022909fd80a98d4bca71c581f2b7e044fb368589e061d3701c84d332c9d9549c1ce15644a4de86da0110c442c5f4f29583c9b12d991f4a6661e939beed26ec6e326b444c4b1ef9c8b3437f06b92004c27b3a432cfc7d412138fd7bdd9b98d60c0920e0789969c65c629282b4c67efc50c74affd396ee2333e90a19bfc1d00396523c091428ea9a094d8f7e90158a9047681b94871c3951c9d18e75006523642a4aa66ecaf1d6dfa4112c8cd66307f56e1f019689ca9c9d066190dbe6207a9d7ae137c1da2be82d0cf19b724a2f04dc2f78b9b6e5d8af5d16164b1c2df19376429012a139f93d6d81c20bcff2d8efb526b5de4cfa88455d7ebd9e37af6465ae940a77caab553430e4c4330e08cbce051eca435604d8df7b61639629b39f5b890b7378aa660a776573533fd5f4618c1f2cd19accfc166e4932f002dc2de9d6a3c719c56156b4e1d765436fe470d4685a288e32505e87f24e1f4d5a27aeb69150fa4f78dcf823110221388af8d948735f5f16c5da406308b4dc44a921fc91c0e0ed35b083865634a13917d0011d158f781203f77a3d77bd84359558c5fd57399f6e641ac3aaec049cbb8e4fdef8df49326007da977ac4e2af7ef41f9d4ef0692217d0c4ef36c29e8ba1f18b322745a805db81fbe6188915e0016bf2be78ed8647516615e7df2768fe5a86215c6687a886045f1b150b7a0c0c176ad058ea1261e6705bd7a0ba4fc662261efc7385e351eb8c8332a3365b3294b6f92d52c74ca7d3b88f97415cc26001994fec0f62670b2294da54193453e8be88a70b70cb5650cfbb722312fdd70cff20fddfbece68c8da18de41e5a55264e7ccde3d54d8ef68f25c51972fd007153e199012db196696d64b31d502bc5af7811ea50cbcc2b29c0f7c416c0a7e1fe9e2b6ec09ebe6f0845664b6e6dd1da5a19a0322518fee4302feaa7d4743c65c71853879155f7e1d5cfc1ba8a846c0272d25d4b8092c7990b6563c81e75230e48a3f111176d463cdedbae962d0988624e6d275ac0b4af4f8493e58178a100f03231f2e91ea82d4037dcdaf6cfa9c03187931cfe8fb21c28aecd3d1aacde506e259b11e43f7a7bcf207d00672f1606b57eccdc4b7f9e394ff81cccdc3450cce1e883e86516b7781cc29d64b72457d1a0c1f7618e56b1a01f6dd4eb3a67b8e1272c06a819476fd49ba0c76849abe1d9a43358bbdbe348f2234165de590a8ec3bd98348ac00ed461fa6f487bda0a89c08b08277a1afbac67b74f0a24ac4db3b0c34bf6ad55e7b001e4fd2c9e1170e6920ec681cd3b8c936d5bd944c7029173d92fe7d06de7207c263579d2a8cddcda6cbb9ab91d393a0c415106e574c9384a16ad1294f5e5eb0e274ecf0166c025b27b538986684bb32726624aedaef99e556efbac51fea45ad295f83715b414f92c888cd8858b58656e8d90ea3ec32ca30a48807b534bf1fc7f4010cbd4ddaab4248a9e992d8a53ee0459726141fa0cb6227220ae38dbf4fe921283c055c4dc8a95e95e4ff8aaa7810e46407137a3c615a25a5820a79fc3941d2a1aa7de2adcebb87081f7fd8d551ed6110aaa17dd15c3b796c61a55ca9b931ba727320a3e11733df486d6e3941d952b493c779ad1654e2055e68b21cc68ebf1d2d8697847d9edd108ff5f24711e0cf46576e1e8d3b04290b402dec8919b376989e9e97ad2ab10fbc90f6e649e51cc7dfb2cb49fa7c240c9eade1f7c422e56eb92aace7b989219641fb615248f56a1b729511fc6d58d90cd9469f1b4e538da71963ea7a1291d67702fb9055c9423cd59c6c61821bd989935825fa53c1d2cae6d505360bbe95db10f0ccb62d89edc94b4184b862f9cec1fd732c3328a4e91c13441385e0fd817163e84c08dd5839ca9add1a717a5e74d8d9b961b8042d1b95fae5e7e1d4c2e737fe5d3e1fb3da62f85b035d8e7d4e8d7bb3c26a62d09e1cccf8a953177aa7efc3bca6d1592e6a13a39cc5baf43fed66262302fed0abf48bad50d380bc9dc5205bd2fc117edeca0232a9c0130bd44a2bf82cf083506073dc88de180063e5a328fa22c44f76b8a9474e4298cdb5fb7d3dd29e4a96133f9249d263e786a752069b24c0144f30589974ddacea2e1a4f317e655da276bbcc28a7706b39c167dbde8466422dc6afbbef061dc37cd6f836ea3ca9130a017997343c49ff38f30a8b0ef9a62f5f12d08b2654728ffce6738d57511a7c7bc2f6058ce89dacc02e75cfcefb2ae9b3acc49aac5f1c8f7968c160d09766c752a31228c89ee7f3f9618bcdbcad07a06286e911b9b4727dd4f38ace078d18db8765f35473f929ec5d0f1adb57f9cfc35cabfc3b76ddfd1290cf67361b7351ebdfb0b4e6edbafcc5c502bf508cb61085b9e7fd5a566c9b91b4da9337da277a81777f1cf7db0443054a6a90ed8219e680350f032835c5c9e9eec2a2e0b7ff63738e25f4d262637908b40bed58dd9571b1e6b7044d816b9b87f6ae0054695b7d2a1f7d014c1f2733fada70c69fccd05c75ec986803dd0976b6c2a8e0f516e3ad72835ab239d4a27cb5621a6ea5609c4b66a301e7c27c500329b1043d0507320545dd400994ae0cc22cb9a8ce2d1679e75c78dd153ffbf7031041d22be227a708043052c813ed3a0736f263e3d3f1a60f69c3e3f9db6a047483605ae3a7a6464160c55cd9aae3849b48820afe4863e29e09a83d927d413c456b71157114aa19f743ef90d4a12493f0412615b065b78cd73a37e78e0d20b854dadf377d1dc56490c9e671eb2b76eb67807996af561e1225d7bf9733f65ad45f4763d9e7de7afdcda9ea98e0a24402bd733d063d4ad07bbb0945e7545fe506003fc2a94bdbbf03b973b0b663f9d82ebb6f07b24cc674c52e7a3b9e5ccc4e52d0f30de54511cac5fd4cf93df9dcdf66e78fb7268e831d110572c1f9135b8122e415821816ebe3333a95fcb740790c4eb3ebb0585744a02cf31a940d98a2098bb8ac5ad4f800ac7bd68ad233a93de66b623cd2a9ad0a668eea36cae00eb7190afe830deb99cd0f9bb91a6a3c7a2d17b403ac776ae6f2a04c76a07296e8fffe5513972ef698569a7e5f19cb9e431f65dfe80599e6e54010d403abefb42a8101412269a9e77680fd1e532add491056ac08ac4e3c6a043acbcc05f250d082a5e0e9683b740364b7e337edac3db3eba7f083c0bc577db43fd84ac12955e7d3577f41154e43a53d58bd21669bbaf9ce421ae2cbc54182f9d891cf89725aae11b96573c06f4a9be927eeef46a5f9589537d092571b5e9dd3c82ab046335cfd652fa1a94fd6515906458281859498b6cb75bffa2b99217070f38154e4204d0104c1e4a8d5aa99b1acc0a01e5613989659b8ca3c85921d2073c5d008f1c3233a3687465d2224e5b29fc4ed14006d907c19e35996c0609e7b90fa6a5b015d1b51fef77e1bdeb5b1b570ee24a69253e07b2a960cc182cd40fc24aecf82dad7f6e1de3e1669ef2ad8c5c80de819d833feb7c717bb087715cc8cbb68270d88170dd6257b5b208c0ca81f11aa800d2ccb4e2a7a662a7b31eb46734cc89a814096ead0302ce335ef31d2c9925e59d08db1ba2989f8ea6f833b64f30af4e5955b9e834907effb6fbcabfdbfa0bf3c21996fe345da88a5cdf43905faf1083913c7063d2d4ef00b2fdabaf4457c4ec6f75931cb3c9faa315e1c8cdd8fa4d7c03e8aca7cec16b17bc03aed426c4b30f73ac795d7b1faddf0a017dd5ce6772186ce9892b1f462a80a9b30937863313d8ace55eb001c1615ed2eecda4b7335bcd5f286c167a4d89a053eac4379b567732da4f1fe155bcb0b4632068f0d09f9101a18c12761791e3421c46e", 0x10ed}, {&(0x7f00000013c0)="38fcd12aa50dac0a9f1ec4aa79a6c1d485cf2f9bd24fa3130c6ee122b98c8500665acb03e027f25388043c2f5ecd03778f12b2f6f7ad9f61362a79bc3d1260e2dec9e646f99a0b352def960ccc3b8918b709a3325c7b7d66e4ab8a390cd92c23da74081338bf39e8939fb3f7a7bdf91601f96c8c4213ea3f66ebba710d09693d6ab1d43f27c004b928d43e73ccec3138a98555988721af189f931feb47ac5f311a", 0xa1}, {&(0x7f0000000180)="f827d945c44a2f309447867b703c44dd0080ac2243e86b6051b00f6178460e6511cc7492ea472b333b62b78f314c2c5cedd002b1e8654bb7be3c053e3452b8b83d5a861e783219979531d7cdb3eaa9e8c712c43fff1a1db0b31cdc9f40baca992e", 0x61}, {&(0x7f0000001480)="59bdba31e870a7578bfd14fdcdda1b6930e741266522cd9e8b747349bc439b40e01f2defc878e31a2b009161", 0x2c}, {&(0x7f00000014c0)="043e4244527f82570e147fb9e77d3758894b8e1a8ccd363a3e0b535c068d996921d191ed136c", 0x26}], 0x8, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000018c0)) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/uinput\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000340)=0x8, 0x4) 15:31:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) io_setup(0xfffffffffffffffe, &(0x7f0000000000)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x40000) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe, 0xff, r0, &(0x7f0000000040)="be2969dc51eead91afb92ec1d8baed602ca73ccea9f92696", 0x18, 0x4, 0x0, 0x1, r2}]) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:31:59 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:31:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x441, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0x69, "1feb0e1fb76246612aaa75ce8ac1ac455c25c20ef02f6f0482f550f396803d68392c694b3ad8d367e47fa771e129852f142778ded33eaf859133b8aa257aa2da07ec0d041b26777b5f66f3dbcb6cae9d95fc10d4ad3d0308cbb64a8e14c45321076095e646c3137c7b"}, &(0x7f0000000500)=0x71) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={r1, 0x90, &(0x7f0000000540)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x19}, 0x258}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x10000, @mcast2, 0x7fff}, @in6={0xa, 0x4e20, 0x4, @empty, 0xae2}, @in6={0xa, 0x4e20, 0x3ff, @mcast2, 0x5}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000680)={0x401, 0x6, 0x204, 0xa6, 0x61c, 0x7, 0xfffffffffffffffa, 0xffff, r1}, &(0x7f00000006c0)=0x20) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000280)=""/160) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) recvmsg(r3, &(0x7f0000000400)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000340)=""/111, 0x6f}], 0x2, &(0x7f00000003c0)=""/37, 0x25, 0x9}, 0x2040) 15:31:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = socket(0x5, 0xa, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x8001, 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@getsa={0x17c, 0x12, 0x200, 0x70bd26, 0x25dfdbfe, {@in6=@local, 0x4d2, 0x2, 0xff}, [@algo_auth={0x130, 0x1, {{'sha224\x00'}, 0x730, "68cf0a325026c5de0b7e95091acb7b03779800991391fdcb935d56c1b5f0b6f5e5e3202fc3652c1b8b36173facb30a8735a73a8476bc10d1eb629f32e4878cab33273bcccb02b3e0b072f0b4ea67480f5231691b82b2252b113bd40e30e27d437a05a3a2148206b38ebb33788496cd7b282953ed05f6d21f7d1171cb8bd0692681c449c62a0462d71d087fce50aa0cd349d288a9f046cb9651d674e916631e7b5e967b9c030df4e1a1706e8f9704e8d4bfad0df2409b99d9d51110cb51f31407d55c47aae8e77580e216686a8f668447fd24158d6fbcbeb8f35a1565d368d5da3211e37d48ba"}}, @proto={0x8, 0x19, 0x7e}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e22, @in6=@dev={0xfe, 0x80, [], 0x12}}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) 15:31:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x1f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:31:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:31:59 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0xfffffffffffffffd, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:31:59 executing program 0: mkdir(&(0x7f0000000200)='./file0//ile0\x00', 0x89) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f00000001c0)='./file0//ile0\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x80000000}, &(0x7f0000000080)=0x8) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r2, @in={{0x2, 0x4e22, @multicast2}}}, 0xffffffffffffff31) write$cgroup_pid(r1, &(0x7f0000000100), 0xa1) 15:31:59 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:31:59 executing program 5: alarm(0xb2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0xfffffffffffffffb}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r0, 0x81, 0x2d44e149, 0x400}, 0x10) r1 = socket(0x11, 0x4000000000080002, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x3, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000280)={@loopback, @multicast1}, 0x8) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000500)) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0x717) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000180)="2cb68f92002b89f9bdf43d3593f8ad9e3aef3179f0ef93ab3f1ddf719f1610d9b87d5da3e18fdc57965c5e0a8c5235398be7702051d0202453fef1aade4e757a3f7a4c5e11bb9377f62c68b473728939fbb684fcaa97f7c5459ceec2af7eb6ff26bc420721008889ee500cfc27486383c4e9709faee5547b8d4e5c5507530e52ef067a00132b6647ede94b293f9d4eea9973f5316570f26ddfaf83f2e1dcce9a046b8f07de6194ea7f09942b85af7fd7fd09f55c9a5b5ba3055f53f8629cf8a590d69466cfb33ffff5b59216712c4b4b1ffd3d9d8065a3f41e4ac8709107941740df3fd89ccec5d8c9b2deef464ab1fb43b38c5bf51593f8a1507d", 0xfb}, {&(0x7f0000000540)="0588c5781709e2b0ca3f3552086dbace6ca83062c866cdaf16995862bdd11ecc7db20066e94b3a26a593c9dfabe0d306a03615ac886bab8d147f78a2d8ae52ffb8cfe5ae8a529eff11007d1cf6e22d24b368e1c0f0eeea2a5a6087bc01b856efb7d458820a3693a0d367596d5271ec947b3b4602e7e5d9a4f780bd366381abdcde3df0c875331289b020b377959b", 0x8e}, {&(0x7f0000000340)="5de3af76346c45e3345d661095496f0881ac77a54668e47af52daa7b986c101289d39a47ce44ee36bc9c7a22baf2ec1555c603e3a4fb7152c1dffbd959771544a256448e6b8507ac9c083dfd6691b2266e5ec1f1622dbf78b785c314303c24740f6248ddeb81895bde6938726e1a6cea55f83444bbf7adb415e5a0e88910c4af4a3e1d143077c7", 0x87}], 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000080000000000000000000000aaf55b58ba4ef7d2a61f8798131fe7c333cd14c72e4471e27ddf82e4d25f87277a51c279bf4a7c19177a73c9a10be3ea010260a9e7e5873b85f500ea8c9daf94984f83ee15b4531d7cfa374c4f9d560f48b3842682347ea7764dc41002a555f3c3608bc668804e1619956e0dfe1217c8d7399684e2a9d574b1693f7a42fcd8232ac3927d0176ab5492784abce191bba7"], 0xa0}], 0x1, 0x0) [ 2568.159405] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2568.199192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2568.212770] IPVS: ftp: loaded support on port[0] = 21 [ 2568.253234] device bridge_slave_1 left promiscuous mode [ 2568.258644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.267278] device bridge_slave_0 left promiscuous mode [ 2568.272666] bridge0: port 1(bridge_slave_0) entered disabled state [ 2568.285495] team0 (unregistering): Port device team_slave_1 removed [ 2568.292468] team0 (unregistering): Port device team_slave_0 removed [ 2568.299267] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2568.310614] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2568.324826] bond0 (unregistering): Released all slaves [ 2568.358345] bridge0: port 1(bridge_slave_0) entered blocking state [ 2568.364745] bridge0: port 1(bridge_slave_0) entered disabled state [ 2568.371289] device bridge_slave_0 entered promiscuous mode [ 2568.380600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2568.386932] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.393383] device bridge_slave_1 entered promiscuous mode [ 2568.402339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2568.413057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2568.429655] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2568.440464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2568.462827] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2568.469589] team0: Port device team_slave_0 added [ 2568.477508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2568.484256] team0: Port device team_slave_1 added [ 2568.492096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2568.502214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2568.512203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2568.519202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2568.526641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2568.534491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2568.541680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2568.549123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2568.585546] bridge0: port 2(bridge_slave_1) entered blocking state [ 2568.591883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2568.598382] bridge0: port 1(bridge_slave_0) entered blocking state [ 2568.604698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2568.611375] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2568.726324] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2568.732420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2568.748603] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2568.764662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2568.770798] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2568.777446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2568.784080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2568.798963] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2568.805033] 8021q: adding VLAN 0 to HW filter on device team0 [ 2568.877752] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2568.888613] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2568.893747] CPU: 1 PID: 30737 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2568.900999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2568.910325] Call Trace: [ 2568.912880] dump_stack+0xae/0xf0 [ 2568.916304] dump_header+0x7b/0x460 [ 2568.919898] ? ___ratelimit+0x139/0x150 [ 2568.923841] oom_kill_process+0xac/0x680 [ 2568.927870] ? out_of_memory+0x44/0x650 [ 2568.931814] out_of_memory+0x4af/0x650 [ 2568.935673] ? _cond_resched+0x17/0x60 [ 2568.939528] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2568.944513] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2568.949671] pagefault_out_of_memory+0x4f/0xa0 [ 2568.954223] mm_fault_error+0xec/0x270 [ 2568.958088] __do_page_fault+0x4ec/0x630 [ 2568.962121] ? __sys_socket+0x9f/0x160 [ 2568.965981] ? page_fault+0x8/0x30 [ 2568.969489] do_page_fault+0x37/0x160 [ 2568.973257] ? page_fault+0x8/0x30 [ 2568.976763] page_fault+0x1e/0x30 [ 2568.980182] RIP: 0033:0x43e461 [ 2568.983339] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2569.002331] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2569.007661] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2569.014902] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2569.022146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2569.029390] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2569.036632] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2569.043898] Task in /syz2 killed as a result of limit of /syz2 [ 2569.049863] memory: usage 1572kB, limit 0kB, failcnt 13200 [ 2569.055467] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2569.062203] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) 15:32:00 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0//ile0\x00', 0x103580, 0x82) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:00 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) fstat(r0, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x7fffffff, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x24) 15:32:00 executing program 2: unshare(0x20020800) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) socket$inet6(0xa, 0x0, 0xdbf6) flistxattr(r0, &(0x7f0000000100)=""/222, 0x1e5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000080)=""/24, &(0x7f0000000200)=0x18) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) getpgid(0x0) sync_file_range(r1, 0x0, 0x0, 0x0) 15:32:00 executing program 7: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0x9}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000002c0)=""/245) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x80000001, 0x7, 0x5, 'queue1\x00', 0x7f}) sigaltstack(&(0x7f00009a2000/0x1000)=nil, &(0x7f0000000080)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) read(r0, &(0x7f0000000200)=""/157, 0x866dd2d08700a71d) 15:32:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x1000, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:00 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x51, "59e60d7fb976c45d834ab38133ba4bf1ae4734f6433fb61766daf22035a8283f7581208f4b140ec155f4b7e4aaa47c9fc912c09831871aeb9880b0f87ecf465655ca484d3b5e28a83c7777f6094b6ec8d6"}, &(0x7f0000000140)=0x75) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) [ 2569.068324] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2569.087939] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2569.096536] [30737] 0 30737 17553 8389 114688 0 0 syz-executor2 [ 2569.105359] Memory cgroup out of memory: Kill process 30737 (syz-executor2) score 8417000 or sacrifice child [ 2569.115312] Killed process 30737 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:00 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x400, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x402003) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0xca400000000}) 15:32:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @rand_addr=0x8000}}, 0x1e) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:00 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f0000a20000/0x2000)=nil, 0x2000, 0x13) r2 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={r2, r3, 0xffffffffffffffff}, 0xc) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x3, 0x9, 0x9, 0x6}) 15:32:00 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="ae2c5c06003628ad091bdf04c3c91db2920638d3b5ceff8a9aaf3c7caae6e2eb71db218bc934b5b086d1a0d6f0c0a04576f964ef7a8c0abb868f2c09a193f09d28d954320dcea47a4da4b14a0cfa638b0000f3b5f6db137a0f0d4ff7c3fa73a5171fa046978b868cb8acccfd53b66a8abc8a0b492a6d77", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x10) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='U', 0x1}], 0x10000000000000e1, 0x80) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:32:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa8}, 0x7}], 0x1, 0x0) 15:32:00 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) close(r0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:32:00 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x9, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x2, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r1, 0xe0}, &(0x7f0000000140)=0x8) 15:32:00 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) syncfs(r0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 2569.161767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:32:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x8, 0x4) [ 2569.203872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2569.206959] IPVS: ftp: loaded support on port[0] = 21 [ 2569.273193] device bridge_slave_1 left promiscuous mode [ 2569.278636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2569.288319] device bridge_slave_0 left promiscuous mode [ 2569.293716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2569.306431] team0 (unregistering): Port device team_slave_1 removed [ 2569.313294] team0 (unregistering): Port device team_slave_0 removed [ 2569.320066] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2569.331606] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2569.344938] bond0 (unregistering): Released all slaves [ 2569.373336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2569.379685] bridge0: port 1(bridge_slave_0) entered disabled state [ 2569.386136] device bridge_slave_0 entered promiscuous mode [ 2569.395235] bridge0: port 2(bridge_slave_1) entered blocking state [ 2569.401589] bridge0: port 2(bridge_slave_1) entered disabled state [ 2569.408085] device bridge_slave_1 entered promiscuous mode [ 2569.417888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2569.429006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2569.445989] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2569.457430] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2569.480779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2569.487596] team0: Port device team_slave_0 added [ 2569.495776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2569.502563] team0: Port device team_slave_1 added [ 2569.510778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2569.521123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2569.531379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2569.538336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2569.546730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2569.554647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2569.561588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2569.569326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2569.604563] bridge0: port 2(bridge_slave_1) entered blocking state [ 2569.610909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2569.617425] bridge0: port 1(bridge_slave_0) entered blocking state [ 2569.623749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2569.630443] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2569.747382] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2569.753482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2569.770130] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2569.786920] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2569.793035] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2569.800492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2569.807193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2569.822785] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2569.828877] 8021q: adding VLAN 0 to HW filter on device team0 [ 2569.899685] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2569.910545] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2569.915684] CPU: 0 PID: 31044 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2569.922942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2569.932374] Call Trace: [ 2569.934933] dump_stack+0xae/0xf0 [ 2569.938372] dump_header+0x7b/0x460 [ 2569.941978] ? ___ratelimit+0x139/0x150 [ 2569.945921] oom_kill_process+0xac/0x680 [ 2569.949950] ? out_of_memory+0x44/0x650 [ 2569.953909] out_of_memory+0x4af/0x650 [ 2569.957770] ? _cond_resched+0x17/0x60 [ 2569.961627] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2569.966632] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2569.971816] pagefault_out_of_memory+0x4f/0xa0 [ 2569.976370] mm_fault_error+0xec/0x270 [ 2569.980229] __do_page_fault+0x4ec/0x630 [ 2569.984264] ? __sys_socket+0x9f/0x160 [ 2569.988128] ? page_fault+0x8/0x30 [ 2569.991655] do_page_fault+0x37/0x160 [ 2569.995426] ? page_fault+0x8/0x30 [ 2569.998947] page_fault+0x1e/0x30 [ 2570.002373] RIP: 0033:0x43e461 [ 2570.005531] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2570.024542] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2570.029888] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2570.037165] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2570.044430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2570.051692] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2570.058935] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2570.066224] Task in /syz2 killed as a result of limit of /syz2 [ 2570.072213] memory: usage 1572kB, limit 0kB, failcnt 13208 [ 2570.077842] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2570.084586] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x5}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000200)={0x0, r0}) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400400, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @local}, &(0x7f0000000100)=0xc) recvfrom$packet(r1, &(0x7f0000000040)=""/103, 0x67, 0x10000, &(0x7f0000000140)={0x11, 0x1f, r2, 0x1, 0x6f, 0x6, @dev={[], 0xf}}, 0x14) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000cc0)="070d8c4667adce952a53cc6822", 0xd) 15:32:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/180, &(0x7f0000000180)=0xb4) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@local, 0x4, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:01 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r1, 0x7, 0x1, 0x40, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mq_timedsend(r1, &(0x7f0000000080)="fc8c44bd06aebb1592ea7bd287898ff1e62c3a32e7cb108a29cdfa8b2b4a49a300759c5fbe91cc266c3e3dcf656a5814ce772f1e3103d215c106a7b9f225192ddf3a30fa33128521da907677890773eaaf4e90267efca180ee4be606c8a939f243d51b21d6cf36ef4f54902441ed21e259744a8e1dae96b9965991b4943552c0d15517196bbb8119ba5cc65a904c7ecc6c60b518d1b7bbfa022072bb88033ea0e8a1ae84237a0ff721359a3af85ed732229989cadede45aadb4644d1393986063d79ddb9bc186ba46b276508cfe3ed3d469471cd2ab1916a4e92", 0xda, 0x6c69, &(0x7f0000000000)={0x0, 0x989680}) getsockopt$inet_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000200), &(0x7f0000000240)=0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:32:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0xfffffffffffffe75, 0x8001, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0xe4d7}, 0xfffffffffffffd24) 15:32:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r2 = dup3(r0, r1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000040)) 15:32:01 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:32:01 executing program 3: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2570.090735] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2570.110344] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2570.118946] [31044] 0 31044 17553 8389 118784 0 0 syz-executor2 [ 2570.127777] Memory cgroup out of memory: Kill process 31044 (syz-executor2) score 8418000 or sacrifice child [ 2570.137757] Killed process 31044 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:01 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) memfd_create(&(0x7f0000000080)='bdev\x00', 0x2) mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x4, 0x100011, r1, 0x3f) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 15:32:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x200000000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0xef, @multicast2, 0x4e22, 0x3, 'sed\x00', 0x8, 0xfffffffffffffffe, 0x16}, 0x2c) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@sco={0x1f, {0x576, 0x3f, 0x81, 0x5fb7, 0x2, 0x1ff}}, 0x80, &(0x7f0000000300), 0x100000000000026d, &(0x7f0000000000)}, 0x4}], 0xff, 0x0) 15:32:01 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ppp\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00') r3 = socket$unix(0x1, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0xffff, 0xa0a00) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) ioctl$int_out(r4, 0x2, &(0x7f0000000300)) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/cgroup\x00') dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r10 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x80000) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x20000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14, 0x80000) accept(r10, 0x0, &(0x7f0000000600)=0xff81) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vga_arbiter\x00', 0x20600, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)=0xffffffffffffffff, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000800)=0xe8) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000880), &(0x7f00000008c0)=0x0) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000280)=@file={0x1, './file0//ile0\x00'}, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000a00)=[@rights={0x38, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7, r8, r9]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r12, r13, r15}], 0x98, 0x8003}, 0x1000000008001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r16 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000080)=0xfffffffffffffe84) openat$cgroup_procs(r16, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pid(r11, &(0x7f0000000840), 0x36d2769473e00e1) 15:32:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x9, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x3, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x10100) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000300)={'filter\x00', 0xe6, "d720cd3ea95839ac5b72eebad7ecdf6aa0cf1cf48770bd7e77081468131d9663d32b19d5ef5ca346c97faaeeb16e79b855f296f98c18b6143b319a9945433ca54e31df5355452265bb4d855421fb3a57e33a0e958201de27fe76a2ad91685da2273a430fe03b2de5912a19f54d6caf1e6023ddea9a1dccc90955f24eb3d9c3cf9440c0a4387bd71b721fa619971418fafa9445423f21d84bcddce5e064e2e43a874de2a0b33f57a58060229ff62020897fda9a6a75bfbde27042dec1a44f1f39ebd48379fce2ce6e8829f73fbf79f16c958bd5845d130716558f3d8585e80daa3302424791a4"}, &(0x7f0000000440)=0x10a) prctl$getname(0x10, &(0x7f0000000000)=""/80) r2 = socket$inet6(0xa, 0xb, 0x2893) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7fff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x1, 0x78, 0x40, r3}, 0x10) 15:32:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40080, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0xb0, 0x0, 0x4, [{0x2, 0x80, 0x17, 0x8436, 'wlan1trusted&\'*lo>proc@'}, {0x6, 0x2, 0x18, 0x100000001, "2125282a5e252873656c696e75789d707070307de2656d30"}, {0x6, 0xff, 0x0, 0x7}, {0x3, 0xfffffffffffffff9, 0xc, 0x5, 'vboxnet1\\.+*'}]}, 0xb0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x200000000000006, 0xdf) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:01 executing program 7: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x49) mremap(&(0x7f0000cfa000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00009ad000/0x3000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/13) 15:32:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0xc, 0x2, 0x13, 0x12, 0x6, 0x1ff, 0x0, 0x10b, 0xffffffffffffffff}}) [ 2570.177394] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2570.201923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2570.279216] device bridge_slave_1 left promiscuous mode [ 2570.284658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.300293] device bridge_slave_0 left promiscuous mode [ 2570.305713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2570.317533] team0 (unregistering): Port device team_slave_1 removed [ 2570.324599] team0 (unregistering): Port device team_slave_0 removed [ 2570.331558] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2570.345661] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2570.363944] bond0 (unregistering): Released all slaves [ 2570.444684] IPVS: ftp: loaded support on port[0] = 21 [ 2570.500514] bridge0: port 1(bridge_slave_0) entered blocking state [ 2570.506877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2570.513343] device bridge_slave_0 entered promiscuous mode [ 2570.522417] bridge0: port 2(bridge_slave_1) entered blocking state [ 2570.528746] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.535263] device bridge_slave_1 entered promiscuous mode [ 2570.544164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2570.554253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2570.570331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2570.581249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2570.603226] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2570.610082] team0: Port device team_slave_0 added [ 2570.618379] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2570.625165] team0: Port device team_slave_1 added [ 2570.633429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2570.643655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2570.655556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2570.666145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2570.705243] bridge0: port 2(bridge_slave_1) entered blocking state [ 2570.711591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2570.718152] bridge0: port 1(bridge_slave_0) entered blocking state [ 2570.724466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2570.844948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2570.861820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2570.879271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2570.896663] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2570.902746] 8021q: adding VLAN 0 to HW filter on device team0 [ 2570.976683] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2570.987539] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2570.992638] CPU: 0 PID: 31353 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2570.999890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2571.009232] Call Trace: [ 2571.011793] dump_stack+0xae/0xf0 [ 2571.015235] dump_header+0x7b/0x460 [ 2571.018835] ? ___ratelimit+0x139/0x150 [ 2571.022780] oom_kill_process+0xac/0x680 [ 2571.026815] ? out_of_memory+0x44/0x650 [ 2571.030762] out_of_memory+0x4af/0x650 [ 2571.034624] ? _cond_resched+0x17/0x60 [ 2571.038485] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2571.043475] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2571.048638] pagefault_out_of_memory+0x4f/0xa0 [ 2571.053209] mm_fault_error+0xec/0x270 [ 2571.057070] __do_page_fault+0x4ec/0x630 [ 2571.061105] ? __sys_socket+0x9f/0x160 [ 2571.064968] ? page_fault+0x8/0x30 [ 2571.068476] do_page_fault+0x37/0x160 [ 2571.072248] ? page_fault+0x8/0x30 [ 2571.075758] page_fault+0x1e/0x30 [ 2571.079179] RIP: 0033:0x43e461 [ 2571.082337] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2571.101344] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2571.106680] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2571.113924] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2571.121167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2571.128408] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2571.135649] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2571.142930] Task in /syz2 killed as a result of limit of /syz2 [ 2571.148899] memory: usage 1572kB, limit 0kB, failcnt 13216 [ 2571.154527] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2571.161264] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:02 executing program 7: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b45000/0x2000)=nil) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000a1f000/0x3000)=nil, 0x3000}, 0x1}) getsockopt(r1, 0x8, 0x58f, &(0x7f0000000280)=""/236, &(0x7f0000000380)=0xec) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) ioprio_set$pid(0x2, r2, 0x400) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/66, &(0x7f0000000040)=0x42) 15:32:02 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x44) 15:32:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x791, 0x111000) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000000c0)=""/196) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r2}) 15:32:02 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x40002) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x400000) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x22, 0x10, 0x70bd28, 0x25dfdbfd, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x24008090}, 0x40000) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) [ 2571.167393] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2571.187006] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2571.195626] [31353] 0 31353 17553 8389 118784 0 0 syz-executor2 [ 2571.204457] Memory cgroup out of memory: Kill process 31353 (syz-executor2) score 8418000 or sacrifice child [ 2571.214425] Killed process 31353 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:02 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x1cc, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:32:02 executing program 5: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x9, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:02 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x4, 0x3, 0xffff, 0x9, 0x0, 0x200, 0x20000, 0x4, 0x100, 0x9, 0x7d80000000000000, 0x8001, 0x3800000000000000, 0x15f, 0x0, 0x1000, 0x42, 0x1, 0x1, 0x5, 0x9b3, 0x1, 0x40, 0x9c, 0x8, 0x1f, 0x23, 0x0, 0x40, 0x0, 0x964, 0xe3, 0x9, 0x3, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x4c00000000, 0x3}, 0x1189c, 0x5, 0xfff, 0x4, 0x4, 0x7, 0x4}, 0x0, 0x1, 0xffffffffffffff9c, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(r0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 15:32:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) 15:32:02 executing program 7: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x1, 0x14, 0x100, 0x5, "25fcc50dd3f82ec01126acd450c52d9b7b648c8cf4f5a1f5d45d87349cb36e2a"}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000b45000/0x2000)=nil) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 15:32:02 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0//ile0/file0\x00', 0x302, 0x104) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:02 executing program 3: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x80001, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000013c0)={{0x7, 0x1, 0x3, 0x9b0b, 'syz0\x00', 0x101}, 0x0, 0x140, 0x1ff, r2, 0x4, 0x7f, 'syz1\x00', &(0x7f0000001340)=['\x00', '\x00', '/dev/null\x00', '}vmnet1system\x00'], 0x1a, [], [0x40, 0x3, 0x7]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001600)='/dev/null\x00', 0x10007, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001540)={'bridge_slave_0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0xc) ptrace$setopts(0x4206, r2, 0x7, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000240)={r4, 0x7, 0x30, 0x80000001, 0x7f}, &(0x7f0000000280)=0x18) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$setown(r1, 0x8, r2) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20400, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getpgrp(r2) connect$rds(r1, &(0x7f0000001580)={0x2, 0x4e20, @remote}, 0x10) timerfd_create(0x3, 0x80800) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x20000000000, 0x5, 0x9, 0xce, r6}, 0x10) fcntl$getown(r1, 0x9) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000001380)) r7 = gettid() r8 = getpgrp(r7) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f00000015c0), 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000001500)={{0x1000, 0xffe000000}, 0x4}, 0x10) munlockall() ptrace$setregset(0x4205, r8, 0x201, &(0x7f0000000000)={&(0x7f0000000340)="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", 0x1000}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 15:32:02 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f0000000300)=""/221) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2002, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:02 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffffffffffff8) 15:32:02 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) mremap(&(0x7f0000b8f000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00009ad000/0x3000)=nil) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/165) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x8, 0x4, 0x3a57, 0x80000001, 0x8001, 0x80000001, 0x400, 0x22, 0x7, 0x7, 0x2, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20002, 0x0) madvise(&(0x7f000099a000/0x7000)=nil, 0x7000, 0x10200000008) sync() setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0xf0) sendfile(r1, r0, &(0x7f0000000200), 0x9d1) r2 = msgget$private(0x0, 0x208) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000380)=0x200) r8 = gettid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0x4, r3, r4, r5, r6, 0x0, 0x8209}, 0x9, 0x2, 0x2, 0x200, 0x5, 0x5, r7, r8}) 15:32:02 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x4000000000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:02 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000340)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x9, 0x92, 0x6, 0x80000001, 0x2, 0x20000000, 0x0, 0x7, 0x2, 0x5, 0xffff, 0x5, 0x2, 0x8, 0xdd]}, &(0x7f0000000580)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={r1, 0x200}, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8007d, 0x0) bind$pptp(r0, &(0x7f0000000440)={0x18, 0x2, {0x3}}, 0x1e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000200)) r3 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0//ile0/file0\x00', 0x4) setsockopt$inet_dccp_int(r3, 0x21, 0x1f, &(0x7f0000000040)=0xaf3, 0x4) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) r5 = getpgrp(0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x3f0000, 0x6c7, 0x8000, 0x6000000, 0x0, 0x704, 0x10, 0x3, 0x80, 0x38f1, 0xffff, 0x2, 0xfffffffffffffff7, 0x80000001, 0x7, 0x6, 0x7fffffff, 0x2008, 0x100000000, 0x1000, 0x1, 0x10000, 0x3, 0x6d33a79a, 0x7, 0x401, 0x3ff, 0x2fd, 0x7, 0x3, 0x5, 0x2, 0x10000, 0x3, 0x7, 0x1c0000000000, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x800, 0x10001, 0x4, 0x4, 0x7fffffff, 0x101, 0x800}, r5, 0xb, r0, 0x1) [ 2571.247388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2571.274788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2571.306444] IPVS: ftp: loaded support on port[0] = 21 [ 2571.356201] device bridge_slave_1 left promiscuous mode [ 2571.361634] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.372318] device bridge_slave_0 left promiscuous mode [ 2571.377720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2571.389563] team0 (unregistering): Port device team_slave_1 removed [ 2571.396527] team0 (unregistering): Port device team_slave_0 removed [ 2571.403418] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2571.416660] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2571.431934] bond0 (unregistering): Released all slaves [ 2571.470266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2571.476653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2571.483209] device bridge_slave_0 entered promiscuous mode [ 2571.492539] bridge0: port 2(bridge_slave_1) entered blocking state [ 2571.498876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2571.505341] device bridge_slave_1 entered promiscuous mode [ 2571.514887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2571.525204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2571.542422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2571.553452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2571.575889] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2571.582692] team0: Port device team_slave_0 added [ 2571.590964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2571.597798] team0: Port device team_slave_1 added [ 2571.606102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2571.616555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2571.626962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2571.633921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2571.641511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2571.649422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2571.656434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2571.663877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2571.700677] bridge0: port 2(bridge_slave_1) entered blocking state [ 2571.707036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2571.713546] bridge0: port 1(bridge_slave_0) entered blocking state [ 2571.719868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2571.726558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2571.847312] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2571.853409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2571.870299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2571.887413] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2571.893555] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2571.900286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2571.906925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2571.922832] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2571.928919] 8021q: adding VLAN 0 to HW filter on device team0 [ 2572.003729] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2572.014609] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2572.019718] CPU: 0 PID: 31689 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2572.026971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.036300] Call Trace: [ 2572.038860] dump_stack+0xae/0xf0 [ 2572.042300] dump_header+0x7b/0x460 [ 2572.045914] ? ___ratelimit+0x139/0x150 [ 2572.049863] oom_kill_process+0xac/0x680 [ 2572.053901] ? out_of_memory+0x44/0x650 [ 2572.057854] out_of_memory+0x4af/0x650 [ 2572.061743] ? _cond_resched+0x17/0x60 [ 2572.065603] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2572.070908] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2572.076072] pagefault_out_of_memory+0x4f/0xa0 [ 2572.080628] mm_fault_error+0xec/0x270 [ 2572.084489] __do_page_fault+0x4ec/0x630 [ 2572.088524] ? __sys_socket+0x9f/0x160 [ 2572.092386] ? page_fault+0x8/0x30 [ 2572.095899] do_page_fault+0x37/0x160 [ 2572.099672] ? page_fault+0x8/0x30 [ 2572.103187] page_fault+0x1e/0x30 [ 2572.106613] RIP: 0033:0x43e461 [ 2572.109773] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2572.128874] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2572.134221] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2572.141481] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2572.148722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2572.155986] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2572.163232] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2572.170617] Task in /syz2 killed as a result of limit of /syz2 [ 2572.176603] memory: usage 1572kB, limit 0kB, failcnt 13224 [ 2572.182220] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2572.188962] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0xff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="3dce6d6d6f9aa241411ec0790b621618884ade5abe7d0e49f619af83e0c40d189fa78214cba1a1bc749f1f92a4f53a8abc8cbe2120a69c08e275ca126a0a763ee7427b8615f6e6bcd8641e1c0550ff56b5530ea102b72013aca66a893ab4e0a22e623a1a97312827183dd98fc03a7d2f2d96243d272300894a1851cb3a86cc530ad8ce098f633510a5c73fe7a357214821cc4f12ffc90aeed6a828db1e77890db7ab58578afee9d27a7ab638", 0xac}], 0x1, &(0x7f0000001580)}}], 0x243, 0x0) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200800, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r3, r0, 0x9}) 15:32:03 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, r3) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x17a, 0x0) ioctl$TIOCCONS(r4, 0x541d) 15:32:03 executing program 5: statfs(&(0x7f0000000180)='.\x00', &(0x7f0000000280)=""/162) 15:32:03 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x40b) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:32:03 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x0, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:32:03 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r2, &(0x7f0000000040)=@random={'trusted.', '\x00'}) 15:32:03 executing program 7: r0 = userfaultfd(0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f0000863000/0x3000)=nil, 0x8150000}, 0x200000}) 15:32:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') syz_open_procfs(0x0, &(0x7f00000001c0)) 15:32:03 executing program 0: mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair(0x0, 0x6, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1b) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 2572.195098] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2572.214744] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2572.223362] [31689] 0 31689 17553 8389 118784 0 0 syz-executor2 [ 2572.232224] Memory cgroup out of memory: Kill process 31689 (syz-executor2) score 8418000 or sacrifice child [ 2572.242192] Killed process 31689 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:03 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x10270) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1c, &(0x7f0000000040)=0x9f, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x7, 0x0, "e6b68c861975c7a61118a7bee192e6e8b7c82052664b7b43e08f60ada7f21b10d52c59185bea93367629af0961e083cb1dead8efb30aa8569a33e88a06e9748a5dfa38757a2d0e11b7eafa492ef7ca4d"}, 0xd8) 15:32:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:03 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x10000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) syncfs(r0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:03 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) getsockname(r0, &(0x7f0000000280)=@ax25, &(0x7f0000000080)=0x80) 15:32:03 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x804, 0x0, 0x1}, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)='!', &(0x7f0000000100)}, 0x20) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0xdd) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x0, 0x80fe}, 0x314, &(0x7f00000001c0), 0x12f}, 0x0) r2 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) [ 2572.286718] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2572.310184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2572.320905] IPVS: ftp: loaded support on port[0] = 21 15:32:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffbc, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000001980)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, r1}, 0xc) [ 2572.330826] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2572.386207] device bridge_slave_1 left promiscuous mode [ 2572.391676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2572.401302] device bridge_slave_0 left promiscuous mode [ 2572.406763] bridge0: port 1(bridge_slave_0) entered disabled state [ 2572.418610] team0 (unregistering): Port device team_slave_1 removed [ 2572.425538] team0 (unregistering): Port device team_slave_0 removed [ 2572.432462] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2572.444665] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2572.461923] bond0 (unregistering): Released all slaves [ 2572.489399] bridge0: port 1(bridge_slave_0) entered blocking state [ 2572.495759] bridge0: port 1(bridge_slave_0) entered disabled state [ 2572.502249] device bridge_slave_0 entered promiscuous mode [ 2572.511414] bridge0: port 2(bridge_slave_1) entered blocking state [ 2572.517732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2572.524262] device bridge_slave_1 entered promiscuous mode [ 2572.533232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2572.543162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2572.560191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2572.571099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2572.593215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2572.599991] team0: Port device team_slave_0 added [ 2572.608133] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2572.614886] team0: Port device team_slave_1 added [ 2572.623058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2572.633290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2572.643300] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2572.650284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2572.657716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2572.665630] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2572.672560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2572.680240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2572.716626] bridge0: port 2(bridge_slave_1) entered blocking state [ 2572.723007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2572.729506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2572.735818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2572.742544] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2572.863792] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2572.869917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2572.887309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2572.904377] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2572.910503] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2572.917205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2572.923857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2572.939838] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2572.945912] 8021q: adding VLAN 0 to HW filter on device team0 [ 2573.020712] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2573.031610] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2573.036713] CPU: 0 PID: 32003 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2573.043965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2573.053291] Call Trace: [ 2573.055869] dump_stack+0xae/0xf0 [ 2573.059305] dump_header+0x7b/0x460 [ 2573.062909] ? ___ratelimit+0x139/0x150 [ 2573.066853] oom_kill_process+0xac/0x680 [ 2573.070884] ? out_of_memory+0x44/0x650 [ 2573.074842] out_of_memory+0x4af/0x650 [ 2573.078701] ? _cond_resched+0x17/0x60 [ 2573.082572] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2573.087567] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2573.092727] pagefault_out_of_memory+0x4f/0xa0 [ 2573.097298] mm_fault_error+0xec/0x270 [ 2573.101166] __do_page_fault+0x4ec/0x630 [ 2573.105200] ? __sys_socket+0x9f/0x160 [ 2573.109059] ? page_fault+0x8/0x30 [ 2573.112566] do_page_fault+0x37/0x160 [ 2573.116335] ? page_fault+0x8/0x30 [ 2573.119843] page_fault+0x1e/0x30 [ 2573.123278] RIP: 0033:0x43e461 [ 2573.126434] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2573.145424] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2573.150756] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2573.158013] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2573.165252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2573.172493] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2573.179734] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2573.186997] Task in /syz2 killed as a result of limit of /syz2 [ 2573.192986] memory: usage 1572kB, limit 0kB, failcnt 13232 [ 2573.198594] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2573.205328] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:04 executing program 7: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x80) unshare(0x20400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010041}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x500, 0x3e, 0x326, 0x70bd2b, 0x25dfdbfc, {0x17}, [@generic="30529b97639bfe19babaeed6f794997343c7", @generic="7e45b7ebd045e5917bcf2ea20698838f9f80f2d80e7cc97c5f4b4474d3d45f7480d238132e9b8c4e496e62451a0e134084b8b2ab93116faed1008b06d549645d309414067cc12846581e9101ec84e88fa26a0a07cd2612", @generic="c9b6841ce69148dfa742ee61840698c41d2c27672466e72923db401f900594aa954f772b339a4937f81af7317f2643e20b41f2f74ab6a263088d081c97a23a977f721f754006e25a0db75b25c188e22d3178cee33faf5dcfa7e594b7c3fc86559db67d1a1533452c0f764553ec8ce536dce8630e3641b9589d28288cdcd441d151b680392c41434b0ac4b5286c561f4ebecdae1086c657e3f92ca9e8c40efbc2d06bbfba13327023f600cd5d13faa77ce665f9", @typed={0xd8, 0x52, @binary="1f66c6cbe0a8f46b927b0302f9c31504554c2a43198008b272a09799446c6353a6c8cf1c6c836585eead73e60f417c951fd22344586a22e07fb1ebc1c27b1f3b01419ae43177fcb15de073c2b7c7af9027922207c9e733449a53ddb9517bee571fc2ad52b62590941240d82e49030abe2df85ab52f819fe815386a6b9895170cc2687eed8f717081a6eadd08851654362e18241ae2575bc892dd996ce8c1ca12bf711a81e6216301a221026c42117c09c9f64571026db7fc8933ae9354063bb49367c0d51ff1b696d053371589a69d77ed9c856d"}, @generic="8611f6fd5623dcaf77e43e6cb93facb6fe93946e046be9ab2d5a52752284b9e58e5cad0b1f754a4834a71bb60c06c5381e855c85c24dab4606b65d264b4e73aa451505a70595e40fd831ba1829e8b6637956fe164b7a803aff65d61b6ab4cf1e639fa96762bc07d51509639a5b78b0e867986b8231a754f6ee6aa4473267c0167da335eff08c3426fad49b66f7673d67057dae817845a0c55cba64", @nested={0x250, 0x61, [@generic="0a4a33cea3198db133fc1cb42c93dfee359ec45503d51e14db8baeb8041b9a700800e49c4101749f3a6fd5cbfbf1ef598f30ec9882a54d088c247e6221fc48a5269f186e71a59cb7eef4a32be0127b491dbfd45ab720d5931a9e5d5c53ac2ce135f760bcfbae71f0f694c8512218abbfdca95c0c50f8ee0a86a6782926c8677000ca10d08f38b8fe129ed2f35e0b022f7f108f7fc442487e91bbae84129e22ed18576ddd5f7890b6f54fd9bbd071eb045d97fe6928afae0d477382a7fe10887bfcd0d196d57ee63f425aa076c575b7ae51fc6f5c", @typed={0x8, 0x5, @pid=r1}, @generic="a638e9b3a1387c47ffde807770f0daa51448c5e4a8f36b258981493fca7c99f6baa3e32b1b8ef4dd6d78270e3b6d31e5e7de77a7b31aef7638a8867ad2cf72bcff706fcbcb2b979a22ec662834b83a8d4d8e1c76e0477951de3e4ea836e11acdfdadac240706d21ef9ce9ef24485cd265e0fc37629870c863ec1ea2990573a047c65e26a00620f4d1c7b9e52093983d32e3539e3e3bd7e4dc3def3715cf0aca7a8e56b37447139f71081d2fdefb487464c65476446b6c3e6d1659eb6f8de4ee4f2c30db93c9adbb4dcdb486e1417c8eb4d30dead2162e89b03b7a9d465ada0dbe28713e8bbb5d54f45f41b8f64749cef65bfeb10beeb556d", @generic="a48516361395228c4d1adedf737b7dbe9b84a141aea0accdcdc27a69375f28c736dbe946d8bb5fc2461fa7594240f435195d2e1b425d1c5feb0131975777c9f1d7f6a3069d681985cc9da18494be6a1047904f73a8abeffca3f2c6ff33001a54a3903a", @typed={0x14, 0xf, @ipv6=@mcast1}]}, @nested={0xc, 0x38, [@generic="ed9de72ba478"]}]}, 0x500}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) flock(r0, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000640)={{0xa, 0x4e24, 0x6}, {0xa, 0x4e22, 0x4, @mcast2, 0x800}, 0x1, [0x8, 0x101, 0x5, 0x9, 0x8, 0x8001, 0x800, 0xe256]}, 0x5c) 15:32:04 executing program 3: rt_sigreturn() r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x54bcc0, 0x0) listen(r0, 0x5ff8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:04 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:04 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x84000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8ecd) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000140)=0x7) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000180)=r1, 0xffffffffffffff3b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140606fbff000000000000000000000000"], 0x14}}, 0x0) ioctl(r0, 0x43, &(0x7f0000000300)="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") 15:32:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000001380), 0x0, &(0x7f0000001580)}}], 0x1, 0x0) 15:32:04 executing program 5: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="420000007e89c6f4be48e8e178e6a70b944321574659940428282acf6d5963dee3030a915501f0141223fc008f00000000000000d927b89f87d2b42807e88f611640fae44c0d47e58c79d22e5696699c9222"], &(0x7f0000000000)=0x4a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x5c9, 0x101}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x0, {{0xa, 0x4e20, 0xfffffffffffff001, @remote, 0x7}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x6, @ipv4={[], [], @local}, 0x41f}}, {{0xa, 0x4e22, 0x6b, @dev={0xfe, 0x80, [], 0x12}, 0x7}}, {{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x17}, 0xffffffff}}]}, 0x210) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={'ip_vti0\x00', {0x2, 0x4e23, @local}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'lo\x00', 0x4}, 0x18) listen(r2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) 15:32:04 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x0, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:32:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) [ 2573.211450] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2573.231058] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2573.239659] [32003] 0 32003 17553 8388 114688 0 0 syz-executor2 [ 2573.248487] Memory cgroup out of memory: Kill process 32003 (syz-executor2) score 8416000 or sacrifice child [ 2573.258439] Killed process 32003 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:32:04 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x900, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x10000, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x101000, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x1340, 0xb, 0xb, 0x201, 0x70bd29, 0x25dfdbfd, {0xf, 0x0, 0x3}, [@generic="79f36a51ec57244395d57a859532a237d59ae5ed01cdc920400dd43aa83305886de2f0e3fc42f1dc60e3a521552f95258bc7ea54d89cdb27a1b9093e2ee9d0240e7cd738d06d232b96d5872aeb985b752b4355d379343d9bd61f1d1101d6dc68b02af37bb779f39fb7b5bad038f5aa311a79311f0e8dcc9b185e6a45d38b84690cd6133f2d0db3d9917580ec625eeba74e9cfad69036302e9b34d5a0d6a9c4613dcce33a758bf8d62f8c632b4e4bf5b809ceba9a4b57114c4ece764464bb59b59ebc0bd7f0904683f4d578729ad80af264c3a2489806045300d92f6ba4b08f1358", @typed={0x4, 0x2c}, @nested={0x18, 0x5d, [@generic="c242f309e589ccdbb7", @typed={0x8, 0x47, @fd=r1}]}, @nested={0x10f8, 0x88, [@generic="b7d8cd339ad66850ed12d341ccb5d0f778a25d66f6412ea6c93836bb42918d01fe5b7612fb523b6f3669d1592bb56ccf756e7d754ec183767110494ca48b2f7dc09a3544c0e5d80394522252d3e87bcf084a41bc8165db591cfec4608cefdc2d599242cbe857ff450150201a1e2be707983579214c4b16572364d0525fc11664e63e1717d9297f3d4d79ab8786785eab4c531181599397f4e1fff1fa62bd3c84b4e56c43e18c34c35c0ac681e2f40e34105d80c6aedd6c0c55105e30329ec853a113e7e6ba3920a689b5a38ea3ce692ce60ecd6605092afa", @typed={0x14, 0x64, @ipv6=@mcast2}, @typed={0x8, 0x2b, @ipv4=@loopback}, @generic="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"]}, @generic="495d58f9510f177307e930e1e77799fedc786555071828034bb49936bafde52f05a0a37b67244444b2ba337dc50fda8e83ae63e5f3d1aa7a1e36814111b90ca99ef6ac04eb406a9458e194339ec0b89bced658a77cbd73def7087da9a585e2cd457224b80d7fe8f5da47cc8864ca7abab9ce20e9156bc76678f5b5bf7549d501ed7970a799eea0b8fbc6682e8afdce75f5c4248ccdeb6fddca44d7fb432f4167d3f14f6ad74d69fa6d2ad509852f3bccd1696dc55899944a4b04d6", @typed={0x8, 0x30, @fd=r2}, @generic="68cfa8ad95c6d4b448fa580fa5e11774e5d48fb84ffda978d5f9b3667851fe82ca5bcc594d8162795949dfac697a08119aa8bee943050add77d2278823a87213f0253ae5c69a663f633e858912cb4feac121907637b3e59591cd3ecaf74ec9c89c2d6dd26fb67581981f2f69ffdf9c6f0b05100b"]}, 0x1340}, 0x1, 0x0, 0x0, 0x20000884}, 0x20000000) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000000)="be61230564cec32316e08cac6b023914069d76202b9ab62c2ba26f5a905d529d36ac082b95eda0eae65db4491504396ac6bb0f824901e37641217cf780caa414cf89428ec623a3622e8b6be2bec2b42772333d1bbce6e7960a4d8e99c1db3184f54c14987185e2a2786ef37419c7c8ec6887e1a8fae30878d8d4ddc11621de68199cf660bd6868", 0x87, 0x10, &(0x7f00000000c0)={0xa, 0x4e20, 0x1000, @mcast1, 0x4}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200)=0x20000000000003, 0x4) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 15:32:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:04 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x2) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23}}, 0xb5, 0x47e1a129, 0x8, 0x97, 0x1}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x8000}, 0x8) r2 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) accept$unix(r0, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) 15:32:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400240, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) write$P9_RREAD(r1, &(0x7f0000000040)={0x6f, 0x75, 0x2, {0x64, "a0c92c77f52104b226407d9168e71562f22c26891bf490567d56d6f3e4d51a521a04e10cfe84015158e8041f64447177f0423308dbff2346d81e922270130c5547bd512b6befa96d787e696d772c0a87b6d887f3b552f2552ae14f24ec30043ef01252bb"}}, 0x6f) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) 15:32:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x800000000000}}, 0x352) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x4e20, 0x0, 0x4e20, 0x8, 0xa, 0x0, 0xa0, 0x3c, r1, r2}, {0x3f, 0x1, 0x3, 0xb9fc, 0x2, 0x0, 0x5, 0xeaee}, {0x1ff, 0xbd, 0x0, 0x7f}, 0xdc0, 0x6e6bbc, 0x3, 0x0, 0x3, 0x3}, {{@in6=@loopback, 0x4d3, 0xff}, 0xa, @in, 0x3501, 0x1, 0x3, 0x5, 0x5, 0x75, 0x3}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) 15:32:04 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x100) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='teql0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x1a6, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0xfffffffffffffd50) 15:32:04 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='cgroup2\x00', 0xffffffffffffff9c}, 0x10) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x1ff) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:32:04 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x1000007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x800000200}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2318}) 15:32:04 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fcntl$notify(r1, 0x402, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0x2, 0x1, 0x7f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000280)) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) 15:32:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000080)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x1, 0x30, 0x3b70, 0x63a4374d}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000400)={r2, @in={{0x2, 0x2, @local}}}, 0x84) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000000)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="bc7f65f7b63cf93bb1d3da82fd0136e3eb908acbdff911132e7212d8975364e883ddfba3288c47de5d5a2a79d2d4b35f3e803b14d91a06ce7a1b45f8", 0x3c}, {&(0x7f00000000c0)="6813076cf3b5b16997329904fa9cf039ba2734105b03c23c58b5f2b8e59ff2e33f9fe9101bec64", 0x27}, {&(0x7f0000000180)="3e8f94064daaa493be8e8621794bc4cec6", 0x11}, {&(0x7f00000001c0)="afd932eaaea67603aabef7954ce3e0867e622fe3a2545b226e77e3a72597a3f4547a1ac84cd9c71240b546cfbdba0ac4efd676027f6ae5c1401cf7f8d508", 0x3e}], 0x42, &(0x7f0000001580)}}], 0x1, 0x0) 15:32:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x0) getpeername$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) ioctl$RTC_UIE_ON(r1, 0x7003) [ 2573.296091] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2573.312776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2573.366535] IPVS: ftp: loaded support on port[0] = 21 [ 2573.392213] device bridge_slave_1 left promiscuous mode [ 2573.397661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2573.407346] device bridge_slave_0 left promiscuous mode [ 2573.412752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.426428] team0 (unregistering): Port device team_slave_1 removed [ 2573.433320] team0 (unregistering): Port device team_slave_0 removed [ 2573.440061] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2573.452604] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2573.473890] bond0 (unregistering): Released all slaves [ 2573.519661] bridge0: port 1(bridge_slave_0) entered blocking state [ 2573.525996] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.532516] device bridge_slave_0 entered promiscuous mode [ 2573.541502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2573.547845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2573.554399] device bridge_slave_1 entered promiscuous mode [ 2573.563393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2573.573475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2573.589444] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2573.600188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2573.622341] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2573.629182] team0: Port device team_slave_0 added [ 2573.637229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2573.643979] team0: Port device team_slave_1 added [ 2573.652065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2573.662303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2573.672103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2573.679089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2573.686570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2573.694438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2573.701354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2573.708785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2573.743706] bridge0: port 2(bridge_slave_1) entered blocking state [ 2573.750036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2573.756530] bridge0: port 1(bridge_slave_0) entered blocking state [ 2573.762841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2573.769527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2573.885391] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2573.891469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2573.908086] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2573.924788] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2573.930918] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2573.937655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2573.944300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2573.959489] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2573.965573] 8021q: adding VLAN 0 to HW filter on device team0 [ 2574.037723] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2574.048653] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2574.053753] CPU: 1 PID: 32339 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2574.061025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.070353] Call Trace: [ 2574.072914] dump_stack+0xae/0xf0 [ 2574.076337] dump_header+0x7b/0x460 [ 2574.079936] ? ___ratelimit+0x139/0x150 [ 2574.083880] oom_kill_process+0xac/0x680 [ 2574.087908] ? out_of_memory+0x44/0x650 [ 2574.091850] out_of_memory+0x4af/0x650 [ 2574.095705] ? _cond_resched+0x17/0x60 [ 2574.099564] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2574.104549] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2574.109724] pagefault_out_of_memory+0x4f/0xa0 [ 2574.114279] mm_fault_error+0xec/0x270 [ 2574.118136] __do_page_fault+0x4ec/0x630 [ 2574.122212] ? __sys_socket+0x9f/0x160 [ 2574.126072] ? page_fault+0x8/0x30 [ 2574.129582] do_page_fault+0x37/0x160 [ 2574.133389] ? page_fault+0x8/0x30 [ 2574.136900] page_fault+0x1e/0x30 [ 2574.140324] RIP: 0033:0x43e461 [ 2574.143480] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2574.162474] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2574.167811] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2574.175054] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2574.182297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2574.189542] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2574.196785] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2574.204052] Task in /syz2 killed as a result of limit of /syz2 [ 2574.210037] memory: usage 1572kB, limit 0kB, failcnt 13240 [ 2574.215649] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2574.222437] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2574.228575] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2574.248203] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2574.256806] [32339] 0 32339 17553 8388 114688 0 0 syz-executor2 [ 2574.265638] Memory cgroup out of memory: Kill process 32339 (syz-executor2) score 8416000 or sacrifice child [ 2574.275605] Killed process 32339 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:32:05 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, [{}], {@generic={0x4305, "0a158c154ce46b2ed38d8f70b33c110d966e8c759f753017"}}}, &(0x7f0000000100)) r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x800) 15:32:05 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x0, 0x10000, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) 15:32:05 executing program 7: r0 = socket$kcm(0xa, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000140)=0x30) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x8]}, 0x7}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)='E', 0x1}], 0x1, &(0x7f0000000240)}, 0x40040) 15:32:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:05 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0//ile0\x00'}, 0x6e) 15:32:05 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), 0x7}, 0x20) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000100), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f06000000, 0x0, 0x80fe}, 0x1b, &(0x7f0000000000)=[{&(0x7f0000000180)="edb4d4ccc1c6e26a7b2873216d61eb0540495f07ef216367607eaa090be6f332c08ac3dceb84969e", 0x28}], 0x1}, 0x40000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0x1000, @mcast2, 0x3}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="05acc447e695f7639e9839d657ceed9c7604ca0c727fe159c77a9061207488bec7e0e2575516c4de9796537b904fee3a02f886deb4f29d755efacb1fa59ed48e6cb32b3a2c9e2255a1b4a58d17114c8446dbc90bafc3e039563d0fa150144c577fe467972b4b6c9616604793010dbdb072df86bcb963de007ff3ef459a94716d79caac3e7a6c45573bf129d2071c7577edd4f6e074cebe045d43a6ad1454167fbb939b01348b59a674979e206924c49e9ddb2e9f6e5a428ca2", 0xb9}], 0x1, &(0x7f0000000340)=[{0x88, 0x11f, 0x100, "bb16b54066a6d17ddd2ceb765530e39c435b8f07a42859561c59f8b76ba587c470eb8b40304df03d9c223e9fc5bc922f248c0df1b87209e4726837e045b06dfb309332d7da1add4f3189854f24aca44646f454cedb4c09f433b7bcada6b413e54513cb22fdd2944d9201b3d2897db5f08409b21f5e1f"}, {0x58, 0x13f, 0x3, "3f73a6574b4a0abf20d7a66a5688331c4d9f3b362e3d42c6ee5de56c15473d8f0a2480fcb78de31fe0b8dc80bfe0a91d75ab806840f9f15ed9cc9554d6d64c031d"}, {0x1010, 0x41e5066626023040, 0x7, "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"}, {0x20, 0x0, 0x10001, "1f07a7fe0b0eec90b1e2b1429ee468"}], 0x1110, 0x14}, 0x4000080) 15:32:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xfffffffffffffffe}}, 0xe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='schedstat\x00') ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001580)}}], 0x4000000000002fc, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x2, 0xa28e440c547d117b) 15:32:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xa36, 0x40000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/77) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x4e23, @loopback}}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x10) 15:32:05 executing program 0: r0 = memfd_create(&(0x7f0000000000)='8\x00', 0x1) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x81) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 15:32:05 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x7fff, @ipv4={[], [], @local}, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @local}], 0x2c) 15:32:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xfffffffffffffe4a, &(0x7f0000000640)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xb, @loopback={0x3f00000000000000}}]}}}]}, 0x48}}, 0x2) 15:32:05 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="b3", 0x359, 0xfffffffffffffffb) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x264) [ 2574.286133] oom_reaper: reaped process 32339 (syz-executor2), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 2574.323512] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 15:32:05 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffffffbf, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x4, 0x630, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000040), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1f, 0x21, 0xc7dd, 'yam0\x00', '\x00', 'bridge_slave_0\x00', 'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x1e8, 0x218, 0x248, [@comment={'comment\x00', 0x100}, @nfacct={'nfacct\x00', 0x28, {{'syz0\x00', 0x7fffffff}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x13, 0x3, 0xfbff, 'ip6tnl0\x00', 'ip6tnl0\x00', 'yam0\x00', 'sit0\x00', @dev={[], 0x1a}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xb0, 0xe8, 0x130, [@connbytes={'connbytes\x00', 0x18, {{0x2, 0x4, 0x3, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"4dfa0575973e06b15571ba18fd3aac59d41b4ae3a18f8aa6b127eb6c7631"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x3, 0x2, 0x0, 'syzkaller1\x00', 'veth0_to_bond\x00', 'ip6gretap0\x00', 'bridge0\x00', @random="dc5a2d746650", [0xff, 0xff, 0xff, 0xff], @random="2dc6bb38143b", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xd0, 0x100}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1000}}}}, {{{0x5, 0x44, 0x896d, 'team_slave_1\x00', 'bond_slave_1\x00', 'bridge_slave_0\x00', 'bpq0\x00', @random="04f467fe02b7", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @random="a3905faa9d9a", [0xff, 0x0, 0x0, 0xff], 0xb0, 0xb0, 0xf8, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x3, 0x5}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x9, 0x5, 0xff}}}}]}]}, 0x6a8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:05 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0//ile0\x00', 0x200) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 15:32:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="025c7335117913c81f46d0e73e2f195052b700836f8db1e8cae5170e05003e078f764070d77fbee45cabea78aa5782f09b73d55f67606a6ef5908a3c06ceaeff2d79883d7046cfb12fb4849b2d9a1ca6b6d8fbb7ac121fb8ebdcd2d5f7e88ab524e8b66b3d09b02ee51624c2a542f38a0c72ea95c558dd5625d5e3e502e6419396eaae50c66d7377") unshare(0x400) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000100), r0, &(0x7f00000006c0), 0x1000, 0x0) 15:32:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r1, &(0x7f0000000340)="3c7cf8fec68649abd4362b9a29a55a7cce04d7333719b5407c91f0c768ad4d5e3a727d559be8df629bc7a62b563be2aecfa52bdb73398434a2c7d23966eae038f1e7506a30e235c995856a", 0x4b) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x10000, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000005c808c5290a25f229113da338edc8226", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x2c) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x84) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2574.341684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2574.381145] IPVS: ftp: loaded support on port[0] = 21 [ 2574.422203] device bridge_slave_1 left promiscuous mode [ 2574.427676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2574.437315] device bridge_slave_0 left promiscuous mode [ 2574.442709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2574.454435] team0 (unregistering): Port device team_slave_1 removed [ 2574.461230] team0 (unregistering): Port device team_slave_0 removed [ 2574.467983] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2574.478601] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2574.491882] bond0 (unregistering): Released all slaves [ 2574.527594] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.533978] bridge0: port 1(bridge_slave_0) entered disabled state [ 2574.540544] device bridge_slave_0 entered promiscuous mode [ 2574.549769] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.556115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2574.562592] device bridge_slave_1 entered promiscuous mode [ 2574.572116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2574.581868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2574.598046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2574.608700] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2574.630200] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2574.636962] team0: Port device team_slave_0 added [ 2574.645000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2574.651770] team0: Port device team_slave_1 added [ 2574.659782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2574.670025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2574.680275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2574.687248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2574.694698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2574.702589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2574.709526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2574.717111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2574.752731] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.759079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2574.765581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.771914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2574.778559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2574.893440] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2574.899525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2574.915758] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2574.932288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2574.938381] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2574.945060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2574.951731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2574.966676] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2574.972753] 8021q: adding VLAN 0 to HW filter on device team0 [ 2575.044726] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2575.055592] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2575.060696] CPU: 0 PID: 32645 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2575.067945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2575.077272] Call Trace: [ 2575.079831] dump_stack+0xae/0xf0 [ 2575.083270] dump_header+0x7b/0x460 [ 2575.086868] ? ___ratelimit+0x139/0x150 [ 2575.090810] oom_kill_process+0xac/0x680 [ 2575.094838] ? out_of_memory+0x44/0x650 [ 2575.098779] out_of_memory+0x4af/0x650 [ 2575.102679] ? _cond_resched+0x17/0x60 [ 2575.106540] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2575.111546] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2575.116731] pagefault_out_of_memory+0x4f/0xa0 [ 2575.121290] mm_fault_error+0xec/0x270 [ 2575.125156] __do_page_fault+0x4ec/0x630 [ 2575.129203] ? __sys_socket+0x9f/0x160 [ 2575.133073] ? page_fault+0x8/0x30 [ 2575.136581] do_page_fault+0x37/0x160 [ 2575.140353] ? page_fault+0x8/0x30 [ 2575.143869] page_fault+0x1e/0x30 [ 2575.147310] RIP: 0033:0x43e461 [ 2575.150473] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2575.169464] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2575.174798] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2575.182039] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2575.189282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2575.196524] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2575.203799] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2575.211206] Task in /syz2 killed as a result of limit of /syz2 [ 2575.217186] memory: usage 1572kB, limit 0kB, failcnt 13248 [ 2575.222799] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2575.229541] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x2880) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipddp0\x00', 0x502}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x1) 15:32:06 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) unlinkat(r0, &(0x7f0000000200)='./file0//ile0\x00', 0x200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0//ile0\x00', 0xfffffffffffffffc, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) fcntl$getown(r1, 0x9) r3 = fcntl$getown(r2, 0x9) r4 = getpgid(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000280)={{0x6, 0x3, 0x4, 0x5, 'syz0\x00', 0x80000000}, 0x1, 0x45, 0x5, r4, 0x1, 0x2, 'syz1\x00', &(0x7f0000000000)=['wlan0selinuxppp1)md5sumvmnet1]\'vboxnet0\x00'], 0x28, [], [0x4, 0xff, 0x10001, 0xbb7c]}) 15:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:06 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x1, 0x0) r1 = getpgid(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x183c0000, {{0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, [], 0x21}, 0x7ff}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x53, @ipv4={[], [], @multicast1}, 0xb0}}, {{0xa, 0x4e22, 0x0, @empty, 0x9}}]}, 0x190) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000004c80)={@dev, @mcast1, @loopback, 0x0, 0xffffffffffffff12, 0x0, 0x0, 0x0, 0x8184007d}) 15:32:06 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x90041, 0x0) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000280)="4f93a32b01976abd20f4a4d891f58fed7ba4325002efc0e08217fb9cffbfc148886756063cd4287332c381c90eb6e8e8c6ad62641945a76c27d9b76cadda43") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r3, 0x0, 0x2, 0x4}}, 0x20) connect$unix(r1, &(0x7f0000000040)=@abs, 0x6e) 15:32:06 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$TIOCSBRK(r1, 0x5427) connect(r0, &(0x7f0000002000)=@ethernet, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000780)={&(0x7f0000000680), 0x10, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000cd6b5c31a0712a6d"], 0x6}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000007c0)={{0x5, 0x0, 0x1, 0x6, 'syz1\x00', 0x20}, 0x0, [0x200, 0x100000000, 0x3aa80000000, 0x7fffffff, 0x80, 0xffffffffffffffe1, 0xe00b, 0x7, 0x8001, 0x3f, 0x5, 0x80000000, 0x8, 0x20, 0x2, 0xb02c, 0x8, 0x1, 0xfffffffffffffff7, 0x3, 0x8001, 0xff, 0x8, 0x9, 0xffffffffffffffd8, 0x6, 0x1, 0x7, 0x20, 0x6, 0x9, 0x2, 0xe4de, 0x4, 0x10000, 0x100, 0x1ff, 0x1f, 0x8, 0x1, 0x5, 0x81, 0x100, 0x0, 0x1, 0x5, 0x8, 0xa02, 0x6, 0x5, 0x1, 0xfffffffffffffffa, 0x6, 0x7f, 0x5, 0x80000000, 0x7, 0x8001, 0x3e4f1515, 0x4, 0x8000, 0x5, 0x80000000, 0xfffffffffffffff7, 0x3, 0x100000001, 0x401, 0x3, 0x8, 0x8, 0x5b, 0xffff, 0xfffffffffffffffd, 0x6b800000, 0x2, 0x8, 0x7, 0x1ff, 0x8, 0x400, 0x800, 0x0, 0xfc, 0x3, 0x0, 0x10000, 0x9, 0x6, 0x9, 0x7e45, 0x6, 0x1000, 0x7, 0xebd4, 0x0, 0x3, 0x1, 0x4, 0xfe2, 0x1cc4, 0x9, 0x0, 0x2, 0xffffffffffffffa2, 0x0, 0x6, 0x3, 0x2, 0x9, 0x2, 0x2c3d26eb, 0x2, 0x2, 0x0, 0x400, 0x1, 0x600000000, 0xfff, 0x7, 0x7, 0xec, 0x100, 0x4, 0x7, 0x9, 0x7, 0xfffffffffffffe0a, 0x1]}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000200)=[0xfffffffffffffff8, 0xffffffff00000001]) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000000040), 0x10, &(0x7f0000728000)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000009001600000000000000e3273c4ed257157bf402667a0600", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000180), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0xa04, 0x0, {0x0, 0x7530}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f2caa5f8ade60773b052474936d9b01632977ef869baee74a8604845174f20faa26d69fcd0b9ce7127243f94f6608a580f683ac82f8fc0469bd3b85fb7781183"}}, 0x80}}, 0x0) 15:32:06 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], [], [], [], [], []]}, 0x720) [ 2575.235697] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2575.255314] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2575.263940] [32645] 0 32645 17553 8389 114688 0 0 syz-executor2 [ 2575.272771] Memory cgroup out of memory: Kill process 32645 (syz-executor2) score 8417000 or sacrifice child [ 2575.282736] Killed process 32645 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:06 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xc4, "bc274e511542c96c60e42839d4f4d9dd57f3f30d7b1c1b6c75299405eb3b468f3126703770a59a992d428af0852ff1906f70453e6543c7e609f4cbca8de38fb118e73ac7c3d7b9c62a13ac5bab91ecae58b8688792bcc54eb07b7f1254c799df84cf37fc0f5f600025d2daf65ac1dcca8076e73c3e88e4493aec80957c622785986268715b83cffdb7d739082431a02e1aa8e1f5710f34c989f9e4f9d9485ee875aa24bd0fa3845a2ed1a623692620e73ad0082e284912033f9b8eabb20e0397bfc84f3a"}, &(0x7f00000002c0)=0xcc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x9, 0xdb5eecb, 0x8206, 0x101, 0x67dc, 0x0, 0x0, 0x0, r1}, &(0x7f0000000340)=0x20) dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00aab208", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r3, 0x1}, 0x8) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='devpts\x00', 0x0, &(0x7f00000003c0)="d4fd20f1580228067b3b09f089a435bafe652222546ebdaac49a600862e1fe51a1466d539c031d7b9d430696a1cb7fa8af68bec76b035af554bc18ffb34202aa1a6af300f93dbf55314957e43fd4bdbb93fd1ba85588cc62db1214cfe69d93") mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ocfs2_dlmfs\x00', 0x20, &(0x7f00000001c0)) 15:32:06 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = getgid() lstat(&(0x7f0000000280)='./file0//ile0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, r1, r2) r3 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12) r5 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getpeername$inet(r3, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, &(0x7f0000000200)=0x10) write$cgroup_pid(r5, &(0x7f0000000440)=r4, 0xd) 15:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:06 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0xfffffffffffffe6f) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x2, 'sh\x00', 0x3e, 0x100, 0x3f}, 0x2c) 15:32:06 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x20) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0xfffffffffffffca6) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x1, 0x0, 0x5) ioctl$KDSETLED(r1, 0x4b32, 0x8) 15:32:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) rt_sigreturn() sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a080007000000000013002d54000001001a00000ce68d54268e903f854de682fe64f2e902000001000000000100000000000000000000"], 0x38}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105000, 0x0) read(r0, &(0x7f00000001c0)=""/150, 0x96) recvfrom$inet6(r1, &(0x7f0000000080)=""/61, 0x3d, 0x40002022, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x3}, 0x1c) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000280)="2912318c97e5263305883c5aabeadd058da346e86f58e5fefcf4ffec1eadbd38f0c21aaf01163b11bf4c6cbca51f37bb862449558561b11a999abb7bf4d6595754818d401c38951dca94b471838894f6e7aced8147ae736fb2cacea6e863e464d4c3b9ab7239aae01c0471b385e0d6380b7dbc81580a5feba2b89e27b76debfa6867359a0fbcb3a53757eb097b69d68fcb575511c21c98d297885fb95002a716004537f9", 0xa4}, {&(0x7f0000000140)="3ff7a34f94de671d239a0c438ee39d0b95106c1a15ff1aee2f76dec101b2f6a8e68ff5775ad4963bf42dcb547c6540784d28f3ec334dac31", 0x38}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="a0614fa9d702fce8abeb1f3ba47a490134b1167afb1d8c08bff7e95dd010702c5ae6be6ee57e787528d200808d669fa72220c4ca6d944eddef51bf4bb28ff112b450748379674ba87148575ab04b32f47722b8dcf62633f427149648fded03ce5b9a14d66c588cdc3e5b3994ade3cd46dff954eb", 0x74}, {&(0x7f00000013c0)="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", 0x1000}], 0x5) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) 15:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x24000, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:06 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @multicast1}], 0x10) close(r2) close(r1) 15:32:06 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vsock\x00', 0x40040, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000001500)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = socket$inet_dccp(0x2, 0x6, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x8) getsockopt$inet_int(r2, 0x10d, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000001540)='/dev/audio\x00', 0x400000, 0x0) 15:32:06 executing program 7: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, 0xe8) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x10001) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 15:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:06 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20c901, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) [ 2575.321739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2575.344530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2575.346935] devpts: called with bogus options [ 2575.379327] Unknown ioctl -2146391550 [ 2575.392679] IPVS: ftp: loaded support on port[0] = 21 [ 2575.399644] Unknown ioctl -2146391550 [ 2575.407870] devpts: called with bogus options [ 2575.435221] device bridge_slave_1 left promiscuous mode [ 2575.440669] bridge0: port 2(bridge_slave_1) entered disabled state [ 2575.450381] device bridge_slave_0 left promiscuous mode [ 2575.455798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2575.470516] team0 (unregistering): Port device team_slave_1 removed [ 2575.477527] team0 (unregistering): Port device team_slave_0 removed [ 2575.484419] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2575.495632] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2575.508920] bond0 (unregistering): Released all slaves [ 2575.558455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2575.564816] bridge0: port 1(bridge_slave_0) entered disabled state [ 2575.571333] device bridge_slave_0 entered promiscuous mode [ 2575.580433] bridge0: port 2(bridge_slave_1) entered blocking state [ 2575.586819] bridge0: port 2(bridge_slave_1) entered disabled state [ 2575.593306] device bridge_slave_1 entered promiscuous mode [ 2575.602180] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2575.612329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2575.628499] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2575.639423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2575.661586] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2575.668371] team0: Port device team_slave_0 added [ 2575.676483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2575.683271] team0: Port device team_slave_1 added [ 2575.691291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2575.701466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2575.711700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2575.718736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2575.726204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2575.734018] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2575.741041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2575.748556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2575.783860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2575.790778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2575.797907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2575.804221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2575.810852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2575.926734] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2575.932828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2575.949568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2575.965994] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2575.972188] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2575.978842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2575.985517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2576.000746] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2576.006821] 8021q: adding VLAN 0 to HW filter on device team0 [ 2576.077693] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2576.088568] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2576.093665] CPU: 1 PID: 499 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2576.100741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2576.110098] Call Trace: [ 2576.112659] dump_stack+0xae/0xf0 [ 2576.116083] dump_header+0x7b/0x460 [ 2576.119680] ? ___ratelimit+0x139/0x150 [ 2576.123626] oom_kill_process+0xac/0x680 [ 2576.127691] ? out_of_memory+0x44/0x650 [ 2576.131634] out_of_memory+0x4af/0x650 [ 2576.135492] ? _cond_resched+0x17/0x60 [ 2576.139347] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2576.144333] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2576.149491] pagefault_out_of_memory+0x4f/0xa0 [ 2576.154053] mm_fault_error+0xec/0x270 [ 2576.157909] __do_page_fault+0x4ec/0x630 [ 2576.161954] ? __sys_socket+0x9f/0x160 [ 2576.165810] ? page_fault+0x8/0x30 [ 2576.169325] do_page_fault+0x37/0x160 [ 2576.173093] ? page_fault+0x8/0x30 [ 2576.176601] page_fault+0x1e/0x30 [ 2576.180038] RIP: 0033:0x43e461 [ 2576.183194] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2576.202205] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2576.207543] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2576.214788] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2576.222029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2576.229269] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2576.236525] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2576.243795] Task in /syz2 killed as a result of limit of /syz2 [ 2576.256855] memory: usage 1572kB, limit 0kB, failcnt 13256 [ 2576.262472] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2576.269220] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2576.275353] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2576.294991] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2576.303615] [ 499] 0 499 17553 8389 114688 0 0 syz-executor2 [ 2576.312462] Memory cgroup out of memory: Kill process 499 (syz-executor2) score 8417000 or sacrifice child 15:32:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r0) 15:32:07 executing program 2: 15:32:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x47) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:07 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x801, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0x1, 0xfffffffffffffffa, 0x2, 0x1}, 0x10) socket$vsock_dgram(0x28, 0x2, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw\x00') write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x1, 0x4, 0x600, 0x3f, 0x7f, 0xffff, 0x6, 0x5, 0x9}}, 0xb050d863f7045dbe) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x34, 0x200200) 15:32:07 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x3) r1 = socket$inet(0x2, 0x80003, 0xd4) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x4000800, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 15:32:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:07 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc}, "", [[], [], [], [], [], [], []]}, 0x720) 15:32:07 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x6, &(0x7f0000000280)="025cc8070014865f8f7640") ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'yam0\x00'}) 15:32:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) [ 2576.322273] Killed process 499 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:07 executing program 0: 15:32:07 executing program 5: 15:32:07 executing program 7: 15:32:07 executing program 0: 15:32:07 executing program 7: 15:32:07 executing program 0: 15:32:07 executing program 7: 15:32:07 executing program 1: [ 2576.366814] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2576.385638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2576.405436] IPVS: ftp: loaded support on port[0] = 21 [ 2576.462235] device bridge_slave_1 left promiscuous mode [ 2576.467697] bridge0: port 2(bridge_slave_1) entered disabled state [ 2576.479339] device bridge_slave_0 left promiscuous mode [ 2576.484746] bridge0: port 1(bridge_slave_0) entered disabled state [ 2576.496508] team0 (unregistering): Port device team_slave_1 removed [ 2576.503441] team0 (unregistering): Port device team_slave_0 removed [ 2576.510415] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2576.523650] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2576.541929] bond0 (unregistering): Released all slaves [ 2576.573397] bridge0: port 1(bridge_slave_0) entered blocking state [ 2576.579738] bridge0: port 1(bridge_slave_0) entered disabled state [ 2576.586230] device bridge_slave_0 entered promiscuous mode [ 2576.597402] bridge0: port 2(bridge_slave_1) entered blocking state [ 2576.603771] bridge0: port 2(bridge_slave_1) entered disabled state [ 2576.610765] device bridge_slave_1 entered promiscuous mode [ 2576.619914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2576.629999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2576.648017] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2576.658954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2576.681663] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2576.688462] team0: Port device team_slave_0 added [ 2576.696730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2576.703535] team0: Port device team_slave_1 added [ 2576.711676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2576.722253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2576.732543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2576.739495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2576.746946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2576.754795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2576.761737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2576.769506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2576.805538] bridge0: port 2(bridge_slave_1) entered blocking state [ 2576.811879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2576.818404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2576.824719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2576.831366] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2576.948920] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2576.955007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2576.971550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2576.988656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2576.994788] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2577.001698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2577.008357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2577.023854] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2577.029940] 8021q: adding VLAN 0 to HW filter on device team0 [ 2577.099695] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2577.110556] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2577.115665] CPU: 1 PID: 805 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2577.122746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.132084] Call Trace: [ 2577.134645] dump_stack+0xae/0xf0 [ 2577.138096] dump_header+0x7b/0x460 [ 2577.141700] ? ___ratelimit+0x139/0x150 [ 2577.145651] oom_kill_process+0xac/0x680 [ 2577.149683] ? out_of_memory+0x44/0x650 [ 2577.153628] out_of_memory+0x4af/0x650 [ 2577.157489] ? _cond_resched+0x17/0x60 [ 2577.161378] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2577.166368] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2577.171530] pagefault_out_of_memory+0x4f/0xa0 [ 2577.176087] mm_fault_error+0xec/0x270 [ 2577.179949] __do_page_fault+0x4ec/0x630 [ 2577.184010] ? __sys_socket+0x9f/0x160 [ 2577.187875] ? page_fault+0x8/0x30 [ 2577.191406] do_page_fault+0x37/0x160 [ 2577.195200] ? page_fault+0x8/0x30 [ 2577.198714] page_fault+0x1e/0x30 [ 2577.202139] RIP: 0033:0x43e461 [ 2577.205308] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2577.224315] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2577.229651] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2577.236894] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2577.244174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2577.251419] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2577.258662] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2577.265992] Task in /syz2 killed as a result of limit of /syz2 [ 2577.271982] memory: usage 1572kB, limit 0kB, failcnt 13264 [ 2577.277594] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2577.284359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2577.290507] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2577.317806] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2577.326408] [ 805] 0 805 17553 8389 114688 0 0 syz-executor2 [ 2577.335251] Memory cgroup out of memory: Kill process 805 (syz-executor2) score 8417000 or sacrifice child 15:32:08 executing program 0: 15:32:08 executing program 5: 15:32:08 executing program 7: 15:32:08 executing program 2: 15:32:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(0xffffffffffffffff, r3, &(0x7f0000000240), 0x8000000008) 15:32:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) fstat(r0, &(0x7f0000000080)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0xffffffffffffff37) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x3) utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x100) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x67e6, 0x111040) ioctl$TCSBRK(r2, 0x5409, 0x6) 15:32:08 executing program 1: 15:32:08 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], [], [], [], []]}, 0x620) 15:32:08 executing program 1: [ 2577.345058] Killed process 805 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:08 executing program 1: 15:32:08 executing program 7: 15:32:08 executing program 0: 15:32:08 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80800) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85e9b870") ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'team0\x00', @random="01003a1e2410"}) 15:32:08 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xa27, 0x800) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r3}}, 0x18) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc20700145f8f764070") shmget$private(0x0, 0x3000, 0x54001828, &(0x7f0000ffa000/0x3000)=nil) 15:32:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x8000000008) 15:32:08 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, r1) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff}) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000b00), &(0x7f0000000200)="7f", 0x1, r4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000440)="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") r6 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000400), &(0x7f0000000280), 0x1c8, r1) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff33, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x1f, 0x1}, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/139, &(0x7f0000000280)=0x8b) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02010d681000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b1d6323010020000000000000"], 0x80}}, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x8, 0x101002) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000580)) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r9 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000140)=0xc) sendmmsg(r9, &(0x7f0000000180), 0x400000000000002, 0x0) 15:32:08 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)='{ppp0#\x00', 0x7, 0x1) socket$inet6(0xa, 0x807, 0x3) [ 2577.388461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2577.415623] IPVS: length: 139 != 8 [ 2577.421947] IPVS: ftp: loaded support on port[0] = 21 [ 2577.422436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2577.443041] IPVS: length: 139 != 8 [ 2577.494214] device bridge_slave_1 left promiscuous mode [ 2577.499671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2577.509283] device bridge_slave_0 left promiscuous mode [ 2577.514678] bridge0: port 1(bridge_slave_0) entered disabled state [ 2577.526497] team0 (unregistering): Port device team_slave_1 removed [ 2577.533460] team0 (unregistering): Port device team_slave_0 removed [ 2577.540385] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2577.552619] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2577.565868] bond0 (unregistering): Released all slaves [ 2577.591480] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.597817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2577.604353] device bridge_slave_0 entered promiscuous mode [ 2577.614565] bridge0: port 2(bridge_slave_1) entered blocking state [ 2577.620917] bridge0: port 2(bridge_slave_1) entered disabled state [ 2577.627386] device bridge_slave_1 entered promiscuous mode [ 2577.636641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2577.646530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2577.663416] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2577.674703] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2577.696269] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2577.703124] team0: Port device team_slave_0 added [ 2577.711253] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2577.718002] team0: Port device team_slave_1 added [ 2577.726074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2577.736250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2577.746406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2577.753434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2577.760979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2577.768891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2577.775841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2577.784242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2577.820789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2577.827130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2577.833680] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.839995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2577.846645] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2577.963791] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2577.969907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2577.986588] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2578.003490] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2578.009707] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2578.016402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2578.023109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2578.038900] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2578.044987] 8021q: adding VLAN 0 to HW filter on device team0 [ 2578.116693] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2578.127556] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2578.132746] CPU: 0 PID: 1107 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2578.139912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.149254] Call Trace: [ 2578.151820] dump_stack+0xae/0xf0 [ 2578.155251] dump_header+0x7b/0x460 [ 2578.158852] ? ___ratelimit+0x139/0x150 [ 2578.162802] oom_kill_process+0xac/0x680 [ 2578.166836] ? out_of_memory+0x44/0x650 [ 2578.170799] out_of_memory+0x4af/0x650 [ 2578.174676] ? _cond_resched+0x17/0x60 [ 2578.178540] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2578.183543] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2578.188723] pagefault_out_of_memory+0x4f/0xa0 [ 2578.193280] mm_fault_error+0xec/0x270 [ 2578.197160] __do_page_fault+0x4ec/0x630 [ 2578.201199] ? __sys_socket+0x9f/0x160 [ 2578.205079] ? page_fault+0x8/0x30 [ 2578.208613] do_page_fault+0x37/0x160 [ 2578.212398] ? page_fault+0x8/0x30 [ 2578.215909] page_fault+0x1e/0x30 [ 2578.219331] RIP: 0033:0x43e461 [ 2578.222488] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2578.241493] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2578.246838] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2578.254084] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2578.261345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2578.268590] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2578.275848] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2578.283199] Task in /syz2 killed as a result of limit of /syz2 [ 2578.289176] memory: usage 1572kB, limit 0kB, failcnt 13272 [ 2578.294806] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2578.301552] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/137) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:09 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0xfffffec8, &(0x7f00000001c0)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a60000000a8430291000000390009002300feff010000000d000500000000000000c78b80082314e9030b9d5668477b85b167320b00dc1338d54400009b84136ef75afb83", 0x55}], 0x1, &(0x7f0000001480)=ANY=[]}, 0x0) 15:32:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x0) 15:32:09 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0xfff}, &(0x7f0000000140)=0x8) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000001c0)=0xf88, &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000240)=""/23, &(0x7f0000000340)=0x17) clone(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000280)) 15:32:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x100082) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_buf(r1, 0x29, 0xff, &(0x7f00000000c0)=""/208, &(0x7f00000001c0)=0xd0) r2 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0xfffffffffffffff8, 0x4020000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) write$binfmt_script(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x466) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000840)="a3", 0x1}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x20000142000007) 15:32:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x35}, {0x6}]}, 0x10) 15:32:09 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={&(0x7f0000000080), 0xc, &(0x7f00000bfff0)={&(0x7f0000000200)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in=@multicast2}, {@in6=@local}, @in=@rand_addr}}}, 0xf8}}, 0x2000000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) r1 = shmget(0x2, 0x2000, 0x1000, &(0x7f0000002000/0x2000)=nil) shmat(r1, &(0x7f0000002000/0x2000)=nil, 0x3000) 15:32:09 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], [], [], []]}, 0x520) 15:32:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x0) 15:32:09 executing program 0: r0 = socket$inet6(0xa, 0x100080001, 0x40) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x1f, 0xfce0) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000020000002b07df2fd0846bc0964f4fffe3d917000000000000000000"], 0x28}}], 0x1, 0x0) 15:32:09 executing program 7: capget(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0xc44}) pselect6(0x40, &(0x7f0000000040)={0x3f, 0x7, 0x5, 0xfffffffffffffffb, 0x7fff, 0x1000, 0xda8, 0x2}, &(0x7f00000000c0)={0x4, 0x10000, 0x2, 0x0, 0x4, 0x9, 0x8000, 0x6}, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x200, 0x20, 0x8, 0x2, 0x5c}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d995b85}, 0x8}) [ 2578.307707] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2578.327347] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2578.335958] [ 1107] 0 1107 17553 8389 114688 0 0 syz-executor2 [ 2578.344797] Memory cgroup out of memory: Kill process 1107 (syz-executor2) score 8417000 or sacrifice child [ 2578.354695] Killed process 1107 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') syz_open_procfs(0x0, &(0x7f0000000100)="617474722f6673637265bf9dec61886c793b44a6fda41d7b9bd62f4c5ac3007b080fee63cc9fe9c3d200040000552237d9c5") write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xfc1a, 0xb663, 0x2, 0x6, 0xffffffff, 0x3, 0x3, 0x40, 0x316, 0x40, 0x6d, 0x100000001, 0xfff, 0x38, 0x1, 0x9, 0x2, 0x5}, [{0x7, 0x3f, 0x7fffffff, 0x1, 0xffff, 0x1, 0x401}], "4c2222581b5254a676f7f2696109618053932dd643669791d3fe1158f97e601cd204f2eea3c026b3eaa7d4ee5f8b4eddb47f3883de55674be24599474003aab3ad9ec4ea82fdaf0c4ea0e0cb75e2c95b3a36eca81f28c5e3c4fa697969b67cc4ff46037c44d3924189311ee2c671ed5fb995624fcab90dcbdc6cd4097c5b39de97a331f872b52676deeb657f883b908489b2cd51101622f037fdc054b0eb9f65df4cb238fc776ffd67404689994beeb46e025faaefa3a99d768a67eadf91929266f52bc3", [[], [], [], [], [], [], [], []]}, 0x93c) 15:32:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:09 executing program 5: r0 = memfd_create(&(0x7f0000049000)='\x00', 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000042f70)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 15:32:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000280)}], 0x3, &(0x7f0000000300)=""/247, 0xf7, 0x800}, 0x100) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x0, &(0x7f0000000240)) 15:32:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xc7, "8f21d65bf5224cfc02c1546ed658c9829bdca6caa55c3c7c86cf53f7222aed37cf152179185ac8e1da2366afbcd626c950ad6b438badaba4a7a09ad4a62f6623d6243933e76c30b37cba2ddb98b60890e806f38743f88cfa5f814448aa22344fd64608bb01fe86943491d3c11833d15f7d11bf3479c51d622413fa3524d703799200c3769cdf97842eacd1da3290327201bd03299d5f4768224c2643674132d8b0fcf8dce845ac2cdd5bc770cf4c88b5498e81ecbe032b85e300f57f2cce32013a7971defc239a"}, &(0x7f0000000140)=0xcf) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0xffffffffffffff01}, 0x8) 15:32:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:09 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000008000)=ANY=[], &(0x7f0000008000)='syzkaller\x00', 0x27, 0x7f, &(0x7f0000008000)=""/127}, 0x48) fstatfs(r0, &(0x7f0000000000)=""/125) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x5, &(0x7f0000003000)=@framed={{}, [@alu={0xc}]}, &(0x7f000000b000)='syzkaller\x00', 0x7e0, 0x418, &(0x7f0000002f19)=""/231}, 0x48) 15:32:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x0) [ 2578.400316] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2578.430124] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2578.440066] IPVS: ftp: loaded support on port[0] = 21 [ 2578.511228] device bridge_slave_1 left promiscuous mode [ 2578.516710] bridge0: port 2(bridge_slave_1) entered disabled state [ 2578.527330] device bridge_slave_0 left promiscuous mode [ 2578.532789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2578.546602] team0 (unregistering): Port device team_slave_1 removed [ 2578.553499] team0 (unregistering): Port device team_slave_0 removed [ 2578.560332] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2578.573639] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2578.587920] bond0 (unregistering): Released all slaves [ 2578.612924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2578.619287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2578.625897] device bridge_slave_0 entered promiscuous mode [ 2578.636171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2578.642517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2578.648975] device bridge_slave_1 entered promiscuous mode [ 2578.658278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2578.668375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2578.686181] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2578.697890] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2578.719662] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2578.726520] team0: Port device team_slave_0 added [ 2578.734762] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2578.741563] team0: Port device team_slave_1 added [ 2578.749864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2578.760214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2578.770543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2578.777561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2578.785020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2578.792880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2578.799837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2578.807508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2578.845125] bridge0: port 2(bridge_slave_1) entered blocking state [ 2578.851517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2578.858034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2578.864378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2578.871091] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2578.996788] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2579.003587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2579.021789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2579.039815] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2579.045977] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2579.052759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2579.059420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2579.075526] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2579.081618] 8021q: adding VLAN 0 to HW filter on device team0 [ 2579.158766] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2579.169687] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2579.174795] CPU: 0 PID: 1439 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2579.181957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2579.191282] Call Trace: [ 2579.193844] dump_stack+0xae/0xf0 [ 2579.197268] dump_header+0x7b/0x460 [ 2579.200865] ? ___ratelimit+0x139/0x150 [ 2579.204812] oom_kill_process+0xac/0x680 [ 2579.208848] ? out_of_memory+0x44/0x650 [ 2579.212799] out_of_memory+0x4af/0x650 [ 2579.216660] ? _cond_resched+0x17/0x60 [ 2579.220522] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2579.225512] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2579.230677] pagefault_out_of_memory+0x4f/0xa0 [ 2579.235238] mm_fault_error+0xec/0x270 [ 2579.239128] __do_page_fault+0x4ec/0x630 [ 2579.243176] ? __sys_socket+0x9f/0x160 [ 2579.247057] ? page_fault+0x8/0x30 [ 2579.250584] do_page_fault+0x37/0x160 [ 2579.254355] ? page_fault+0x8/0x30 [ 2579.257863] page_fault+0x1e/0x30 [ 2579.261286] RIP: 0033:0x43e461 [ 2579.264446] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2579.283442] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2579.288775] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2579.296018] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2579.303288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2579.310536] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2579.317799] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2579.325071] Task in /syz2 killed as a result of limit of /syz2 [ 2579.331043] memory: usage 1572kB, limit 0kB, failcnt 13280 [ 2579.336665] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2579.343405] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:10 executing program 5: r0 = socket$inet(0x10, 0x5, 0x1) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="24000000120007241dfffd946fa2830020200a00090000e8001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x95, 0x4}, 0x100000000000) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') 15:32:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpgrp(0x0) timer_create(0x6, &(0x7f0000000340)={0x0, 0x3d, 0x1, @tid=r1}, &(0x7f0000000380)) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000000, 0x2000) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000200)={"6970768400"}, &(0x7f0000000240)=0xfd8b) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendfile(r3, r4, &(0x7f00000002c0)=0xdfffffc, 0x8) accept$alg(r2, 0x0, 0x0) io_setup(0xff, &(0x7f00000000c0)=0x0) io_cancel(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000180)="ac1f388ef9b612bdf28fe7f152f02fcbd8193efd5406db0230eb236741583e774f49381567173e257c94ce4f34c5fb8a60de0f0bb035645812fa3c665ed7dec2a3d4ac2cef3dd98a9c0a8273c7390507d869b82e999177a852c8fe8af118f4d1deae5e33ce", 0x65, 0x22c, 0x0, 0x0, r2}, &(0x7f0000000300)) 15:32:10 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) move_pages(r1, 0x0, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000200), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20200000, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0xa, &(0x7f0000000000)=[{0x6, 0x3ff}, {0x1f, 0x1}, {0x6, 0x7fff}, {0x2, 0xfffffffffffffffa}, {0x81, 0x7fffffff}, {0x9}, {0x100000001, 0x401}, {0x8, 0x2}, {0x10001, 0x9}, {0xfffffffffffffffc, 0x1}]}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) 15:32:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x4, 0x6, 0x1cf44c3b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)=""/206, 0x1000000, 0x1000, 0x9}, 0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 15:32:10 executing program 4 (fault-call:10 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = dup(r0) ioctl(r0, 0x5, &(0x7f0000000040)="920cb44031d257ba14a13a686fe2955f70bde393ef19121dfcf58d869613e1ae2a9daea55c8280d444583554f6eb19e9e3d33fb5e7e0b3ae088def512767c0b8e418f4150470765af8b019affab8290c232e6f9c7214e747f5890372542601") ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0xe4, 0xd6f1, 0x7, 0x7fff, 0x868b, 0x7fffffff, 0x101, 0xd4, 0x0, 0x8}) 15:32:10 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], [], []]}, 0x420) [ 2579.349557] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2579.369177] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2579.377783] [ 1439] 0 1439 17553 8389 114688 0 0 syz-executor2 [ 2579.386640] Memory cgroup out of memory: Kill process 1439 (syz-executor2) score 8417000 or sacrifice child [ 2579.396519] Killed process 1439 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], [], [], []]}, 0x520) 15:32:10 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffffffc, 0xad) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x2, 0x208, 0xfb9f, 0x7f, 0x6, 0x1, 0x9, r1}, &(0x7f00000000c0)=0x20) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) rmdir(&(0x7f0000000100)='./file0\x00') 15:32:10 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20081624}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, 0x3e, 0x0, 0x87, 0x25dfdbfe, {0x15}, [@typed={0x4, 0x6c}, @generic="df1af622c0608bdd750ccfa89400bee65bac005ad7879592a8ce4f11528281a8cb158f7c4318d173cd29c4fad3b70cd44cf5fd7eb90231aa128676d26d376fbd8973b83609e0c89f60bd7bb69280bd608aa47455928245", @nested={0xa8, 0x3e, [@typed={0x8, 0x91, @str='\x00'}, @generic="e31e48dc63c5f457eeac960ab874bcfa39850ef1215a95e9a2e06bcd39b2f48691ef4ac2bbe4a3a425fd36a50b245a80ea40f481a06d785ea18758659eb5b9a236d7e00a500d50152b30988e4427ac42d6be89c1a9860ec5269458be7a139cc0a5502b5fb6c9670e3cc4d75853fa3f8a51b64a9f33ad8b67962cb413bfe9f93a82386601782a4ae2f804d55a8951ed1b83daf69f507dcc390f43e8"]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4008040}, 0x4010) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8002000000003) 15:32:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x2, 0x20400000000, 0xffffffffffffffff}]}, 0xe) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000140), 0x0, 0x5a6d8d97750cae5b) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa76) poll(&(0x7f00000000c0)=[{r1, 0x8100}], 0x1, 0xc9c) connect$unix(r1, &(0x7f0000000040)=@abs, 0x6e) getpid() 15:32:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0xff8a) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:10 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x64ca}}, 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x1}}, 0x1e) 15:32:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x44, r1}) r2 = syz_open_dev$mouse(&(0x7f0000000780)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000007c0)=""/97) r3 = socket$inet6(0xa, 0x800, 0xffffffffbfd1fc33) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200)=0x3, 0xfffffffffffffd68) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f0000000180)=""/77, 0x4d}], 0x5, &(0x7f0000000640)=""/135, 0x87, 0x4}, 0x2000) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000740)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="e746c0de586a875ae63fbb962e68472690d590c2340cd2b738ee42169044f5e8e6cf087ac85f89f8f85478688dd4aaf1b6789205d18f39be94e29186d755e6274faefe1f7c4026534bfcc9463b35f5aca5239372bb36d4968d4c718d105750c93893e0391424b88daefe864a007a62b3440acc21522fa031615a438f687b6593f7263e3eaf7b4bfff20d732caa2f4da2b2de4de4587b6272680014f89652b0f45266c07586c47ad19c65ec5e4f5d78ac33101a58bcfe083f3dd9063a5af4e076e99eed64841991f1351d6f101e16de731e4a3015970fd68e6e92cbf9f54650817df4d21914e0f07581a5e81aa2527bb63a28afcfb9e6f0e1894a868e4ffe405a92c29170a12eaac7a04298f566f662416749f010e8712abeb83cd55f367ddb7c12cc93b22e692c336dc02d7e504bb3e6ab62a828cf4a5aa4cfa9a3369ff482d5db451d284a882598f5a6d8644dfdd78df1b8d86b0b22be8782721c0e69c2a00d2b62f49815683edacbd305354b7e23110ee0c558fc81a42900a39bbb11f8c4f98631cec11f4841162e7c148631584fec82eb252226eb42f5d8837af634abbf272357c3192df6b448e3f2b6984c0317131a84643a7c4d167d0f2ff873d089c77cb5c021190a4383c08649ba00763d42bbc5a3d35877e47ed74f", 0x1d9}], 0x1, &(0x7f00000004c0)}, 0x0) r2 = dup(r0) write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x81}}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) [ 2579.444293] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2579.464922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2579.471560] IPVS: ftp: loaded support on port[0] = 21 [ 2579.483936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2579.497682] FAULT_INJECTION: forcing a failure. [ 2579.497682] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.508996] CPU: 0 PID: 1731 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2579.514821] CUSE: unknown device info "ÿþÿÿ" [ 2579.516178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2579.516180] Call Trace: [ 2579.516191] dump_stack+0xae/0xf0 [ 2579.516202] should_fail+0x144/0x230 [ 2579.520718] CUSE: DEVNAME unspecified [ 2579.530055] ? __should_failslab+0x67/0x90 15:32:10 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) read(r0, &(0x7f0000000300)=""/182, 0xb6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) r1 = socket$inet6(0xa, 0x10000804, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r2, 0x0, 0x30, 0xffff}, &(0x7f0000000040)=0xe9f4a6d0cba74870) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e20, 0xee8, @loopback, 0x7f}}}, &(0x7f0000000240)=0x84) open(&(0x7f0000000700)='./file0\x00', 0x12000, 0x106) fcntl$notify(r0, 0x402, 0x2) open_by_handle_at(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x80) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, 0x1, {0x800000000007, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}}}, 0x78) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) 15:32:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x7fffff, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x8) [ 2579.530060] __should_failslab+0x7e/0x90 [ 2579.530065] should_failslab+0x9/0x20 [ 2579.530068] __kmalloc+0x61/0x250 [ 2579.530072] ? kstrtoull+0x1a5/0x1c0 [ 2579.530077] alloc_pipe_info+0x42/0x210 [ 2579.530084] splice_direct_to_actor+0x316/0x350 [ 2579.536770] CUSE: unknown device info "ÿþÿÿ" [ 2579.539805] ? do_splice_direct+0xe0/0xe0 [ 2579.539810] ? rw_verify_area+0xf6/0x150 [ 2579.539813] do_splice_direct+0x87/0xe0 [ 2579.539818] do_sendfile+0x424/0x680 [ 2579.539822] __x64_sys_sendfile64+0x59/0xb0 [ 2579.539829] do_syscall_64+0x61/0x90 [ 2579.543659] CUSE: DEVNAME unspecified [ 2579.547866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2579.547870] RIP: 0033:0x457089 [ 2579.547870] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2579.631278] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2579.638959] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2579.646205] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2579.653449] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2579.660713] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2579.667968] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000000 [ 2579.692788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2579.699720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2579.751263] device bridge_slave_1 left promiscuous mode [ 2579.756722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2579.768265] device bridge_slave_0 left promiscuous mode [ 2579.773670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2579.786770] team0 (unregistering): Port device team_slave_1 removed [ 2579.793606] team0 (unregistering): Port device team_slave_0 removed [ 2579.800463] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2579.810669] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2579.825938] bond0 (unregistering): Released all slaves [ 2579.851799] bridge0: port 1(bridge_slave_0) entered blocking state [ 2579.858163] bridge0: port 1(bridge_slave_0) entered disabled state [ 2579.864695] device bridge_slave_0 entered promiscuous mode [ 2579.874220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2579.880564] bridge0: port 2(bridge_slave_1) entered disabled state [ 2579.887035] device bridge_slave_1 entered promiscuous mode [ 2579.897308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2579.907586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2579.925600] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2579.936484] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2579.959598] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2579.966390] team0: Port device team_slave_0 added [ 2579.974525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2579.981303] team0: Port device team_slave_1 added [ 2579.989471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2579.999787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2580.010178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2580.020929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2580.058756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2580.065091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2580.071589] bridge0: port 1(bridge_slave_0) entered blocking state [ 2580.077951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2580.195556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2580.212034] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2580.229659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2580.247769] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2580.253986] 8021q: adding VLAN 0 to HW filter on device team0 [ 2580.324693] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2580.335550] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2580.340659] CPU: 0 PID: 1759 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2580.347878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2580.357211] Call Trace: [ 2580.359772] dump_stack+0xae/0xf0 [ 2580.363194] dump_header+0x7b/0x460 [ 2580.366792] ? ___ratelimit+0x139/0x150 [ 2580.370784] oom_kill_process+0xac/0x680 [ 2580.374818] ? out_of_memory+0x44/0x650 [ 2580.378760] out_of_memory+0x4af/0x650 [ 2580.382621] ? _cond_resched+0x17/0x60 [ 2580.386479] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2580.391518] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2580.396689] pagefault_out_of_memory+0x4f/0xa0 [ 2580.401265] mm_fault_error+0xec/0x270 [ 2580.405132] __do_page_fault+0x4ec/0x630 [ 2580.409173] ? __sys_socket+0x9f/0x160 [ 2580.413033] ? page_fault+0x8/0x30 [ 2580.416548] do_page_fault+0x37/0x160 [ 2580.420320] ? page_fault+0x8/0x30 [ 2580.423852] page_fault+0x1e/0x30 [ 2580.427279] RIP: 0033:0x43e461 [ 2580.430439] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2580.449428] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2580.454763] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2580.462006] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2580.469337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2580.476578] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2580.483819] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2580.491224] Task in /syz2 killed as a result of limit of /syz2 [ 2580.497214] memory: usage 1572kB, limit 0kB, failcnt 13288 [ 2580.502825] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2580.509587] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) pipe2(&(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x6eba, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:11 executing program 0: clone(0x84102100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000040)='\r') rseq(&(0x7f0000000080), 0x20, 0x1, 0x0) 15:32:11 executing program 4 (fault-call:10 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x7530}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002000030000000000000000000200147d8e32657b1a158f211115b57f45d60000000000000000000400000008"], 0x1}}, 0x0) 15:32:11 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], []]}, 0x320) 15:32:11 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x401) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x80000001, 0x68e2, 0x20c00, 0x80, 0x80000000}, &(0x7f00000002c0)=0x14) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000000c0)) 15:32:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], [], [], []]}, 0x420) 15:32:11 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x4080) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @reserved}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x13f}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bd5d8a543c0be96da0d8840229a37c4f7410c1969d7f3e1414ecab776a1612c46249b6258f476f2d50ff2220c58ed1c6a101135ad2a1ef1f121d90eae96dbe8115499abc7c4f4a36e09e1f607ddd4966a078b194517ddce312edba72c0ebb82e1925f731d5c681f0a21ed0b8f3fa2ea18c7661ca2da245e3ea6e939b03bea02df0042099a8af059bdcaeae2f7cf2cf09ce1d87188b77bb02ee60652a646c91e00000000"], &(0x7f0000000100)=0x4) close(r3) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e23, @loopback}], 0x20) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000340), 0x4) [ 2580.515730] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2580.535366] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2580.544123] [ 1759] 0 1759 17553 8388 114688 0 0 syz-executor2 [ 2580.552954] Memory cgroup out of memory: Kill process 1759 (syz-executor2) score 8416000 or sacrifice child [ 2580.562830] Killed process 1759 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB [ 2580.599489] FAULT_INJECTION: forcing a failure. [ 2580.599489] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.602906] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2580.610734] CPU: 1 PID: 2075 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2580.610741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2580.621563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2580.624131] Call Trace: [ 2580.624141] dump_stack+0xae/0xf0 [ 2580.624149] should_fail+0x144/0x230 15:32:11 executing program 7: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/229, 0xe5) [ 2580.624156] ? __should_failslab+0x67/0x90 [ 2580.637669] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2580.639980] __should_failslab+0x7e/0x90 [ 2580.639986] should_failslab+0x9/0x20 [ 2580.639989] __kmalloc+0x61/0x250 [ 2580.639995] ? kstrtoull+0x1a5/0x1c0 [ 2580.648470] IPv6: ADDRCONF(NETDEV_UP): veth2: link is not ready [ 2580.649684] ? alloc_pipe_info+0x42/0x210 [ 2580.649689] alloc_pipe_info+0x118/0x210 [ 2580.649694] splice_direct_to_actor+0x316/0x350 [ 2580.649699] ? do_splice_direct+0xe0/0xe0 15:32:11 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004003, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) fcntl$setflags(r0, 0x2, 0xd) times(&(0x7f0000000000)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x3, 0x729, 0x80000001, 0x40, 0x3f}) 15:32:11 executing program 0: add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) unshare(0x8020000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000000180)=""/249, &(0x7f00000000c0)=0xf9) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000440), &(0x7f0000000240)) 15:32:11 executing program 4 (fault-call:10 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) [ 2580.654091] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 2580.660391] ? rw_verify_area+0xf6/0x150 [ 2580.660397] do_splice_direct+0x87/0xe0 [ 2580.660402] do_sendfile+0x424/0x680 [ 2580.660406] __x64_sys_sendfile64+0x59/0xb0 [ 2580.660411] do_syscall_64+0x61/0x90 [ 2580.660416] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2580.660422] RIP: 0033:0x457089 [ 2580.664697] IPv6: ADDRCONF(NETDEV_UP): veth4: link is not ready 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1f, @ipv4={[], [], @rand_addr=0x363f7050}, 0x7}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r1 = dup2(r0, r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/157) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x18400, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_WIE_OFF(r2, 0x7010) 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0xffffffffffffff47) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1c3) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x2d, 0x0, 0x7, 0xa, 0xb, 0xd810, 0x1, 0xe0}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x10440) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x1, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e22, @broadcast}, 0x0, 0x8, 0x10001, 0x1, 0x395, 0x0, 0xfff, 0x101, 0x566}) 15:32:11 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8040, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8001, 0x1, 0x955, r1}, &(0x7f0000000100)=0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={{0x3, 0x5fb0b78d, 0xc83f, 0x7, 0x6, 0x8c1}, 0x1, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffa, 0xd4, "b1deafcdc12b93aebdfb374282f77944ad727ec1fd87ba9e4692536251d405c99867c15a28aaecf9d0193911521266734b6aecfc4ff7010284291d8ee52df016ee0a906ef3f5c349a1c09e9106f6d3b1c65515eb946abee3406ee731e793670f2e107a6854c9fc627c14aa00d2712a876d618caaf4273639ad278075e0e5293e"}) 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0xfffffffffffffce4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:11 executing program 3: r0 = socket$inet6(0xa, 0x11, 0x2) r1 = eventfd2(0x2, 0x80800) write$eventfd(r1, &(0x7f0000000000)=0x6, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2580.668246] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 [ 2580.671906] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready [ 2580.675388] c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2580.675409] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2580.711546] Unknown ioctl 1074812118 [ 2580.712954] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2580.712956] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2580.712958] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2580.712960] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2580.712962] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000001 [ 2580.732473] IPVS: ftp: loaded support on port[0] = 21 [ 2580.741211] Unknown ioctl 1074812118 [ 2580.799684] FAULT_INJECTION: forcing a failure. [ 2580.799684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2580.835061] CPU: 1 PID: 2134 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2580.842240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2580.851585] Call Trace: [ 2580.854164] dump_stack+0xae/0xf0 [ 2580.857609] should_fail+0x144/0x230 [ 2580.861312] __alloc_pages_nodemask+0x128/0x13f0 [ 2580.866067] ? percpu_counter_add_batch+0x47/0x90 [ 2580.870900] alloc_pages_vma+0x2a1/0x610 [ 2580.874944] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2580.879860] shmem_getpage_gfp+0x118d/0x1370 [ 2580.884256] ? __wake_up+0x11/0x20 [ 2580.887778] ? __wake_up_common_lock+0xaf/0xd0 [ 2580.892346] ? __wake_up+0x11/0x20 [ 2580.895869] ? __d_lookup_done+0xb8/0x150 [ 2580.899999] ? __d_rehash+0x7e/0x100 [ 2580.903811] shmem_file_read_iter+0x10e/0x3d0 [ 2580.908295] generic_file_splice_read+0x135/0x1b0 [ 2580.913124] splice_direct_to_actor+0x118/0x350 [ 2580.917780] ? do_splice_direct+0xe0/0xe0 [ 2580.921909] do_splice_direct+0x87/0xe0 [ 2580.925900] do_sendfile+0x424/0x680 [ 2580.929599] __x64_sys_sendfile64+0x59/0xb0 [ 2580.933906] do_syscall_64+0x61/0x90 [ 2580.937606] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2580.942785] RIP: 0033:0x457089 [ 2580.945953] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2580.964995] RSP: 002b:00007f81bc54bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2580.972690] RAX: ffffffffffffffda RBX: 00007f81bc54c6d4 RCX: 0000000000457089 [ 2580.979946] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2580.987204] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 2580.994458] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2581.001796] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000002 [ 2581.010230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2581.017135] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2581.023916] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2581.030615] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2581.037325] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2581.131209] device bridge_slave_1 left promiscuous mode [ 2581.136638] bridge0: port 2(bridge_slave_1) entered disabled state [ 2581.146342] device bridge_slave_0 left promiscuous mode [ 2581.151820] bridge0: port 1(bridge_slave_0) entered disabled state [ 2581.164573] team0 (unregistering): Port device team_slave_1 removed [ 2581.171497] team0 (unregistering): Port device team_slave_0 removed [ 2581.178278] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2581.189612] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2581.202853] bond0 (unregistering): Released all slaves [ 2581.246056] bridge0: port 1(bridge_slave_0) entered blocking state [ 2581.252415] bridge0: port 1(bridge_slave_0) entered disabled state [ 2581.258874] device bridge_slave_0 entered promiscuous mode [ 2581.267874] bridge0: port 2(bridge_slave_1) entered blocking state [ 2581.274201] bridge0: port 2(bridge_slave_1) entered disabled state [ 2581.280679] device bridge_slave_1 entered promiscuous mode [ 2581.289625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2581.300015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2581.316529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2581.327545] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2581.349929] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2581.356742] team0: Port device team_slave_0 added [ 2581.365251] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2581.372081] team0: Port device team_slave_1 added [ 2581.380265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2581.390490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2581.401047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2581.411770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2581.449529] bridge0: port 2(bridge_slave_1) entered blocking state [ 2581.455870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2581.462369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2581.468681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2581.585329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2581.601343] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2581.617591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2581.634038] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2581.640206] 8021q: adding VLAN 0 to HW filter on device team0 [ 2581.708714] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2581.719564] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2581.724659] CPU: 1 PID: 2096 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2581.731824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2581.741154] Call Trace: [ 2581.743719] dump_stack+0xae/0xf0 [ 2581.747145] dump_header+0x7b/0x460 [ 2581.750748] ? ___ratelimit+0x139/0x150 [ 2581.754690] oom_kill_process+0xac/0x680 [ 2581.758721] ? out_of_memory+0x44/0x650 [ 2581.762661] out_of_memory+0x4af/0x650 [ 2581.766518] ? _cond_resched+0x17/0x60 [ 2581.770373] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2581.775357] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2581.780559] pagefault_out_of_memory+0x4f/0xa0 [ 2581.785121] mm_fault_error+0xec/0x270 [ 2581.788977] __do_page_fault+0x4ec/0x630 [ 2581.793012] ? __sys_socket+0x9f/0x160 [ 2581.796872] ? page_fault+0x8/0x30 [ 2581.800382] do_page_fault+0x37/0x160 [ 2581.804207] ? page_fault+0x8/0x30 [ 2581.807726] page_fault+0x1e/0x30 [ 2581.811152] RIP: 0033:0x43e461 [ 2581.814316] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2581.833350] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2581.838728] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2581.845978] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2581.853219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2581.860474] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2581.867731] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2581.875018] Task in /syz2 killed as a result of limit of /syz2 [ 2581.880998] memory: usage 1572kB, limit 0kB, failcnt 13296 [ 2581.886602] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2581.893359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:12 executing program 2: semget(0x0, 0x5, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x121000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', r1}) socket(0x0, 0x4, 0x8001) 15:32:12 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f0000000080), &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000f0aa474e0000000000ffffffff0100000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000900000000000000000074756e6c30000000000000000000000074756e6c3000000000000000000000006e72300000000000000000000000000076657468315f746f5f626f6e64000000000000000000000000110000aaaaaaaaaabb00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff00000000"]}, 0x1a8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7f, 0x7b, 0x1}, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005004000018010000000000001801000068030000680300006803000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000000000000000000000ac1414bbe0000002ff000000ff00000000000000000000000000000000000000000000000000000000e7ff0000ff00000000000000000000000000000000000000000000000000000000000000000000ffffff00ffff000000000000000000000855daff000700080008000862726964676530000000000000000000626f6e645f736c6176655f300000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000f0003001000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000535dbe92b899ac04bbf1bab64c7c0f4e5fe6a68cb54a83a8cd6be7e71d700000ac141412ac1414bbff000000000000ffaaaaaaaaaa100000000000000000000000000000000000000000ffff00ff000000000000000000000000000000000000000000000000000000000000000000000000ff36ffff0000000000000000000000b003ff07ff00030007000473797a6b616c6c6572300000000000001f65716c30000000000000000000000000000000000000000000ff00000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000100000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000008100000009000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a0) sched_getparam(r2, &(0x7f0000000100)) 15:32:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x0, 0x6) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0xfffffffffffffef8) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 15:32:12 executing program 7: creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='fdinfo/4\x00') r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004380)={'tunl0\x00', &(0x7f0000000280)=@ethtool_per_queue_op}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) [ 2581.899484] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2581.919099] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2581.927697] [ 2096] 0 2096 17553 8388 114688 0 0 syz-executor2 [ 2581.936517] Memory cgroup out of memory: Kill process 2096 (syz-executor2) score 8416000 or sacrifice child [ 2581.946382] Killed process 2096 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:32:12 executing program 4 (fault-call:10 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:12 executing program 1: r0 = socket$inet6(0xa, 0x1100000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a63a0f73cc82f376fb"], 0x10}}], 0x1, 0x0) close(r2) close(r1) 15:32:12 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], []]}, 0x220) 15:32:12 executing program 5: r0 = socket$inet6(0xa, 0x52e6b7a02a45c518, 0x200000100109) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x2200) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl(r0, 0x8994, &(0x7f00000000c0)="025cc807ed145f8f764070d51e3a") openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 15:32:13 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)="4747500df5f0222fe0f4734a0f5258d11ca62c307350c9038082da812c") symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x200}) [ 2581.988563] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain [ 2582.004087] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2582.010980] FAULT_INJECTION: forcing a failure. [ 2582.010980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2582.014012] tmpfs: No value for mount option 'GGP õð"/àôsJRXѦ,0sPÉ€‚Ú' [ 2582.022803] CPU: 1 PID: 2402 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2582.032157] tmpfs: No value for mount option 'GGP õð"/àôsJRXѦ,0sPÉ€‚Ú' [ 2582.037044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2582.037046] Call Trace: [ 2582.037056] dump_stack+0xae/0xf0 [ 2582.037065] should_fail+0x144/0x230 [ 2582.046763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2582.053483] __alloc_pages_nodemask+0x128/0x13f0 [ 2582.053488] ? __alloc_pages_nodemask+0x177/0x13f0 [ 2582.053495] ? page_counter_uncharge+0x3e/0x50 [ 2582.083843] ? percpu_counter_add_batch+0x47/0x90 [ 2582.088663] alloc_pages_vma+0x2a1/0x610 [ 2582.092714] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2582.097622] shmem_getpage_gfp+0x118d/0x1370 [ 2582.102009] ? __wake_up+0x11/0x20 [ 2582.105525] ? __wake_up_common_lock+0xaf/0xd0 [ 2582.110085] ? __wake_up+0x11/0x20 [ 2582.113603] ? __d_lookup_done+0xb8/0x150 [ 2582.117727] ? __d_rehash+0x7e/0x100 [ 2582.121425] ? sanity+0x84/0x150 [ 2582.124767] shmem_file_read_iter+0x10e/0x3d0 [ 2582.129260] generic_file_splice_read+0x135/0x1b0 [ 2582.134081] splice_direct_to_actor+0x118/0x350 [ 2582.138724] ? do_splice_direct+0xe0/0xe0 [ 2582.142848] do_splice_direct+0x87/0xe0 [ 2582.146800] do_sendfile+0x424/0x680 [ 2582.150491] __x64_sys_sendfile64+0x59/0xb0 [ 2582.154788] do_syscall_64+0x61/0x90 [ 2582.158477] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2582.163644] RIP: 0033:0x457089 [ 2582.166809] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:32:13 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x100000000004, 0xd, 0x4}, 0x2c) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x111000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x91d) signalfd4(r0, &(0x7f00000000c0), 0x8, 0x800) 15:32:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f4836db"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000080)=""/84, &(0x7f0000000100)=0x54) [ 2582.185828] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2582.193510] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2582.200758] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2582.208004] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2582.215270] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2582.222514] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000003 15:32:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000001780)=[{0xb1}, {0x6}]}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x1f}, {0xa, 0x4e22, 0x0, @remote, 0x80000001}, 0x5, [0x80000000, 0x6, 0x1, 0x3, 0x3, 0x2, 0x1, 0x8]}, 0x5c) sendmmsg(r1, &(0x7f0000003040), 0x400000000000068, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) 15:32:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) 15:32:13 executing program 4 (fault-call:10 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8005, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0xfffffffffffffffc}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80000, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000140)=""/138) 15:32:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) sched_getattr(r2, &(0x7f0000000040), 0x30, 0x0) close(r1) [ 2582.232474] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain [ 2582.243846] IPVS: ftp: loaded support on port[0] = 21 [ 2582.259726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2582.272295] FAULT_INJECTION: forcing a failure. [ 2582.272295] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.283493] CPU: 1 PID: 2440 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2582.290743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2582.300073] Call Trace: [ 2582.302671] dump_stack+0xae/0xf0 [ 2582.306106] should_fail+0x144/0x230 [ 2582.309801] ? __should_failslab+0x67/0x90 [ 2582.314014] ? radix_tree_node_alloc+0xc5/0x130 [ 2582.318664] __should_failslab+0x7e/0x90 [ 2582.322703] should_failslab+0x9/0x20 [ 2582.326479] kmem_cache_alloc+0x3b/0x1c0 [ 2582.330517] radix_tree_node_alloc+0xc5/0x130 [ 2582.334989] radix_tree_extend+0xb1/0x260 [ 2582.339113] __radix_tree_create+0xb8/0x2d0 [ 2582.343412] __radix_tree_insert+0x46/0x150 [ 2582.347713] shmem_add_to_page_cache+0x103/0x230 [ 2582.352451] ? mem_cgroup_try_charge+0x1b1/0x200 [ 2582.357184] shmem_getpage_gfp+0xc22/0x1370 [ 2582.361483] ? __wake_up+0x11/0x20 [ 2582.365000] ? __wake_up_common_lock+0xaf/0xd0 [ 2582.369559] ? __wake_up+0x11/0x20 [ 2582.373076] ? __d_lookup_done+0xb8/0x150 [ 2582.377198] ? __d_rehash+0x7e/0x100 [ 2582.380892] shmem_file_read_iter+0x10e/0x3d0 [ 2582.385362] generic_file_splice_read+0x135/0x1b0 [ 2582.390180] splice_direct_to_actor+0x118/0x350 [ 2582.394823] ? do_splice_direct+0xe0/0xe0 [ 2582.398945] do_splice_direct+0x87/0xe0 [ 2582.402897] do_sendfile+0x424/0x680 [ 2582.406590] __x64_sys_sendfile64+0x59/0xb0 [ 2582.410890] do_syscall_64+0x61/0x90 [ 2582.414582] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2582.419749] RIP: 0033:0x457089 [ 2582.422913] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2582.441952] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2582.449636] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2582.457237] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2582.464484] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2582.471735] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2582.478981] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000004 [ 2582.533212] device bridge_slave_1 left promiscuous mode [ 2582.539699] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.550316] device bridge_slave_0 left promiscuous mode [ 2582.555754] bridge0: port 1(bridge_slave_0) entered disabled state [ 2582.572609] team0 (unregistering): Port device team_slave_1 removed [ 2582.579564] team0 (unregistering): Port device team_slave_0 removed [ 2582.586441] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2582.599643] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2582.612858] bond0 (unregistering): Released all slaves [ 2582.641198] bridge0: port 1(bridge_slave_0) entered blocking state [ 2582.647536] bridge0: port 1(bridge_slave_0) entered disabled state [ 2582.654020] device bridge_slave_0 entered promiscuous mode [ 2582.666243] bridge0: port 2(bridge_slave_1) entered blocking state [ 2582.672588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.679048] device bridge_slave_1 entered promiscuous mode [ 2582.688297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2582.699057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2582.715900] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2582.726483] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2582.748237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2582.755045] team0: Port device team_slave_0 added [ 2582.763155] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2582.769919] team0: Port device team_slave_1 added [ 2582.777953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2582.787975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2582.798059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2582.808384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2582.845795] bridge0: port 2(bridge_slave_1) entered blocking state [ 2582.852138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2582.858649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2582.864955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2582.980622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2582.996888] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2583.013162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2583.029832] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2583.035925] 8021q: adding VLAN 0 to HW filter on device team0 [ 2583.108723] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2583.119609] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2583.124724] CPU: 1 PID: 2415 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2583.131902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2583.141228] Call Trace: [ 2583.143790] dump_stack+0xae/0xf0 [ 2583.147213] dump_header+0x7b/0x460 [ 2583.150812] ? ___ratelimit+0x139/0x150 [ 2583.154756] oom_kill_process+0xac/0x680 [ 2583.158788] ? out_of_memory+0x44/0x650 [ 2583.162733] out_of_memory+0x4af/0x650 [ 2583.166591] ? _cond_resched+0x17/0x60 [ 2583.170451] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2583.175439] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2583.180603] pagefault_out_of_memory+0x4f/0xa0 [ 2583.185165] mm_fault_error+0xec/0x270 [ 2583.189042] __do_page_fault+0x4ec/0x630 [ 2583.193079] ? __sys_socket+0x9f/0x160 [ 2583.196939] ? page_fault+0x8/0x30 [ 2583.200447] do_page_fault+0x37/0x160 [ 2583.204221] ? page_fault+0x8/0x30 [ 2583.207730] page_fault+0x1e/0x30 [ 2583.211154] RIP: 0033:0x43e461 [ 2583.214315] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2583.233321] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2583.238659] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2583.245902] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2583.253172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2583.260416] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2583.267670] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2583.275018] Task in /syz2 killed as a result of limit of /syz2 [ 2583.280992] memory: usage 1572kB, limit 0kB, failcnt 13304 [ 2583.286604] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2583.293348] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2583.299476] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2583.319097] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2583.327699] [ 2415] 0 2415 17553 8389 118784 0 0 syz-executor2 [ 2583.336549] Memory cgroup out of memory: Kill process 2415 (syz-executor2) score 8418000 or sacrifice child [ 2583.346425] Killed process 2415 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:14 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x8000, 0x2, 0x1000003, 0x8, 0xffffffffffffffff, 0x8000000000000000}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000300)="495f1f", &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) 15:32:14 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], []]}, 0x220) 15:32:14 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x181040, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33000000020000000000000000000000030000000000000000000000420000000a000000000000002f6465762f637573650000"], 0x33) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) write$FUSE_LK(r0, &(0x7f0000000200)={0xff6f, 0xfffffffffffffffe, 0x7, {{0x7, 0x4, 0x3, r2}}}, 0x28) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="a004d300d6000000010000000300fdff"], &(0x7f0000000140)=0x14) syz_open_procfs(r2, &(0x7f0000000000)='numa_maps\x00') fcntl$getown(r1, 0x9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="12000c00f69928a625d7b40000000000000000000000"], &(0x7f00000001c0)=0x1a) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') lseek(r4, 0x2, 0x0) getsockname$inet(r0, &(0x7f0000000240)={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x10) 15:32:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20003, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x64d7dc44}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000500)=0x400000019) r2 = gettid() wait4(r2, &(0x7f0000000100), 0x80000000, &(0x7f0000000140)) timer_create(0x7, &(0x7f0000000300)={0x0, 0xa, 0x3, @thr={&(0x7f0000000200)="ff46fc602c08c9a9d8b8ea28c1fe3d041e1a738e10683181d5ac6f", &(0x7f0000000240)="a9e0399da49a1ad297215d98daf1ac315b6fba2221ca7db2a1dca2bcdb9fe3d2086ba9e0001accff6bd2a8129e8756268afa80d74ade17a4b405dc2e4423036bc12804e4e9f9538cebecc7c35d53697557cac2c682abb9e3758d3933c14514e52436b6063c1840d4bc92d18b005cade1653a686a1e7df7ed46fface2afc6932dcb9a559b1e590f906f9522b608"}}, &(0x7f0000000340)=0x0) timer_gettime(r3, &(0x7f0000000380)) ppoll(&(0x7f0000000000)=[{r1}, {r0, 0x4}], 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) 15:32:14 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000014c0)={0x0, 0x6485, 0x30}, &(0x7f0000001500)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001540)={r1, 0x9}, 0x8) socketpair$inet(0x2, 0x0, 0x10, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001380)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @local}, 0x4, 0x0, 0x2, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="9325fb0c96773c6d5bbf29a21f17dd36186cb88aa1a9f44e605242253758f752cf508dcc9d3b18d68caf3a8fe202b79f8e47c2af312519cf5489da3b42527d8ca5de094ebf7ad1d5c8d8711616204d0ae9aa644180adc186e7ac3fca4f50a63cc442a1e93ba1db1e5dab5b3c805f38b86952633e7f69c894b8f0324498c49c77df41f2b2a34c1b2b615da08a99bffdc8fd443dcccd094c213e9442472e6b3adff9b55b9ebce225857f9966134c00219c7485daae4c60f632bede892a3390c3b91aabca8fc1c6aadd47cba954821bfbe7980ca805aedca4d11279674fc72a987b1f4e4ea86af9931e849342c7c194d4ac", 0xf0}], 0x1, &(0x7f00000005c0)=[{0x20, 0x102, 0x9, "dc2f5ebfadb6614d69"}, {0x108, 0x110, 0x400, "1f36b7c05d658bee2f436ab24cae7804f9a0297dee38ccc8e540812b51d4cd34e06424ea3893622fbc45969076907cb5e3bf844fa084c78f215b6ecff1191084ac674d0a1709425c63343bf6c1acc50daa7309b4852e8c3d0128d1c407306bf28161238147d3745217085f8b5b7f8af9c3a9c20f2d29616198c1a98d141c0a4d53f38f70d9b8f6f262f57fd996ce2f64d90e6210f7836c8c51fb1600d954fd3bb186188e76cfb4ab86a7274e09c86b599654b13a1b9e784050c2a667ecdad37705478721a662daa20829f62107891c7e09a772f9964bd8ba8a5ece01a044e80465ff27548bc669464ea0be5fd9ea06b708ff2733"}], 0x128, 0x40080}, 0xffffffffffffffff}, {{&(0x7f00000003c0)=@l2={0x1f, 0x2, {0x2a5, 0x44, 0x3, 0x90, 0x4, 0xe201}, 0x2a46f73b, 0xd2dc}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000440)="e2a354fd793bd524105a794d53e7dcb5954d88850d0018d16359a18f45afb8235edd16d989fb26162b94562f23db9d536bf7fb6027bec1d2eeef1e83", 0x3c}, {&(0x7f0000000700)="dfc743ee6d5d372a870b6b7240524331b5219be5cf669a96f232fcdd2f5489cbba3a6696efb71c394e8372a391a545f273fd3be14f29fb3a00f42701c918abd308320264cf680124c2e8b7", 0x4b}, {&(0x7f0000000780)="85670df941f5eb00b0774b56473939c4f27d050366c980bac786e47b4ee43fc7a097faf81ea015300b7fc8fd1b5bc5116eecefc6e806d2acda0ca32b8ddad67f4bfbcf03b2d7c06bc6ecffd510b15597e0960fbf67f3231ffa17951afa5d350ee1b81236300ff5683548a68f537a6af9fc5080641689c04d9efe54d236e0445d11663685d145bfd2b3bc26f1377179997bee0349781387a2e2792d36cf92c0be2c7d74f222d5ab8c8edd839c4f9419cc23f7081b1e7fbccbc894", 0xba}, {&(0x7f0000000840)="e5bc278381b2a8917557b97fe9131ae90c5a0cf708e2648c23f08dfedfeb46fe3f3d13", 0x23}, {&(0x7f0000000880)="b0ed00f6312843b5c4c7ad5738f7d21de2461b45c24211bb1b7c9b24756ed53e6ac2db68bd5de35962c4cd85f8e4191be6ffcea3cf09080afecb3ee6b712f2bae5dffb833f604fe92b60f3de5edcc2332ce9f60f1f796a2d47314e15a9d195c5197296ee370f9a1733a2f7ddc8f674f88b", 0x71}, {&(0x7f0000000900)="a91ac39b3f3ef1465c3258b771829f39b588fbad3b78213c8df4f480e69c42700431af395039ada6b6a7063163439f20227663ab53550754fa6aca49fa563a841b0a7ce7196d210db70c8b66cbf28a4e1914f2a3506568e2672f97d4ff51341d98c3e05bb7fde2b05ede97d52e037a4f15a988e77353df7ca4845ac09d872de57319acb6f824e93efa66d4594bf0bf1922", 0x91}, {&(0x7f00000009c0)="120ce003186199dea32d2168105ed44701ccb0ebddd8eb8e26f5f97f9a873dbea2397add4e891494f1c18949891f572abb1b83eacf39f739375c4d9b2069889e6fa2a1f0fd3bc3e7677c869f1a621a2f176b237ae46582ef810726a0e731f06fa365684725761773e9409821a4995206789c3bf58bafcd82", 0x78}], 0x7, 0x0, 0x0, 0x40000}, 0x9}, {{&(0x7f0000000ac0)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001680)="35778505023643c23320f46f21ccbc9418e19561101a61bbb91837c8017cb8751d52098727f4223db7f781942ed0ea1545ca59ed5cdc7542d3184232bf0da46bfcdbb2f1413d34ecbbe680633f9c3d788d1287642c8d2b15a35e8d352bc9d79325ae6790d8d6f727e6c826165ce8e26b26d30dfe2a33eb5f721f1620b073004f474e39372ca9135b8c3917d3aa22580b20a2148be60a60d5df504d3a72f1b8b21efe159d1944088637419dc20ab09815a46a1bbfe1d8d613ce356df72a45ef4119c0dabf11f6877e5ae9a0303b4eab59176986954b8a5de4db32d0d11c5d540d634e42e6aa74022bbfe2036c9ae4ecb15403748962f73660db60097a8493e69e61dbd3285d909c2572deca7af09388b1301572094562862dee9314d2cefd8ef0c102d7a4808a858f02ea674c72d3117e8e90e9f7be378f39705aef5e5d2545e2a1915b02081f78b580c55f9f6417c515ed9b15687a3dea6f64dc230d58341d2415d0828c95dbc77c4e510444dd31fa3ad7c4cf8a073b814a7ded1c20802731ddc161582908a61a05cd942dce2d3cdacb42d19d534c1f4d63c1f41b7e0341f7585c54bfad4fc66518d3c100ab1909c7e6b5984d2a47a22b7cd917be42476571359dd24f8fd88d8fcf38b874675dfe9f3a31d9d9fc2f8a08935f5e0101ca1af2d87a8079e569938c2a95c710a9bdab844a07e2e8c92368173ba59d308d812fd6ae3a9d8d93e08cb351e3c5304372bdca43ebfdfc3db0fbff3fc763dc053ed7fa0438cf30d523747af25169787954be7f961661ea0995f02eebf74a0fdd63e5bd5217b035824ac5b02b7565e59e2ce0a021e7261fe29723948b4015fedf355b63fb8d73a1179fbd001e90594c45d914c83505aa3193a7f7978094851a06c095a7188de04cf77f29783942fe824af16a3d77a71b4fb4057ee9ee1d0fc6ecdcd1a7d6a7f4c3df91800b084a41575b1a41ba846ae4b9ec3a7adb087661f72b75f09ded951d2925013fc91244002d1a2a2ad19709aad079c2c4ed02ee4fd824db5e4de7896b1006a643e695cd7631ac242326127a8f0c60efca686b7ae201829b755da3491c80020d2cef4f7d43603b3e19447b18565c6e6cb7a0818751bc5a8961ffe403c5bc0e34387a5a2867941754e930126dbe657b6080595625223a94d7a9cce2e45847947d971beecdfbb6aac2509711558b3a977a81258b8c7fdf6a31137e01fdbb4e7c72334807690b90ee72bd0c9310007de67a25ebefb2a42c1a4268048938dd4eb21d2c86996afbd28cd9d21435a976d80b2e0f63e893315de06f364cde09031d57d47d346ab37dae2a04a1e69572bc5d3e1c7cf070e56d4eb08f3865cf54ec704ec802f72a5a7ba5d45d6f2b74b264a83160828947ff6020ae425c0793f961d3d920dcc9ba961b1d0560b5298fb926bf5c25f4a6a789e8f434ee1b7b83673a3c5b2654e33c2d7b8e1a8c635b133c9646c8a439a8c9663b86a7a0b04ee14d67e535fcfb86d93afbb81a58289c30bdddc2ec983dcbd9b82a695e3146c2ab92e7a3cf0fecabee1d36cbf83f5cf4d3c5cc216bfc94d3c18bfd8937d999fed2aee21f1b242dd20950bcc25127fc566afefaf8ff7872730f6a4610cfc56dc1456340d5a15af5183c582a1e81d9c2ff1aeb22e6e4a34b187ee37ad9367296242be6def923d0de3bd94e79cf8ac01058340529e6b57a6808747fb15de385679c740914d4fcfc1c9a81c931b228c4576e6b79867f17465f828bb07481656a0488b955ff5b285ad9bccc4582ab111980d4afae4816d9580acbe7ca5c08fad6088cd1847c0650dd31fcf1e8e1440f75a9a0e567212677d6025d599d24a7030b2950f03165bc47076e4bedc99456b1d17248578c1ee1a7f9eafd752812209478a60f259ccee4692f7ed2984fead78d8258593c3a9f47929a775825d11fb8676d9dff3def46ce2f97ebe35005eb39c7511e1416280b518cd3c4af5a5a0d174bb326e15a30bb082c37f2cd9c77ff5d64b8f67f2f03c9bc3522b34b3d5e93bef62ba5a4e37332b7637bbe39e6799a259b8609a779b7217674a4f669c7582de3019d3f1256ef53a559e8c36f727f10a0cfa192fbad7486fa4f22e70b4c26f64cf590c9e0a649c8399d44cdf8ed8782015b387e3a31302d0a8a37bec14ffea3621b48665eddb2cca0eb568c747e6479870c9bbd9dfe8ee1ba22cccda1e15e3691d347db78f5d2d76fee79cd2cb7d543f90573379e0355d9961dca91b54b4ee942990ed90541b95ff80284c3a5949046178049a235c84c5b2b0a5dd6255b81441ec5a9fddbc17677fb6de77db485a15f3945cac9b13bd4360f736940b54a8c8b93da779fff627e0d404e87599de95512276f7350579f38f3a7a06a02cc86c6e05e8fab7ba11116a799cb21cda268732a8bfe521f786ab0959eb3f84e7fc5e302d2fe3485db565cd73c9aa177ffba841a7f0bfef4a91150e8521ecb5cd3dab990df663d62d75eed492755443a236477447725b790e4cbc92facdce95c4bdc6760b874f15ca921102a50db6872970fc9ce2d222ca19a640699811b535f01f330c15d0c743831a71263deb63f674e6b13115f562ab547f27c52efb64dfb59dd2c57a9630afcf1f302b101f1f6865efbcdfafb5c19e288b48ad038500c4faa6ff09840ee89d573ba4552ac083b5ac70e3dc554946f4ae342e29deed17044d752aa4963456f1abae2a1907d16e2b42e7edee23c654cbff78b815fb43a3885cfc6fb75a69f168375f36d1c5cd61f3c9b1b709e6ee0e804b7dcb15d39334379f373872c91f99c525d67b07fc4359fdc9f84b01dca231c499c0361ad630f5f51d159c79b663332df4edacc5815891199f84ad917f5985cbc91db27a97f49098f7782f7353ba2ca5c7357fe8093289b2342c5768cfb3f7d99d56142869ef4d1d23af03dadcfcb613ef78ab7acf26adec3d28103d091fe9f6fe5a62e0db3009d4bb474616006ef1f0b5c90bbb5ef338345e9e15f2db2e1e1442d21200c3b39afb8d65c9e2f1644c277bf3b802abb8fdc80ce0fe877a5dcac27d4029b007579d5dc3c2544cf989c6fe73fb61a528b679f9dfcac95a34ed77d0d1d0fbc38ad48a897007c68217b4a3e5201b0eb796238fdde195f0c13f6f0424b4cc24f9827baac45971d608f6417ddc3c52e53accb20b1f7ff94d3c1715bc24d8e319dbff22d7654262b1043f742c31cac1a10a2fcea69fd3a266cef0bda838a7e87cd73f97f8cdd1fbf2a37a6a013fdcea882c075a117abf8ebac82348ec243c624ec9d348c761ae826c8498b30c459ef32387f21406cd08dbe0abdb9cebf0b4f48730acbbdc6b19d8b11e337ce6176cdd3f05562f73ac1af2bb9d886bd7f03d725bf6792d890ce22504118a1a33d8b653e4b71e8a4ac47c8a02acc5242e65ddcc6d401460fefdd74fed046841914decee76579b6b4e024474f36a325c351b7dabc080908d863f87a28043e0758d36e0020c0bd29a4cf0693ce76647d942cc7068b8024ca6e88a84d09f84c027fc6b6069215fba062147453d5e3b424d362c106a8cb427e3b65884aa9de3707e0767c2f2fc21bd6d4e2a4d3040d4ca84302baa82d7ac5dc357038c3369c138e215df97deca32a4a19bb28f9905d98178ea4cbda7f05bbf4b81b0a1f7f173e7bd0e01faa77a3b1d2d468169f9843926ca879615d51df9b8e81913d2a545a71f0ebae0ee51ca08894dc57befc77a2067b938af351f57d6f9f6c87b244a661f57b501af35bd6a6538f2dfcd29498dd3d581f3c13eca8c5e966b976e637054efa97b381dde79472c66c24d2c25e77cf62442389fa84fcf4187a54009498a9b03d9345cfae479571f83d8b1e4cd9da56b61fe99d018f212cfcf7d95ca66232fe8da83f0cec0386b63cb4a7ef56b736819e28aea79ab8a2928a74763f509a98a47b5194bba27720fa57aa1dd86135df4d2d0e84ee948ceb686f647e6ce3203b268997e795036a93a7dcfeda138998cf4a9203d16daabbcd84cae4f65e53455920c1b0f5526af92d2bd1dca5b01b9ff34089993e1e6f50483696df49298e41afdc3bd52fc5257b6ef3db86f87ecc649643654b73762d95b28f9a0821ba767e26ae49a68e91589bd3b6f211b618809df12995833d94e0174873dbdf0648e4f95ce2696d1c792c452527e62ad28a04a542c307c856bfd0255b9e3d8432d6704e705a0630a59a57ce74525710b416afbf528136fb1348a7d307fd04d1cd5a409d1bf2f7595d74033fdb9215a0a32024478dfe50cf8e9de8b2d788fd4ba4846355877c06b83d8d76811e1b493f559a87a0d03bca3fa24b955e802a022f0d16538a391e5486e1f3eeb44ca99213338500b1979fa31ec4ae9c8febb8724b86826093911c4c12c987733cd1c9242df96bb128280e449413b75812c56fa90c422efac47d2a486910ba4e9f12630d6bc2edfc934ffc857ed7ea6d52f633d011f631410300a9d286a96df31939dcdab3c449b307dbbfc6d84b596bd8a08faaaa2dc037ffb42fa566645c3e57baf946af471ce77d3def4f11e67ed67d25c1b667bb0fb558ffb3b3f37665a4edc6e4331adbf1d2e7f176d69abb98ec4d4be4f2c398675a552147fc871507a37e7a5a8c31cd9feed97b594a16967061ab04c4f9cf1789582a95879604506c857c259ef5211d66e3db25e9c129413811727637969d3fea3330500ecf0f0f51922bcf79678e4e5af02de0ef3e3d23e38210e148a06b70dae832af2548e32ab0b12346276c193add3997152f45fbb9644015ce5c3d9b6c4a0549cda45fd84fb52f780c1c19c7e5a364da12aa38cc58a4463a0782c88cd8a50e37bad9936c14da5401fad331aa2480ca114e93ada4f35329c19d04c1d111178f0d279c70bc2ab5539904716c505b48602a403ec9e385d3ad868e51d990d8d65e975978c47fd70cf944710147aee688744b9c64fe2769a3fa567c60ec54d4526ff9963b1d642b1433c0033df6a9db19044b7fb7cb3a1bf51eecf2553a9379b1994bbbe4c66790c3b686d2ebeecb591b2e9aed9d4fedc32192e01b632328f88eb554362c1a66c4980686c5cd484ab4eeaa85b18609e357b6259a28d44a34e88ef80b1fd7499bb227225ea3f6e9448c9421753100f4d681136389ac4373109e9d32c1131be7828830e65e31179b9335f3ead68597e40224e513afa30f4c27dd382e9df867301ac0465893e39996fb11d857a6d75ef7581bb06a40b96c1eb82c85135b2d9ba6762b6790fa8ac231ba3cc240b71c6b31837383c81909ad7eae7e560ddd5589a7d99ed372c0ea9cbc9b7dd56aad94dff69b69445ff07841123ee0288c74f56feaa8945dbc33335714b09d87594bb95d1368be97ecd44fade8236a1318b97b241e2f97594dd9e5390582af612fd63a0bf6ade56641db488853aadb0f742d4ea190c652670e58c44e7dff1aca75a6ca0cc6d5ffb0e5526bb890e1b20f44cbcdae0d1eeafb359ff5b50517d4d76873646aeee00c14d227229cc500cde5bfb6fcc705454306908828a1659077827858aad44529bb9aa25c96c7b5db7d68233be454a6f453b710e3280a9d9a82cd660e8d37a554fd435739dc840406d6fa0b07cb1f412208ccd3b06826865995651c298b729660db6b7c5f56c85d9d04410c0e5c7c448038a2fbd53522756452e2301f878d55ff7de50d7943b22894418c0d2486284b0b76be4659c3aaeb36bfaa39da08a213defcbd1e5a37f42825c82c9580e829193e1e1230f046bcfe446bca3e59f74407a30344e0dc2abfc9dd580df9894eff8acebadfabb2dc", 0x1000}], 0x1, 0x0, 0x0, 0x24000000}, 0x81}, {{&(0x7f0000000b80)=@in6={0xa, 0x4e20, 0x4, @remote, 0xffffffff}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000002680)="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", 0x1000}], 0x1, &(0x7f0000000c40)=[{0x78, 0x12f, 0x100000000, "cd4252b79dc33a93bc75f6a3c2ef44e2968973364f9afe81a4aaea11e8a90964b20e5fe8763ca1bfd6dc6d059542482a5dba632773233d72c79a6a20b60c4e69d703b83f936c41ba1851b263b5359f6438febd8737e0d2813bc46e0b41ad5c165ffabe"}, {0x88, 0x10f, 0x9, "c129fb36ca9bc113445753b7c01beec4248c13d1b0f8ae9a0f18a356d35092b36718c4d6172d8b4f059a920c8edbff3e79ba8f772ef6fd1339187586940902f9cfe043645a2839b83463cfa77710ebad8df82dab0a1ac21787317938f36acf152b780bb2f6a8af84b354a44f13d0aca50a6a"}, {0xe8, 0x12f, 0x8, "a78046a2c49de37c829069d3fe65afbca59a24562c748215513f1f23a35c4b0205f69540fe18229acd1824aec8ce52d4041f9873e43d48542b45c0457f563debd274821009e26963e1e01dc6cfaaa6e039d59f7ef7d30cf623925eb0c8c934c5b79c4b1041f172d0a29628aa9cda50601559e8d9af167e922fc46de63122c583f98114f6cbfd199ba940b44a5d03e8dda839a3b0e243924dc60430c4a7b4e0992b63e4c9c180f6355003061c8f1fcb8ff4e6d18b1470058381049727d9ff6d2c9991751b5ad1a9db20e4a1022b64ee40ae81dc1b"}, {0xc0, 0x10f, 0x5, "25879aa801286f9449e1222fc1d03fd808d669a68f1f3117483ac2cb4024cee109257fbad35afe638bc649147634f1e570f6acde75b1f979410f32b2acb306948bdc84f43cee08d387cf9bf595239a6622ce097d29a15656b8c13c662586b7e10f3f7db9aeb94b89f0b9994f4be6b634bbc2022c05d72cf3269ac4bf4b96e7cfee2f0b75a47f08004fd0e0af2b3118fb1c271a698e62f88f360a36529ea03f9c3fa4f8f0714ce6651891b16817d043"}], 0x2a8, 0x404c080}, 0x3}, {{&(0x7f0000000f00)=@in6={0xa, 0x4e20, 0x3f, @mcast2}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f80)="14", 0x1}, {&(0x7f0000000fc0)="0a1c58cef2d5002f591ed0499ba7e65503405c96e5401a89aff070daaee00ee00b096b03bacf6002d87d13e64f8f8d73c50a92696bd3734914ae7ab2201e2e58f9c6859521d18c70ef2d7ca64dbd674ed455d7ceffce2083e00f310150fc77c4dfbe9b0a3df4df40d6f043cfd933327673015a23c4f241", 0x77}, {&(0x7f0000001040)="b29f4609caea0e01142d888e697c4d47142f204a06db6b16e1b53857638619aa503bc5368296e7433721df6b8adc3c08a5f1a2bba976b70497bdb046a375885461a218011e528fef0353877d1a0113bc5b67a784925d4e2fe41a6df214a05f3c6bd5af943a915e51f6e86e0e2fdde3106e3d06bf1754365a2fe53a5f43d200c5508e311f00da48e9e89494648d228934a47cd9f4d1b6f9a0b4b8321e53eb5a1732cde6c82ed7aac3e9727e5b693a9c9da5bc6df44a8a4e9455666eeb987799a6885f56789d5592a48ab1464904fed72edd6ffaa856", 0xd5}, {&(0x7f0000001140)="5e1555a460b0c672417a42edacd03e6ce6fc2ed73b2c67b1f9fc6a02aa2b1c5b65e2ea00f87da2611cf2a3114908a1e8511b", 0x32}, {&(0x7f0000001180)="d2e979dcc2d6db0fdb52ab0d3dc2e56d61963fe5f4d634613893409d375605831a608906d47daa3929c249dffcb96b13c5db80881a7e56eb1bfcb9a869b1", 0x3e}, {&(0x7f00000011c0)="44d280f97d9050aaeb89eded848526edee9fe90a90e6fdbefe3c5499b5546ad24f02541e18eb25203985f32bad9ddc9ea3caf1e01015456af9e5b219f5a5c6cd0a4d73dd7569d096326fd0baf8141aad9080b43df2c20775682adcec4c3f55f8cf5ef8e34a897fb34ce0bf8913dabab58acbf698d0c1fb70e04a87f365250ec90716bf4930049c6a0d2f288e5e6fb979b136ec9312155f700f0cce794eb6e3487961df209011c4de95922642ac4292141856b516a269d719e3b90b2765d0e5a5cf597f7a", 0xc4}, {&(0x7f00000012c0)="d8f3a1d77c66f3e484bc1146338e8b3c88fc2d0aaaa5d3c257063fed072e13707d811ea0e215f20f2405513ae46a16", 0x2f}], 0x7, &(0x7f0000003680)=[{0xb8, 0x117, 0x1f, "1c57785d4e301e4e722ca9c3d40fb686eb55ac1dd75975d698ee02b20db4566aec301fc00748c4d9a86a7a6a8dc136d61cfe6e53b15ca3cf6c3762cf7c48287f06fa8502b700146f9cb7b1b3560d7180d6c73f1882d1b485ffc0bd4c9b97c8919370995a6a8c07c5790cd067ac480c70bd354f1f3814eddd3e117ffb49c8e568ae06060dc7ba883581e2234b5f6d0dda16849abe36bb6ae8771177f3041e06d4bf21388e"}, {0xb0, 0x112, 0x400, "65bcf7525ef88c0c6d3ce92c1ec1ee7d52f353bc5fd6cb636d08a07dcb3fd13d46f325033e865190f76920f1a42bcdc1101e616cfa3631529c3c09ba2867b8b6056048a8555e29525d0cc81221e66032b9ecdd6680072a2652fcec0b8898bc26a905384a1c6f9838bf36c448fb02a7f93063ad2c872cb2ab21e3d5b0e71f6f4b9650e00753213fdb0576dfc080eea722c0ddf07c188dda1eecaf69"}, {0x1010, 0x105, 0x93, "d3fccd170668fd779bdff17953588fc26e5ba1738445e4398a37b19c2457961968c95c5e2e603b39fc4b608fd6207540729ae108ecaf5c99ec93d648bf1c4b78c19f3b4f7688ea186abb81b88cee6a55692b3ba2702591a0959eba11b2e43f03577f1fb252ae83feb96193480680d211446dccf650c4e6d44cb974eac315b7d0b716eb616dc58b9547e7fc90242a9fa89480b886c890aa1edd03aea33077cc6b453d21158ac09e71e1199625f15a6d33f3bb789fb80ba435ffb7e8d08f473d9aebe3317961bdf12d6716a624e4682210106fb42629a9ccb714ee2dbfeee9b5835abd55c6b79808ed5e5d52c4645185d440dfbd1b69efe58540e2062af3f5fb13c27aa5164d01b477e9e63f01807ec70c0b216ffac1c93d0c2e21ca47267030e83744f3907536539890f524e2bbe55ededd4171c6d999eefc70d2675ffd29d1d1e34206186bbc2ba4c26b99d1cec1d44b8d303cf2012adef789ea9149f7a4703c0aee2afb60bcc1296827322baa0d4ecc0b1cf82b83b95bcc0b291fc89826b9e6ff22acde764b0dafb9b4687bf0d1dc7258ed97ce84b825f9a322fd812ae3605b127cf8cafdbb94c825b1c3cfdbbf6620ae0b43904491a9a10c46d68e784f52fa4060f862cbd7cd92b351aa3c8cee1e09fd59ebd2f72cfcc26bad09cb2822ee73a008d9d517ced49a78240c8e2be920e7d6f7f95f81e000c0a464bd9b6dbaafae269dec862d8bd546b8f9cfe39174fd253914769121d699719d93eb784b9ded5f45cb583442bccce5065f857874ad9de2945928c9415c56c2e4264504ea0f069ebae2b851865987951e30b057db16b7abf0d0f16f08399e6dc86c73ba4aabafa8485b48425bfea179d77b64e4a18767df97ac61ae4145f64c601ac357834126b695677b278cbef357176cb8f5e90d672b80e02b998dd2e5fa4390fd27973c499d11933d0e566ed08fb424da89709538c9874e1f68f08f5b2967dfc375b31bc2bd9fcdbd963ec8906202a08fdd0f4b6096670d574826b2ac194b273c6d5144bed51fe9ba599782c244a9683d2ef6c8ca82f4598ea165c2edb19d26c83d06f7556625f70d841f2051e1da3b8aaef5daeea36a9f3da592d1c1d4fda0c95e2acf0ee8096b8ed74e1204008743b7d0e06dadfecffaf182dd0f74e0d4331e73612a31f7a0ea1fdf62494ab52036eaaa566fe3477e78fd22406cdfc778245ba44dd729792695e63f71bdb08853086df33911b8bacab855090c980ad09ba2c38a55d1709f238a3cd7e595de874185fd7f3ce12003f8062e54c07aba632a7eccb61fbadf4a6d87f89655b977a865dc61cbe96b87d7ce4e863e3835665a7a456dd22ee1d142b8b24a8025b2b8c3519a0b6d8201e7ced998f9415099949c8c21692703c8325fb814ebcd94346265cdb4a32c3f2eb617c3b6b83f11bc7b6566a6e968115623ddffed238b5cf98b126361f6a3fc6c18037269875116c9c15e28b0c903fd47d42e046301087c5f647426a7dc564d48d80c41f53d85044bd56fae900fe0f2cfe14d06a9cf0951b2a9ec05e1c14a5d821207ef9a49a1c06209ee19ddd15864061e0ae56bff2aad16b297c04708ec184afd638e9d2608150a2e4e1b3f81b8912671fd8623ec98c6d87e112f201a3838f2b405f84c547d333b58c2ad8789e78e4380dae6b158b4ae480fd994dad6a8ccd666cf1b5ff701d0f4264014d897ab779913d0321790e13cd9ae3dd6df2a0f5a95c069ee19618bc51bfe19de14f18eafa8b87c3654bf85ff43f1ac08441752346bf4b33fe4ad79a0792ea5f5cbdc3a6988ccc8ab00c40eaee24c308a403059fd4a20ab2b1e55131bb823f3f226d6a9bebf29b7d130ffc619a62cc4feb78dd84e5ede3c3c5bac28bb2878b09c62152d9a0c1ef7f6fc4ed408c78f7ed8ebbf05a8bc52d6a7954b34cb3f634713cd1ec742b2e837fffc1e69c11144e329a48cc63253aa89aa221091fc6eebaf388aa533bc273306ce1c75751b1a0ab692d30f62263e2541f877a5caa73ab852444e947c6269ea54ef182cb6c77df078f99831e056728aff52e3d399208d1088feef7e237ff6508d64019e68be807c7a4881ccd0bc2f53dd8887209d7947aa4adf996980e1ca35e4f42bf04621a3a23f9edb932d70cfacb18364a980ffbaa71c2ad5fb360d14b5623a377a0332172294815796c5a6f0609a16313efc44143dc775f8135f3acf8cd85d759f7bc5d37c748dfd9459aba68d034fca714f60ae42b8e567df91a181bd97512828405d1d8e46643f8f545b5123e2aeae3b6091842cf625c154d05ccc9a51c3ca21a72e5651c6a80a701a345ab55aa0864d3432836f6c94f3a88a0e0781aeecab2b8cf160e3115714e0f37c943475fc0ba27ac0f08ab847a2b30231088c2beac781f77c5027bd330699f1fe7571d9ef39b9ec18d06c0a56caf196e7757d6f6a510e81afd325d1cf07dc976e7c59de2b8a09b473edcf98bac93a5df72e2cda007420e775f758da6afad1a27295cf2d3048a92482796650c728c22270f1a99262db1957c90f933cf7017dc70d73e3d0c132394bf75957366c19020d5ebac092b1a7137bd6f35213a6a0076df5fb387bf1be016496c3ed5a897e8c43026422c3580f507093515a4bfdfdba14fc9534fd7bfea1c8ba8bc28411407af8dd271acfe273bde942deb4b636561b511a7c77c67019dd3c60514943ed7fb32fd95e12878aa04d67db5f476e2421cbf7e8ec44be0a99d4e6b5691080746d427aff9b8c2a714adfaa41506f62a406a85cbf84de33c136fc4c36e0983b8b51cddba4e7ac70d60da27bfe5cb496afe39123e991fe27927ae30aef9a825d5b743a98bfa18327fba0ff25cf7ea3616bca2b619c1c702452a63fc7212e4a9c28ff76340b5deabf455cfe70a273f15fe9f9091994faf0fc75367439e5d997912c7524fcbe5d0147d2609bf7cb73d4a0b838e9bf3db2984819d2458cc2803d32ad1020e8382adf2da7e205220839038c351dacfc12ae15a528028f4f2a3b6d8521f833c728b2f86e35f602d4e0dc1f44dba80620e93dc23100217001fd80a52aae4ab65621a754d43c0f94a310dcc6d64181d85fd567616251fbf0ad161e182dd503b36d78a68395e632d9310344b075c003c29ecc237d3bd9acaa712e6e469424f8d6042859d5a2fee2de2aa388a74045fb6c02365a414df72342d5fe6ec94989576da02b6b3febd3bd07d46bd3acda723b67b72df3167f339d1bc0155936ea031fcc5d6928485aecd39ebb1849ec7da2c1f175a97c37d9f8ff4916400e7d472ada90f08f116a5b4e84b7240d0bab6698090d9279183b2cd1dc150ee59a0b8f6af396e1ed698d99bd3ababa841a5ba72c7eb2937e07570f755007879b6f8acbb4f83f1cedbc4078814159595fbe7764869ec0413b0b83baa16e41f92e38138c5dddb665daa9cf74d8139d46f450934bcab6b7ab525a2346933d742b67fd364f55cdc5dac3f82bba71a26c83ff706a152a9017af02aca4fe9488fb94bdc5c8c2b53afba0c6e6f260ae9695ed4fe2257deb404af0819f1f46bbdb1f3e7ceccb94bff92b456049e1ccee448b1d3445dced6a554f568c6f2a4984a7a3bd3e7c532048b5b66753b91e87c912485d1084bbdbf0ab7b8be1485c0991e81fd59bb08477cf709d955c56ec0de79b7a4873f5a42d2bbbfe79818e39fcd5318fa7bf8f6907dbd3a2cd34fc3f37cdd101e48c88fc7759965432fd5d8edf3ffc02dbe9cfb783a7a3b3bdf068c79d6c73c0a9fa8dce74c4be12d417ddb8b6aef67b3f33f74fa3daab9a7f9e3c52551a3d660d6d03d9ccc5479df31772f2e9471ea05fc73182405beb9eefd53187ca2998607d656a896c6d02c9d789d89e53bc01f197bf6cf68b0e5e573f62fb1bd9f5965ddc71dd09a46bbb5be5dd8917f3821e98936df40dd4c7a1976b98d5745b56507f2f1a42c30c16985801acc1ab33c8def1a13c4c73b2f01dc2c7fc1004107c5ed9a601eff113240a53838bd0f5f734748476cb5719e0d4c7afa3e4b7ea5aec6f13c25d42f1c9733b72d4ef9ea3e3302a7078b63c3e2d85985b29e5c1790cb9dd06fa7a6b6adb42438bcfc14a7b72d5e892163ec373ff9725f3be5b45b87bb2deb81a24d54c5a4598185d3a2742bf9cb58a01b778d5f84e54aea1e68238073a661a884bde5de8ace83d1397da692431304b4ba7789243bf5b288b5da40cb02401d8257a22d9afbf0d7e1df72d40fc1a301ffcecef363e65ac1eb694c9512095165a515536d17c29cf9f934ae5b5bd47368f8c15846967822221368eadfdf0071f658de30140d78a7f4ce9c5bb1c0799cb7be62d519219d9db731bfad77b1cd53562f012a6629e4307cdc574a00f999978f2976ccab1a74d20aa19697d31a38ec962d359f0d504201eb8304204fda5360bad8faf29d7b1c29f80d21dd06b9228bc47a5be9329a982d4eee8990f0bfeb45d9a4477ce8cb290f9abde89dfd245851d45a39bfa9f63aa12b0d506b74e4963d2b353cba94c1bcae32d74b326342a5b16fdfef65ca500b44dce302f1f7e0e38c90dd918b4e539bc4fb6710fd61136f63315d8d4a3f0ebd9138e25e8ec844cac26ddc1f432a6815272cb6f86becaad70dbd91a89bb63fafd778136944d7fff1610558e48a4daac28c44e3ed09c3bd0faae43fc8fee502fae1f1539a98197450ea87e2dbe66419bc3296f221a4d85459ff948e051b7bdff1ba3b3fcf4992b381ec7cc215d083170fc9b462fc08f7a042ff7556474766e1d63a90588a28171b3c2265dd0c766c59ca5b78a5006b75f54f6b53ac7d27335ed491ba02d94c80433701a5e83f132461ac7459cebf99e20875d8d049c3369e1b0bce47d36af7ed706b90a9411fab4da732b5ab6958cf0123ab876951196bd72c0573db71d12570a6554cb8fb43a358a2a991077b4f1a92c38eb3ec488458390287d481e77bc8b49e61f884a539c48a38711cdd2e96ba167362a65410297418cec196bcf0597c87e6763fadc91925fb3b24fab1967b8cd54ba663199a06ca68d879565d8e51839c16c0146faeb7521310f8ad7aa73deb531bb46e7cef950981601a94146674f5b49a075bff635d087f623ac3a5a47c545b9c04e791821572f855a409c2e9114754cc23abf836ae8deddf03f84df9435a07278d227b441d1083e501cf1a0500b22bef91f719b6818648c0fc8bc379b0510e5d968d20b702a54d08921940a108c0837ba0050247066e5102fd067fee6b4e02266d01cddee02cfb8fa91e38bf99a8a9648466606443a6e6e355fd710d4ed7de933229c714e4864df0dff88f910c4fca8e09686833c56d13521222826a8568fd0cf04642be54d3bac4d99c2a2d8a0baebcb08deb80cabe35d56cf47df832ccbf3d97e61f8d3ed375f68001edb498737dc8d84740ab15552e04ad64bd7e8bc2a6fb7a0161ece8f650d0b2318fd935f6201dee124a9c32bf619687374b1cd251a08b97b4eda80f03482f39a2d70ee954545d0d1a30761c632dcad1e8edbfe2e4f4646707ebc1258390d8c0f55bd8815cde58121515472a713a301798b13ba9d91675ef36852ec1fd664a8b37bb92c34314803a035f468795bc5cd2468c4caa0060c67b156b499e7d50273d8d5efa0682594e48d2deca554c76c5db11c3392b0fade8cfd812dd8b86f5bb850ff05a49df1b15a4d802062808e7fa6529b73f2afe584056e9a22b6a53881f2059f5ed5262e958ad99875269928aed7a850572ec9b2f5a4419eef4fca1da4b4948764f2da373147a50d1533087862f97877d3ccf2b370c8"}, {0x1010, 0x100, 0x80000000, "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"}, {0xe0, 0x10d, 0x488c, "676ae90e866dc8b07336ef1c41f01411ffc4c5b59ca6c0e62329fab9d60576302d5f36cb3a7dda4ed425e19d7cd944f719a2c6deb1015e48b776fe66fa4fe463a89732711af6615651ae463550ecbcb1e46f4e33f765ace8424fda1aef874892652a1c324eb88dc8f392537693cb9df47d3b3bff5e8029e7e207f1699964b05bf35945816e4dfffc71bbd2c44dc9e6e9f3fdf97428087c359c3feac4969bc53e5fc09716a296ca8e26f92e704c0843be5b5470c454d1c9f92a89e08aa0b2d4e3c345333d4fe52d780190"}, {0xf8, 0x10c, 0x100000001, "4897a0df5449560fac5ce281ef90a48611d9f6bcccceaa2d43fac0f643ece49fe7a2b72f5ea8983a0ddb08254f1be4907e8c93e4b05ace5388746cfc013c42635e338d81688f9de00cc8b636877d0849bad6b23eed52139798289177197893f9bb488f279d83b45ec187a56b23eb0ca0c84cf94b6fbfac36b201438dcac99dfa367d45f7ebb92416b32a5115a6f61dd9a6a422802fc7c079b999d30371ca1602c12ff902c09afac9324f8ae69176455f2053388bbd0058aa026f58669338d0b7fd89f022ad1488c6d429d1c8041e2f95a408a730578f6b0488f5b11e20d63e3fbac2ebe3b2583b"}], 0x2360, 0x4040044}, 0x9}], 0x5, 0xc000) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x200080, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000340)='memory.max\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000005a00)={{{@in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000001580)=0xe8) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000480)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x6d, 0xff02, 0xfa00, {0x0, &(0x7f0000000080), 0x0, 0x0, [0x0, 0x0, 0x20000000]}}, 0x20) 15:32:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0xffffff92, 0x4000000}, {0xffffffc0}}) r1 = gettid() wait4(r1, &(0x7f0000000000), 0x2, &(0x7f0000000140)) 15:32:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:14 executing program 4 (fault-call:10 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) [ 2583.356988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2583.387280] FAULT_INJECTION: forcing a failure. [ 2583.387280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2583.399149] CPU: 0 PID: 2727 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2583.406325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2583.407994] IPVS: ftp: loaded support on port[0] = 21 [ 2583.415667] Call Trace: [ 2583.415679] dump_stack+0xae/0xf0 [ 2583.415686] should_fail+0x144/0x230 [ 2583.415692] __alloc_pages_nodemask+0x128/0x13f0 [ 2583.415698] ? should_fail+0x76/0x230 [ 2583.415704] ? __should_failslab+0x67/0x90 [ 2583.415709] ? radix_tree_node_alloc+0xc5/0x130 [ 2583.415713] ? __should_failslab+0x7e/0x90 [ 2583.415719] ? percpu_counter_add_batch+0x47/0x90 [ 2583.415725] alloc_pages_vma+0x2a1/0x610 [ 2583.415730] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2583.415737] shmem_getpage_gfp+0x118d/0x1370 [ 2583.470363] ? __wake_up+0x11/0x20 [ 2583.473883] ? __wake_up_common_lock+0xaf/0xd0 [ 2583.478446] ? __wake_up+0x11/0x20 [ 2583.481964] ? __d_lookup_done+0xb8/0x150 [ 2583.486087] ? __d_rehash+0x7e/0x100 [ 2583.489782] ? sanity+0x69/0x150 [ 2583.493132] shmem_file_read_iter+0x10e/0x3d0 [ 2583.497608] generic_file_splice_read+0x135/0x1b0 [ 2583.502435] splice_direct_to_actor+0x118/0x350 [ 2583.507087] ? do_splice_direct+0xe0/0xe0 [ 2583.511217] do_splice_direct+0x87/0xe0 [ 2583.515173] do_sendfile+0x424/0x680 [ 2583.518866] __x64_sys_sendfile64+0x59/0xb0 [ 2583.523171] do_syscall_64+0x61/0x90 [ 2583.526866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2583.532038] RIP: 0033:0x457089 [ 2583.535210] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2583.554428] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2583.562134] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2583.569390] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2583.576643] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 15:32:14 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)="97eceb950afd08a83b2d0000000000001257b0916caa2ec24a85a8efeed67ba78f0373b492000000000000009f08396b296ec48f1cfe757467d1ca7c2dcb1f9727f63acc779cb8f41d171c87ff80a85d656a96258cc6c0e5d8644aa8326bb03b294fde9367d956da9714276dca04948ef9ef232cc7b6ac8ae735ff0358d4d4b900f94191ce17288e918469fadd271cf18450ccef030e90de323ff675539b59f7c259a995f14016c449256ceb501cfdf5c5810a512a0d28065de1cf07d80000000000"}, 0xfffffffffffffef6) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x204b, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x81a06) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a") sendfile(r0, r1, &(0x7f0000000200), 0x20000102000007) 15:32:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xffffffffffffff84, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000080)}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x222c00, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) 15:32:14 executing program 7: semop(0x0, &(0x7f0000000080)=[{}, {0x0, 0xffffffff}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)={0xffffffffffffffff}) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0)=""/189, &(0x7f0000000040)=0xbd) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000300)=""/48) 15:32:14 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x7b9, &(0x7f0000000240)) 15:32:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000009000/0x12000)=nil, 0x12000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x14, &(0x7f0000000200), 0x8) close(r2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) close(r1) 15:32:14 executing program 4 (fault-call:10 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000140)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000940)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x3, &(0x7f00000009c0)=""/115, 0x73}, 0x0) sendto(r1, &(0x7f0000000800)="1f0b336c92ec8fdc3d1cf2fc96824c82abbd4c6b9db8c276ec24d04b73e0264bead94b2677305919f20ca47759a3ce8f63a9d835bfc956b603b7bac8515b3f87fcd7d424d24aa28f6b531f41c006e7ef96d185ba8fa9ced503d68ab80a3f93612d4b6e7a7ed43d06ffae5a604ecfd87ace9fe277e38d2092ddb2955061305992a050bc62e729d3871c3f7e76125403a60ff78e36621b4a0b1193244e740055cfbfa15d225d1fab6d82c6a4f096c22444d3b2c38112f788f7c0e14348da4dfe710275eaab49ddc38dfa3e", 0xca, 0x20000000, &(0x7f0000000700)=@can={0x1d, r2}, 0x80) io_setup(0x800000000000001d, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3b0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 15:32:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10000, &(0x7f00000005c0)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) [ 2583.583896] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2583.591148] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000005 [ 2583.599105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2583.619818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2583.638908] FAULT_INJECTION: forcing a failure. [ 2583.638908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2583.650838] CPU: 0 PID: 2780 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2583.658018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2583.667355] Call Trace: [ 2583.669928] dump_stack+0xae/0xf0 [ 2583.673366] should_fail+0x144/0x230 [ 2583.677064] __alloc_pages_nodemask+0x128/0x13f0 [ 2583.681802] ? should_fail+0x76/0x230 [ 2583.685579] ? radix_tree_node_alloc+0xc5/0x130 [ 2583.690229] ? percpu_counter_add_batch+0x47/0x90 [ 2583.695053] alloc_pages_vma+0x2a1/0x610 [ 2583.699095] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2583.704011] shmem_getpage_gfp+0x118d/0x1370 [ 2583.708405] ? __wake_up+0x11/0x20 [ 2583.711933] ? __wake_up_common_lock+0xaf/0xd0 [ 2583.716499] ? __wake_up+0x11/0x20 [ 2583.720023] ? __d_lookup_done+0xb8/0x150 [ 2583.724156] ? __d_rehash+0x7e/0x100 [ 2583.727854] ? sanity+0x69/0x150 [ 2583.731204] shmem_file_read_iter+0x10e/0x3d0 [ 2583.735731] generic_file_splice_read+0x135/0x1b0 [ 2583.740554] splice_direct_to_actor+0x118/0x350 [ 2583.745201] ? do_splice_direct+0xe0/0xe0 [ 2583.749324] do_splice_direct+0x87/0xe0 [ 2583.753276] do_sendfile+0x424/0x680 [ 2583.756972] __x64_sys_sendfile64+0x59/0xb0 [ 2583.761283] do_syscall_64+0x61/0x90 [ 2583.764976] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2583.770141] RIP: 0033:0x457089 15:32:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts={0x16, 0xc, [], [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0xfffffffffffffffe, [0x5, 0x8, 0x198d, 0x789, 0x0]}}, @calipso={0x7, 0x28, {0x7, 0x8, 0x26523bbf, 0x3, [0x3, 0x10000, 0x1ff, 0x401]}}]}, 0x70) 15:32:14 executing program 4 (fault-call:10 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0xfffffffffffffffd}, 0x1c) [ 2583.773305] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2583.792340] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2583.800030] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2583.807287] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2583.814561] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2583.821817] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2583.829072] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000006 [ 2583.864168] FAULT_INJECTION: forcing a failure. [ 2583.864168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2583.875411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2583.876013] CPU: 1 PID: 2811 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2583.882336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2583.889538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2583.889540] Call Trace: [ 2583.889550] dump_stack+0xae/0xf0 [ 2583.889560] should_fail+0x144/0x230 [ 2583.896733] device bridge_slave_0 entered promiscuous mode [ 2583.905212] __alloc_pages_nodemask+0x128/0x13f0 [ 2583.905219] ? should_fail+0x76/0x230 [ 2583.905225] ? __should_failslab+0x67/0x90 [ 2583.905232] ? radix_tree_node_alloc+0xc5/0x130 [ 2583.913622] bridge0: port 2(bridge_slave_1) entered blocking state [ 2583.914936] ? __should_failslab+0x7e/0x90 [ 2583.914945] ? percpu_counter_add_batch+0x47/0x90 [ 2583.920562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2583.925297] alloc_pages_vma+0x2a1/0x610 [ 2583.925303] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2583.925308] shmem_getpage_gfp+0x118d/0x1370 [ 2583.929443] device bridge_slave_1 entered promiscuous mode [ 2583.933307] ? __wake_up+0x11/0x20 [ 2583.933312] ? __wake_up_common_lock+0xaf/0xd0 [ 2583.933317] ? __wake_up+0x11/0x20 [ 2583.942469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2583.944278] ? __d_lookup_done+0xb8/0x150 [ 2583.944284] ? __d_rehash+0x7e/0x100 [ 2583.952726] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2583.953335] ? sanity+0x69/0x150 [ 2583.953344] shmem_file_read_iter+0x10e/0x3d0 [ 2583.971872] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2583.972997] generic_file_splice_read+0x135/0x1b0 [ 2583.973003] splice_direct_to_actor+0x118/0x350 [ 2583.983353] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2583.986746] ? do_splice_direct+0xe0/0xe0 [ 2583.986750] do_splice_direct+0x87/0xe0 [ 2583.986758] do_sendfile+0x424/0x680 [ 2584.055901] __x64_sys_sendfile64+0x59/0xb0 [ 2584.060194] do_syscall_64+0x61/0x90 [ 2584.063881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2584.069038] RIP: 0033:0x457089 [ 2584.072237] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2584.091235] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2584.098932] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2584.106182] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2584.113426] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2584.120666] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2584.127925] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000007 [ 2584.148737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2584.155510] team0: Port device team_slave_0 added [ 2584.163812] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2584.170700] team0: Port device team_slave_1 added [ 2584.179092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2584.189542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2584.196845] device bridge_slave_1 left promiscuous mode [ 2584.202237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.213280] device bridge_slave_0 left promiscuous mode [ 2584.218668] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.232713] team0 (unregistering): Port device team_slave_1 removed [ 2584.239631] team0 (unregistering): Port device team_slave_0 removed [ 2584.246486] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2584.258648] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2584.273924] bond0 (unregistering): Released all slaves [ 2584.285201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2584.295996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2584.343444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2584.349784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2584.356282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2584.362590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2584.482712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2584.498575] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2584.514780] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2584.520902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2584.528830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2584.544172] 8021q: adding VLAN 0 to HW filter on device team0 [ 2584.615723] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2584.626614] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2584.631727] CPU: 0 PID: 2733 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2584.638903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2584.648235] Call Trace: [ 2584.650793] dump_stack+0xae/0xf0 [ 2584.654214] dump_header+0x7b/0x460 [ 2584.657812] ? ___ratelimit+0x139/0x150 [ 2584.661755] oom_kill_process+0xac/0x680 [ 2584.665783] ? out_of_memory+0x44/0x650 [ 2584.669736] out_of_memory+0x4af/0x650 [ 2584.673593] ? _cond_resched+0x17/0x60 [ 2584.677449] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2584.682433] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2584.687591] pagefault_out_of_memory+0x4f/0xa0 [ 2584.692139] mm_fault_error+0xec/0x270 [ 2584.696003] __do_page_fault+0x4ec/0x630 [ 2584.700034] ? __sys_socket+0x9f/0x160 [ 2584.703888] ? page_fault+0x8/0x30 [ 2584.707395] do_page_fault+0x37/0x160 [ 2584.711165] ? page_fault+0x8/0x30 [ 2584.714674] page_fault+0x1e/0x30 [ 2584.718093] RIP: 0033:0x43e461 [ 2584.721250] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2584.740240] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2584.745585] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2584.752823] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2584.760061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2584.767298] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2584.774536] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2584.781879] Task in /syz2 killed as a result of limit of /syz2 [ 2584.787852] memory: usage 1572kB, limit 0kB, failcnt 13312 [ 2584.793463] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2584.800200] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:15 executing program 2: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) fremovexattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='curity.\x00']) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x1, 0x3, 0x914e, r1}) [ 2584.806334] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2584.825957] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2584.834565] [ 2733] 0 2733 17553 8388 118784 0 0 syz-executor2 [ 2584.843398] Memory cgroup out of memory: Kill process 2733 (syz-executor2) score 8417000 or sacrifice child [ 2584.853276] Killed process 2733 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:32:15 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[]]}, 0x120) 15:32:15 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xe2, 0x80000) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xa, 0x2ed3, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000300), &(0x7f0000000340), 0x3}, 0x20) 15:32:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffdb, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x1b0001}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) dup2(r0, r1) 15:32:15 executing program 3: r0 = socket$inet6(0xa, 0x10000000, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x131001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) write$FUSE_LK(r1, &(0x7f0000000180)={0x28, 0x0, 0x4, {{0x7f, 0x5, 0x0, r2}}}, 0x28) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x800, 0x8040) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x1, 0x10001, 0x1, 0x0, 0x0, [{r0, 0x0, 0x20}]}) socket$inet6(0xa, 0x3, 0x9e) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000000c0)=0x6) 15:32:15 executing program 4 (fault-call:10 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:15 executing program 7: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000002a0007031dfffd946fa2830020200a00091200000600004d9b0000000000007e280000001100ffffba16a0aa1c0009b3ebea8653975c0ac47a6268e3406cf055d90f15a3a2674382", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 15:32:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[], []]}, 0x220) 15:32:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socket$inet6(0xa, 0xf, 0x7fff) 15:32:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bd000/0x4000)=nil, 0x4000, 0x0, 0x800000000011, r0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) mmap(&(0x7f00001bd000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) [ 2584.889642] FAULT_INJECTION: forcing a failure. [ 2584.889642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2584.901482] CPU: 0 PID: 3055 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2584.902403] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2584.908656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2584.908657] Call Trace: [ 2584.908668] dump_stack+0xae/0xf0 [ 2584.908677] should_fail+0x144/0x230 [ 2584.908686] __alloc_pages_nodemask+0x128/0x13f0 15:32:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000340)=0x30a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x18000, 0x0) r3 = getpgrp(0x0) mq_notify(r2, &(0x7f0000000300)={0x0, 0x3a, 0x2, @tid=r3}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x5, 0x4, 0x6, 0x1ff, 0x101, 0x1, 0xd93, 0x0}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r4, 0x20, 0x20}, 0xc) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)=r5) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000002c0)={0x9, 0x1c, [0x1, 0x1, 0x1, 0x2, 0x7, 0x401, 0x3]}) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, r8}}, 0x30) 15:32:15 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000040)={0x8001, 0x4, 0x85, {}, 0x6, 0x80}) 15:32:15 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x121042) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0xa, 0x5) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) recvfrom$packet(r2, &(0x7f0000000140)=""/70, 0x46, 0x10000, &(0x7f0000000340)={0x11, 0x3, r3, 0x1, 0x5}, 0x14) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000380)=0x9, 0x4) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x7, 0xfee4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x81, 0x101, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) 15:32:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2584.918731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2584.924255] ? should_fail+0x76/0x230 [ 2584.924261] ? __should_failslab+0x67/0x90 [ 2584.924266] ? radix_tree_node_alloc+0xc5/0x130 [ 2584.924269] ? __should_failslab+0x7e/0x90 [ 2584.924273] ? percpu_counter_add_batch+0x47/0x90 [ 2584.924279] alloc_pages_vma+0x2a1/0x610 [ 2584.924284] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2584.924289] shmem_getpage_gfp+0x118d/0x1370 [ 2584.924294] ? __wake_up+0x11/0x20 [ 2584.924298] ? __wake_up_common_lock+0xaf/0xd0 15:32:15 executing program 3: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='dummy0\x00', 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000140)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 15:32:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) [ 2584.924302] ? __wake_up+0x11/0x20 [ 2584.924306] ? __d_lookup_done+0xb8/0x150 [ 2584.924309] ? __d_rehash+0x7e/0x100 [ 2584.924314] ? sanity+0x69/0x150 [ 2584.924318] shmem_file_read_iter+0x10e/0x3d0 [ 2584.924324] generic_file_splice_read+0x135/0x1b0 [ 2584.924328] splice_direct_to_actor+0x118/0x350 [ 2584.924331] ? do_splice_direct+0xe0/0xe0 [ 2584.924334] do_splice_direct+0x87/0xe0 [ 2584.924339] do_sendfile+0x424/0x680 [ 2584.924343] __x64_sys_sendfile64+0x59/0xb0 [ 2584.924348] do_syscall_64+0x61/0x90 [ 2584.924353] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2584.924358] RIP: 0033:0x457089 [ 2584.959480] IPVS: ftp: loaded support on port[0] = 21 [ 2584.962110] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2585.069368] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2585.077062] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2585.084320] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2585.091562] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2585.098808] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2585.106051] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000008 [ 2585.125751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 2585.135572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2585.151233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 2585.207294] bridge0: port 1(bridge_slave_0) entered blocking state [ 2585.213647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2585.220086] device bridge_slave_0 entered promiscuous mode [ 2585.228647] bridge0: port 2(bridge_slave_1) entered blocking state [ 2585.234984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.241452] device bridge_slave_1 entered promiscuous mode [ 2585.247258] device bridge_slave_1 left promiscuous mode [ 2585.252639] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.263282] device bridge_slave_0 left promiscuous mode [ 2585.268663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2585.280521] team0 (unregistering): Port device team_slave_1 removed [ 2585.287378] team0 (unregistering): Port device team_slave_0 removed [ 2585.294113] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2585.307558] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2585.320772] bond0 (unregistering): Released all slaves [ 2585.332836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2585.342842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2585.358385] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2585.369965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2585.381550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2585.388330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2585.398824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2585.405681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2585.422279] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2585.429093] team0: Port device team_slave_0 added [ 2585.437417] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2585.444169] team0: Port device team_slave_1 added [ 2585.452033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2585.462139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2585.471971] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2585.478935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2585.486515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2585.494340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2585.501250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2585.508646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2585.543089] bridge0: port 2(bridge_slave_1) entered blocking state [ 2585.549434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2585.555922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2585.562235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2585.568909] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2585.682032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2585.697808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2585.713515] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2585.719598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2585.726170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2585.740746] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2585.746800] 8021q: adding VLAN 0 to HW filter on device team0 [ 2585.814687] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2585.825600] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2585.830704] CPU: 1 PID: 3072 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2585.837869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2585.847196] Call Trace: [ 2585.849762] dump_stack+0xae/0xf0 [ 2585.853187] dump_header+0x7b/0x460 [ 2585.856785] ? ___ratelimit+0x139/0x150 [ 2585.860729] oom_kill_process+0xac/0x680 [ 2585.864757] ? out_of_memory+0x44/0x650 [ 2585.868697] out_of_memory+0x4af/0x650 [ 2585.872567] ? _cond_resched+0x17/0x60 [ 2585.876422] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2585.881406] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2585.886581] pagefault_out_of_memory+0x4f/0xa0 [ 2585.891149] mm_fault_error+0xec/0x270 [ 2585.895012] __do_page_fault+0x4ec/0x630 [ 2585.899060] ? __sys_socket+0x9f/0x160 [ 2585.902920] ? page_fault+0x8/0x30 [ 2585.906426] do_page_fault+0x37/0x160 [ 2585.910197] ? page_fault+0x8/0x30 [ 2585.913706] page_fault+0x1e/0x30 [ 2585.917128] RIP: 0033:0x43e461 [ 2585.920288] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2585.939276] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2585.944626] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2585.951864] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2585.959101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2585.966345] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2585.973584] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2585.980843] Task in /syz2 killed as a result of limit of /syz2 [ 2585.986807] memory: usage 1572kB, limit 0kB, failcnt 13320 [ 2585.992409] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2585.999161] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:17 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, 0x0) 15:32:17 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) 15:32:17 executing program 2: socket$inet6(0xa, 0x80000, 0x400) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) fchownat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r2 = getpgrp(0x0) syz_open_procfs(r2, &(0x7f0000000000)='pagemap\x00') 15:32:17 executing program 4 (fault-call:10 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:17 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0xff, {{0x2, 0x4e21}}}, 0x88) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x600000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x90, 0x2, 0x8}}, 0x14) 15:32:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0x2c) r1 = dup(r0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x28, &(0x7f0000000180)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000001000000000000007b1a00ff0000000000000000000000009500000000000000"], &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xffe3, &(0x7f00001a7f05)=""/251}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80000) ioctl$fiemap(r3, 0xc020660b, &(0x7f0000000240)={0x8001, 0xdc, 0x1, 0x0, 0x2, [{0x1, 0x9e, 0x8059, 0x0, 0x0, 0x1000}, {0x3d3, 0x2, 0x51, 0x0, 0x0, 0x808}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r2, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x6, 0x1, 0x8, &(0x7f0000000100)=[0x0], 0x1}, 0x20) 15:32:17 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[]]}, 0x120) 15:32:17 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[]]}, 0x120) [ 2586.005290] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2586.024905] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2586.033508] [ 3072] 0 3072 17553 8388 114688 0 0 syz-executor2 [ 2586.042332] Memory cgroup out of memory: Kill process 3072 (syz-executor2) score 8416000 or sacrifice child [ 2586.052208] Killed process 3072 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB 15:32:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x30eb) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="747275737465642e5e766dfcff743147504c7d2e736563757269747900"]) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xd3f) 15:32:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'erspan0\x00', 0x8}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:32:17 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x200000) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xd23) r1 = socket$inet6(0xa, 0x80005, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/51) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x3, @ipv4={[], [], @local}, 0x6}}, [0x1, 0x6, 0x6, 0x30000, 0x80000001, 0x9, 0x100000000, 0x3, 0x3, 0x6, 0x1ff, 0x7ff, 0x45, 0x400, 0xca6]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r4, 0x100, 0x30}, &(0x7f00000002c0)=0xc) socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f0000000300)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="bab573d001fa0667d8", 0x9}, {&(0x7f0000001380)="f7b7d2e9412f78a25c9a842eff1fd14f380c4dd3d7d4c4b35d668d8fb6ec025aa3e482e08b81b6330fbc4063b5dc2aa3fbd3bab8d54304d0643aa14f4095dfdcb37d19acaaa9a9d38ead4136ac4b7557fb9d72bacc48f459977bf2e50fc1dc9eaf8f88cfac6ce0c14bd3beae5603979ca9594b98492147eb8ee8e2c8e440a018c6ed35945c8018c6868e49b9ba05f8efbd25b0e08604d3a7fc507f88a646215c239f7e8003264be04c246ebb507f367ae93f8f64867ff58ff479b7ab8984c852040943183989625c364d0f9226b43e7dd465c11359b96260b41fa19114fd91afbb", 0xe1}, {&(0x7f0000001480)="ce23b7d12483538a5dbe2a547e71c504313560425a11c63f9994476e7fa3dc01ba3c383c90b44156ac143ab3e56a32de583613721b20abd8bfb006634918877101a22dc4a9833036044fb4387f509729459bf1b3d8c73981731a9e63fd4550ed533132344d6b712165d81acb3e3a0ef14fb0f180708a2bb89c80d950391d50282d09d6e5b1aa043877307112fb2c7a22f5664f1b7dfd01e9d990af60cd12cb196e7506a4e02a4d743bfdfde34ccddbfaee955cbff87b0d931fa55b248196f3f1cc801aa1a5ea4bdd4b87fe29f84657062f", 0xd1}, {&(0x7f0000001580)="97cf5d47d9a5b4b871eee5907898549d56280f2588bd98328c93943457ef78051ba87c23f769863306219138440a8b1ddd86da43573b5b608a575b62ea4eeabf6bc94fe0a47aa153edfa04cec143ea59e0745c5d8b82069c6a6cd8ee849293f60b144ab7b9f6dae6082016c1c2e1dd93354983563ae76c6778fee41b", 0x7c}], 0x5, &(0x7f0000001680)=[@sndinfo={0x20, 0x84, 0x2, {0x2db4, 0x1, 0x6, 0x9, r5}}], 0x20, 0x4000}, 0x80) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001700)=""/4096) bind$vsock_dgram(r0, &(0x7f0000002700), 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002740)={r5, 0x80}, 0x8) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000002780)={0x6e, 0x7ff, 0x5fde, 0x0, 0x9, 0x8, 0x401, 0x4f2dd038, 0xe3, 0x7ff}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000027c0)={{0x2, 0x4e22, @broadcast}, {0x1, @dev={[], 0xc}}, 0x30, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 'eql\x00'}) fstatfs(r2, &(0x7f0000002840)=""/214) write$P9_RSETATTR(r0, &(0x7f0000002940)={0x7, 0x1b, 0x1}, 0x7) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000002980)="dfe9d5ee13081507ceee6f761c07bd1bf65242615949dfab1863dd86d8d51b9b40f3e96824e74fe4fd173326b5e9502417c94f3ce0f4f31f3ebdebeea5e799419cb617b230643d3697ed31383b39db2f4b775a46a5118cc3f19366f5d4652e46f144b488e3ce0abe209b4010b76cc62dc6770d734f3be4a39cb21c4d09f5f69e29f54a63bbb17f3d19b899ac8e20b521e6c8427b3c3175cf9c1b15a5bb36389718afba795e58c418bb55cf704736b794fa261e3e5954625d1f5fc953a9c48d02b75f3b", 0xc3}], 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002ac0)=0x20, 0x4) iopl(0x8) getresgid(&(0x7f0000002b00), &(0x7f0000002b40), &(0x7f0000002b80)) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) fstatfs(r0, &(0x7f0000002bc0)=""/186) write$P9_RSTATFS(r0, &(0x7f0000002c80)={0x43, 0x9, 0x2, {0xd4, 0x7fff, 0x2, 0xcd, 0x92, 0x1, 0x75b5, 0x4, 0x7}}, 0x43) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002d40)={0x1, &(0x7f0000002d00)=[{0x3, 0x43af, 0x6, 0x7}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000002d80)='IPVS\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002dc0)=[@in6={0xa, 0x4e24, 0xcba2, @mcast2, 0x2}], 0x1c) getsockname$netlink(r0, &(0x7f0000002e00), &(0x7f0000002e40)=0xc) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000002e80)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000003000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002fc0), 0x0, 0xa}}, 0x20) 15:32:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x7, @remote, 0x1}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000240)={r1, 0x1}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000)="b61c86a5086179db7f04cb235aa0ee770f1f3f8f86433334862550f42144e292c8296b5eba1d925a99a691892f0300000000000000750bcc4e7b41db836daa53f3fb7c12e7a873fac2c6711f4ed315422a7bd6db5110f92bdb01d8efe70e85364aea889cf0ab08eb8b10c6de62c907fc5b94df2aea7b1d0bd1b23e4477ee21654f4279ed2f48a70501954343f23a1e478f697da944bb8657d96b30f7579d888b5d55ad8395e8b76c23fa1850b29baab9dc34ce74b3e61fd9189512f3c2d56af0ac06b4e9c5bc4ee04d27c6472f97c531b9d0856b800894bda46455e2", 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0xfffffffffffffd7d) 15:32:17 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) sendto$inet(r0, &(0x7f000029b000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10) recvmsg(r0, &(0x7f0000002140)={&(0x7f0000000740)=@hci, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/150, 0x96}, {&(0x7f0000000a40)}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000002100)=""/28, 0x1c}, 0x0) 15:32:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socketpair(0x9, 0x80807, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0x2, 0x99, &(0x7f0000000040)=""/153}, {0x1f002, 0xa2, &(0x7f0000000100)=""/162}, {0x7000, 0x1c, &(0x7f00000001c0)=""/28}]}) [ 2586.089891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2586.107299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2586.126473] FAULT_INJECTION: forcing a failure. [ 2586.126473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2586.127158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2586.138312] CPU: 1 PID: 3370 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2586.138315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2586.138316] Call Trace: [ 2586.138326] dump_stack+0xae/0xf0 [ 2586.138334] should_fail+0x144/0x230 [ 2586.138341] __alloc_pages_nodemask+0x128/0x13f0 [ 2586.138346] ? should_fail+0x76/0x230 [ 2586.138352] ? __should_failslab+0x67/0x90 [ 2586.138356] ? radix_tree_node_alloc+0xc5/0x130 [ 2586.138360] ? __should_failslab+0x7e/0x90 [ 2586.138364] ? percpu_counter_add_batch+0x47/0x90 [ 2586.138371] alloc_pages_vma+0x2a1/0x610 [ 2586.138376] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2586.138382] shmem_getpage_gfp+0x118d/0x1370 [ 2586.138386] ? __wake_up+0x11/0x20 [ 2586.138391] ? __wake_up_common_lock+0xaf/0xd0 [ 2586.138395] ? __wake_up+0x11/0x20 [ 2586.138398] ? __d_lookup_done+0xb8/0x150 [ 2586.138401] ? __d_rehash+0x7e/0x100 [ 2586.138405] ? sanity+0x69/0x150 [ 2586.138410] shmem_file_read_iter+0x10e/0x3d0 [ 2586.138414] generic_file_splice_read+0x135/0x1b0 [ 2586.138422] splice_direct_to_actor+0x118/0x350 [ 2586.171166] FAULT_INJECTION: forcing a failure. [ 2586.171166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2586.175847] ? do_splice_direct+0xe0/0xe0 [ 2586.175851] do_splice_direct+0x87/0xe0 [ 2586.175857] do_sendfile+0x424/0x680 [ 2586.175861] __x64_sys_sendfile64+0x59/0xb0 [ 2586.175865] do_syscall_64+0x61/0x90 [ 2586.175872] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2586.284182] RIP: 0033:0x457089 [ 2586.287344] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2586.306455] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2586.314145] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2586.321397] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2586.328650] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 15:32:17 executing program 1: r0 = epoll_create1(0x0) close(0xffffffffffffffff) fchdir(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000fffd}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) epoll_wait(r0, &(0x7f0000001a40)=[{}], 0x1, 0x0) 15:32:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1420}) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) socket$inet6_dccp(0xa, 0x6, 0x0) 15:32:17 executing program 4 (fault-call:10 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:17 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x20, 0x800) renameat(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000100)=""/30) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000140)=""/166, &(0x7f0000000240)=0xa6) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x3, 0x28040) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 2586.335898] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2586.343151] R13: 00000000004d3840 R14: 00000000004c85ae R15: 0000000000000009 [ 2586.350407] CPU: 0 PID: 3379 Comm: syz-executor0 Not tainted 4.18.0-rc8+ #32 [ 2586.357583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2586.357819] IPVS: ftp: loaded support on port[0] = 21 [ 2586.366920] Call Trace: [ 2586.366930] dump_stack+0xae/0xf0 [ 2586.366937] should_fail+0x144/0x230 [ 2586.366945] __alloc_pages_nodemask+0x128/0x13f0 [ 2586.386559] ? __wake_up+0x11/0x20 [ 2586.390093] ? __d_lookup_done+0xb8/0x150 [ 2586.394232] ? __d_rehash+0x7e/0x100 [ 2586.397930] ? __d_add+0x1f4/0x290 [ 2586.401460] ? fsnotify+0x1be/0x620 [ 2586.405065] ? mntput_no_expire+0x30/0x3d0 [ 2586.409290] ? security_file_open+0xc0/0xd0 [ 2586.413582] ? lockref_put_or_lock+0x77/0xc0 [ 2586.417958] ? iov_iter_advance+0x8b/0x480 [ 2586.422170] alloc_pages_current+0x1b7/0x270 [ 2586.426581] ? skb_page_frag_refill+0x41/0x110 [ 2586.431158] skb_page_frag_refill+0xa7/0x110 [ 2586.435547] tun_get_user+0x375/0x1960 [ 2586.439420] ? kstrtoull+0x1a5/0x1c0 [ 2586.443109] tun_chr_write_iter+0x61/0x90 [ 2586.447237] __vfs_write+0x195/0x1e0 [ 2586.450924] vfs_write+0xf1/0x1d0 [ 2586.454352] __x64_sys_write+0x4a/0xc0 [ 2586.458695] do_syscall_64+0x61/0x90 [ 2586.462385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2586.467553] RIP: 0033:0x457089 [ 2586.470717] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2586.489740] RSP: 002b:00007f54a05cac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2586.497427] RAX: ffffffffffffffda RBX: 00007f54a05cb6d4 RCX: 0000000000457089 [ 2586.504674] RDX: 0000000000000120 RSI: 00000000200003c0 RDI: 0000000000000003 [ 2586.511922] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2586.519172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 2586.526420] R13: 00000000004d70c8 R14: 00000000004ca44e R15: 0000000000000000 [ 2586.537507] FAULT_INJECTION: forcing a failure. [ 2586.537507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2586.549413] CPU: 0 PID: 3421 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2586.556584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2586.565907] Call Trace: [ 2586.568467] dump_stack+0xae/0xf0 [ 2586.571894] should_fail+0x144/0x230 [ 2586.575582] __alloc_pages_nodemask+0x128/0x13f0 [ 2586.580309] ? should_fail+0x76/0x230 [ 2586.584081] ? __should_failslab+0x67/0x90 [ 2586.588507] ? radix_tree_node_alloc+0xc5/0x130 [ 2586.593149] ? __should_failslab+0x7e/0x90 [ 2586.597362] ? percpu_counter_add_batch+0x47/0x90 [ 2586.602177] alloc_pages_vma+0x2a1/0x610 [ 2586.606265] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2586.611168] shmem_getpage_gfp+0x118d/0x1370 [ 2586.615551] ? __wake_up+0x11/0x20 [ 2586.619061] ? __wake_up_common_lock+0xaf/0xd0 [ 2586.623626] ? __wake_up+0x11/0x20 [ 2586.627138] ? __d_lookup_done+0xb8/0x150 [ 2586.631263] ? __d_rehash+0x7e/0x100 [ 2586.634947] ? sanity+0x69/0x150 [ 2586.638291] shmem_file_read_iter+0x10e/0x3d0 [ 2586.642757] generic_file_splice_read+0x135/0x1b0 [ 2586.647588] splice_direct_to_actor+0x118/0x350 [ 2586.652229] ? do_splice_direct+0xe0/0xe0 [ 2586.656352] do_splice_direct+0x87/0xe0 [ 2586.660297] do_sendfile+0x424/0x680 [ 2586.663981] __x64_sys_sendfile64+0x59/0xb0 [ 2586.668285] do_syscall_64+0x61/0x90 [ 2586.671978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2586.677136] RIP: 0033:0x457089 [ 2586.680303] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2586.699310] RSP: 002b:00007f81bc54bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2586.707009] RAX: ffffffffffffffda RBX: 00007f81bc54c6d4 RCX: 0000000000457089 [ 2586.714250] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2586.721488] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 2586.728767] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2586.736008] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000a [ 2586.760045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2586.769085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2586.775902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2586.797306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2586.841197] device bridge_slave_1 left promiscuous mode [ 2586.846620] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.857268] device bridge_slave_0 left promiscuous mode [ 2586.862649] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.874462] team0 (unregistering): Port device team_slave_1 removed [ 2586.881231] team0 (unregistering): Port device team_slave_0 removed [ 2586.887949] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2586.903598] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2586.916805] bond0 (unregistering): Released all slaves [ 2586.935283] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.941639] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.948081] device bridge_slave_0 entered promiscuous mode [ 2586.956967] bridge0: port 2(bridge_slave_1) entered blocking state [ 2586.963299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.969801] device bridge_slave_1 entered promiscuous mode [ 2586.979509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2586.989678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2587.006134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2587.016822] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2587.038849] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2587.045696] team0: Port device team_slave_0 added [ 2587.053606] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2587.060433] team0: Port device team_slave_1 added [ 2587.067978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2587.077647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2587.087489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2587.097576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2587.134789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2587.141155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2587.147644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2587.153946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2587.268095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2587.283844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2587.300248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2587.316533] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2587.322589] 8021q: adding VLAN 0 to HW filter on device team0 [ 2587.391728] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2587.402595] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2587.407697] CPU: 0 PID: 3403 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2587.414858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2587.424186] Call Trace: [ 2587.426745] dump_stack+0xae/0xf0 [ 2587.430173] dump_header+0x7b/0x460 [ 2587.433769] ? ___ratelimit+0x139/0x150 [ 2587.437713] oom_kill_process+0xac/0x680 [ 2587.441782] ? out_of_memory+0x44/0x650 [ 2587.445744] out_of_memory+0x4af/0x650 [ 2587.449603] ? _cond_resched+0x17/0x60 [ 2587.453463] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2587.458448] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2587.463607] pagefault_out_of_memory+0x4f/0xa0 [ 2587.468164] mm_fault_error+0xec/0x270 [ 2587.472025] __do_page_fault+0x4ec/0x630 [ 2587.476061] ? __sys_socket+0x9f/0x160 [ 2587.479919] ? page_fault+0x8/0x30 [ 2587.483427] do_page_fault+0x37/0x160 [ 2587.487204] ? page_fault+0x8/0x30 [ 2587.490722] page_fault+0x1e/0x30 [ 2587.494143] RIP: 0033:0x43e461 [ 2587.497307] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2587.516297] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2587.521632] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2587.528873] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2587.536123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2587.543365] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2587.550638] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2587.557981] Task in /syz2 killed as a result of limit of /syz2 [ 2587.563963] memory: usage 1572kB, limit 0kB, failcnt 13328 [ 2587.569570] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2587.576302] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:18 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0xff, {{0x2, 0x4e21}}}, 0x88) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x600000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x90, 0x2, 0x8}}, 0x14) 15:32:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, &(0x7f0000000000)="26426fad9071f208b26b578132488542feac0f5d1e3ea490d20f8184fba0b55c441a58960d07324530b42e8403f7343d6e06a8a7168f5b491a1e046026b69f88916032db1fa766dd274c8386c5ac1b3b8faba266893fae3ee66c09fc5ce9a4920c09baebd3397c2760c5b033ea1dcbfd456ebcba82bcae504aba2872699b7f84ef5093ea2e2ba2eb3dcdd06865c05cad3d47ccfa636d31b7d0e7b1b188ac9f9345ce95551ecd4e0b4c141608a93b410697dd9f7fcc786394bd83b7bbbf1d073b62a05a97145956eee039062875b0602f99b611e94c2baeb3865638d5137e8632792f57a59f1e000000000000000000000000000000", &(0x7f0000001ffc), &(0x7f0000000100), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) 15:32:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x80, {{0xa, 0x4e20, 0x3f, @mcast2, 0x3}}}, 0x88) 15:32:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x20, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=['/dev/snd/controlC#\x00'], 0x13, [], [0x5, 0x1]}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x5, 0x400) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000001c0)) 15:32:18 executing program 4 (fault-call:10 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@mcast2, @mcast2, @mcast1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40200}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0x47c, 0x4) kcmp(r1, r2, 0x3, r0, r0) r3 = syz_open_procfs(r1, &(0x7f0000000140)='fd/4\x00') r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x0, 0x800, 0x6, 0x2, 0x0, 0xfffffffffffffff7, 0x275, 0x38, 0x2b1, 0x76, 0x4, 0x20, 0x2, 0x0, 0x4619, 0x1}, [{0x6, 0x3, 0x1, 0x1, 0xf65, 0x7, 0x0, 0xfff}, {0x1, 0xffff, 0x0, 0x8000, 0x3f, 0x0, 0x8, 0x1}], "c8d7f02ca8ea2a098c5437ff579ab02fa47bc64e5558d88e278640129aa2aa7e4935dd3c389a"}, 0x9e) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_to_bridge\x00', 0x5}) 15:32:18 executing program 0 (fault-call:5 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[]]}, 0x120) 15:32:18 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0xffc1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa8100000086dd608ed9c100440000ff020000000000000000000000000001fe8000000000000000000000e7ffffba0420880b0000000000000800000086dd080088be0000000010000000010000009d1508608e225200000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) [ 2587.582427] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2587.602061] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2587.610682] [ 3403] 0 3403 17553 8388 118784 0 0 syz-executor2 [ 2587.619509] Memory cgroup out of memory: Kill process 3403 (syz-executor2) score 8417000 or sacrifice child [ 2587.629399] Killed process 3403 (syz-executor2) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB [ 2587.665352] FAULT_INJECTION: forcing a failure. [ 2587.665352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2587.670021] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2587.677225] CPU: 0 PID: 3688 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2587.677229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2587.677230] Call Trace: [ 2587.677241] dump_stack+0xae/0xf0 [ 2587.677249] should_fail+0x144/0x230 [ 2587.677255] __alloc_pages_nodemask+0x128/0x13f0 [ 2587.677261] ? should_fail+0x76/0x230 [ 2587.677268] ? __should_failslab+0x67/0x90 [ 2587.677274] ? radix_tree_node_alloc+0xc5/0x130 [ 2587.677279] ? __should_failslab+0x7e/0x90 [ 2587.677284] ? percpu_counter_add_batch+0x47/0x90 [ 2587.677290] alloc_pages_vma+0x2a1/0x610 [ 2587.677294] shmem_alloc_and_acct_page+0x1ac/0x3e0 [ 2587.677298] shmem_getpage_gfp+0x118d/0x1370 [ 2587.677303] ? __wake_up+0x11/0x20 [ 2587.677308] ? __wake_up_common_lock+0xaf/0xd0 [ 2587.677311] ? __wake_up+0x11/0x20 [ 2587.677315] ? __d_lookup_done+0xb8/0x150 [ 2587.677318] ? __d_rehash+0x7e/0x100 [ 2587.677323] ? sanity+0x69/0x150 [ 2587.677327] shmem_file_read_iter+0x10e/0x3d0 [ 2587.677334] generic_file_splice_read+0x135/0x1b0 [ 2587.781719] splice_direct_to_actor+0x118/0x350 [ 2587.786387] ? do_splice_direct+0xe0/0xe0 [ 2587.790513] do_splice_direct+0x87/0xe0 [ 2587.794463] do_sendfile+0x424/0x680 [ 2587.798158] __x64_sys_sendfile64+0x59/0xb0 [ 2587.802567] do_syscall_64+0x61/0x90 [ 2587.806258] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2587.811427] RIP: 0033:0x457089 [ 2587.814591] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2587.833640] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2587.841331] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2587.848584] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2587.855832] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 15:32:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000000)="a9c89c726104223f8d272ce6acd4343209d21aacb5469124ec3ed9ff16baa4b9cd", 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local, 0x1}, 0xfffffffffffffde5) socket$unix(0x1, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x111000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) 15:32:18 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r1) bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)) faccessat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1400) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="447200e009b3f90008bbc8e071dafdad2e3f00b47b14223161b73155e688cc34a6a5df7d9e97ddd535b1825552a65a74fefe2cb18e90b7ea56484524486da6f565a0d046542ac969c4f9cc05cc93ac9ad41149551f7236e1e1e3d2b0440b9be45a1c694efaf78d5bb8210af28f2366fa1d8a1d34"]}) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000240)=""/254, &(0x7f0000000340)=0xfe) r3 = dup(r2) getsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) 15:32:18 executing program 3: socketpair(0x8, 0x1, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xffffffffffffff98, 0x800d, 0x1ff, 0x2, r1}, &(0x7f00000001c0)=0x10) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101100, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) 15:32:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x7530}, 0x10) [ 2587.863085] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2587.870338] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000b 15:32:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x1a}, 0x81}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 15:32:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x10001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0xfff, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 15:32:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000540)="ccd05ad2b5da081b9c1cd532bcf8997b86e652fe04b63539ece45cce85bc3a21f98ad6982068d6fbf67cbaf9ec4ee35f08c4c9a470ce624f8ecab6ae32a4a95b73cdfbc4994f28a855db87fed264393fbe5c1d60b9bc0b7b709ed8c1d24addac359effda169d9328afaacb80566bd32ac9d77ca770b493b068d7d68ce538d2f27f04541234414ff8fa241074b6c83d8f48b8834843abdd9c699749c5d2bfda59c6f62e367f9921cb6ab7", 0xaa) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000200)=""/239, 0xef, 0x20, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendto$inet(r0, &(0x7f0000000180)='\x00', 0xffffffffffffffba, 0x4004, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x1f6) getpeername$inet(r1, &(0x7f0000000440)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r3, 0xfffffec4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000380)=0x8000, 0x8) 15:32:18 executing program 7: unshare(0x8000000) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00461a4b1553988affdb0b9deb34e65cc3643dae005addad46fd5e0024441362c28f293ca0837757aa720ee3e03880913145f487c1261f04d9fecc02a8e94e77b29e8c8fca3de78ce9bfd227485d33709fc49bddddca8d8ac9bf89ebee593e7681afda2516c9c3cfef4e5abb1dac782a6ed38c7f0c102e564afcadd73f46cd09c94d4ca534115a754c1111f3947bddb1eb736bafc6181eea9a66"], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x4084) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x25) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) getpeername$netlink(r1, &(0x7f0000000280), &(0x7f0000000380)=0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00'}, 0x18) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000400)={@empty, @local}, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000440)={0x1, 'l\x00'}, 0x18) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2}, &(0x7f0000000180)=0x14) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) [ 2587.910597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2587.931733] IPVS: ftp: loaded support on port[0] = 21 [ 2587.951411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2587.962790] IPVS: Error joining to the multicast group [ 2587.970438] IPVS: Unknown mcast interface: l [ 2587.980697] IPVS: Error joining to the multicast group [ 2587.985999] IPVS: Unknown mcast interface: l [ 2588.014264] device bridge_slave_1 left promiscuous mode [ 2588.019692] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.030300] device bridge_slave_0 left promiscuous mode [ 2588.035712] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.048579] team0 (unregistering): Port device team_slave_1 removed [ 2588.055472] team0 (unregistering): Port device team_slave_0 removed [ 2588.062274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2588.072574] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2588.093813] bond0 (unregistering): Released all slaves [ 2588.124028] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.130401] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.136938] device bridge_slave_0 entered promiscuous mode [ 2588.146132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.152465] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.158918] device bridge_slave_1 entered promiscuous mode [ 2588.167562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2588.177676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2588.193156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2588.203485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2588.224396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2588.231136] team0: Port device team_slave_0 added [ 2588.238856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2588.245607] team0: Port device team_slave_1 added [ 2588.253460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2588.263357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2588.273319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2588.281333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2588.318066] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.324409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2588.330897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.337217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2588.452051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2588.468240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2588.484629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2588.502816] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2588.508888] 8021q: adding VLAN 0 to HW filter on device team0 [ 2588.579746] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2588.590617] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2588.595725] CPU: 0 PID: 3724 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #32 [ 2588.603093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2588.612446] Call Trace: [ 2588.615007] dump_stack+0xae/0xf0 [ 2588.618429] dump_header+0x7b/0x460 [ 2588.622027] ? ___ratelimit+0x139/0x150 [ 2588.625975] oom_kill_process+0xac/0x680 [ 2588.630009] ? out_of_memory+0x44/0x650 [ 2588.633951] out_of_memory+0x4af/0x650 [ 2588.637817] ? _cond_resched+0x17/0x60 [ 2588.641673] mem_cgroup_oom_synchronize+0x37a/0x440 [ 2588.646660] ? mem_cgroup_oom_synchronize+0x440/0x440 [ 2588.651834] pagefault_out_of_memory+0x4f/0xa0 [ 2588.656386] mm_fault_error+0xec/0x270 [ 2588.660257] __do_page_fault+0x4ec/0x630 [ 2588.664289] ? __sys_socket+0x9f/0x160 [ 2588.668144] ? page_fault+0x8/0x30 [ 2588.671659] do_page_fault+0x37/0x160 [ 2588.675426] ? page_fault+0x8/0x30 [ 2588.678934] page_fault+0x1e/0x30 [ 2588.682370] RIP: 0033:0x43e461 [ 2588.685701] Code: 8d 15 23 0b 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 2588.704694] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 2588.710028] RAX: 00000000007040c8 RBX: 0000000000704140 RCX: 0000000000000066 [ 2588.717269] RDX: 0000000000000007 RSI: 00000000004c903e RDI: 00000000007040c8 [ 2588.724526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 2588.731768] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007040c8 [ 2588.739009] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 2588.746338] Task in /syz2 killed as a result of limit of /syz2 [ 2588.752312] memory: usage 1572kB, limit 0kB, failcnt 13336 [ 2588.757930] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2588.764695] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 15:32:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={@mcast2, @local, @mcast2, 0x8, 0x5, 0x6, 0x400, 0x100, 0x1, r1}) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000ac0), &(0x7f0000000c00)=0x4) 15:32:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000100), 0x12f, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0xb8}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffff53, 0x40002) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x1}, 0x8) 15:32:19 executing program 6: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x3b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000d43000)) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7b8}, &(0x7f0000000140)=0x8) migrate_pages(r0, 0x9, &(0x7f0000000180)=0xfffffffffffffebb, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="06000000cd26c0a0e9ded36060856539810258a99e56c20c25a0e49b26bb18847a1f12457adab5d4a5bd8a7e166cc71dd94f501d366cad8fcf34c2fb8489d4ac09467fe1550a16394e042c931a95b8cffbfb158999b038258445d02ddd83de4e7cd7454cf2a42be71613a2b1407f40b701913091ffc184c7092ff56e79ec7d8599be319f6a588cd89ead56fe31d50167eae1d7988def8992f5c61e8d8877d8c49836128aa35f6ed20101000051ea65ce2a31c38b5171d572eda51eecf223711bab9b78efec4b014a2a626ee3fd4a23b70c8e11911d75aedb18ff09edfa5c"], &(0x7f00000001c0)=0xe) 15:32:19 executing program 3: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000023c0)=[{}, {0xa, 0x4}, {0x6, 0x5}, {0x2}], 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/19, 0x13}], 0x1, &(0x7f0000000100)=""/77, 0x4d, 0xd8}, 0x7}], 0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) prctl$void(0x1f) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000002400)={0x2, 'veth0\x00'}, 0x18) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000100)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x199}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000002c0)={0x2, 0x10001, 0xfffffffffffffbff, 'queue1\x00', 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) close(r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xc, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$P9_RLOPEN(r3, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0x0, 0x2, 0x3}, 0x1}}, 0x18) 15:32:19 executing program 4 (fault-call:10 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) 15:32:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x2485, 0x100}) setsockopt$inet6_tcp_int(r0, 0x6, 0x8000000000000002, &(0x7f0000000140)=0x100, 0x1f7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x40000000) fcntl$setstatus(r2, 0x4, 0x2000) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x40e) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x11, 0x24, 0x10, 0x5, 0xa, 0x0, 0x6, 0xe1}) ioctl(r3, 0x100008912, &(0x7f0000000180)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 15:32:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000140)=0x24) write$binfmt_aout(r0, &(0x7f00000003c0)={{0x1cc, 0x0, 0x0, 0xa1d0020}, "", [[]]}, 0x120) 15:32:19 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000000c0)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, "000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00"}]}, 0x466) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000840)="a3", 0x1}], 0x1, 0x0) [ 2588.770848] Memory cgroup stats for /syz2: cache:84KB rss:20KB rss_huge:0KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2588.790484] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 2588.799138] [ 3724] 0 3724 17553 8389 118784 0 0 syz-executor2 [ 2588.807987] Memory cgroup out of memory: Kill process 3724 (syz-executor2) score 8418000 or sacrifice child [ 2588.817860] Killed process 3724 (syz-executor2) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB 15:32:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5435, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x2}) 15:32:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4080, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x80000001, {{0x2, 0x4e24, @broadcast}}}, 0x88) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xa, 0x3, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) [ 2588.859955] FAULT_INJECTION: forcing a failure. [ 2588.859955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2588.871837] CPU: 1 PID: 4025 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2588.879017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2588.882274] IPVS: ftp: loaded support on port[0] = 21 [ 2588.888365] Call Trace: [ 2588.888376] dump_stack+0xae/0xf0 [ 2588.888383] should_fail+0x144/0x230 [ 2588.888391] __alloc_pages_nodemask+0x128/0x13f0 15:32:19 executing program 6: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x4010, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0025f89ac5ee88f72598aafc", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000004c0)=0xe8) setresuid(r2, r3, r4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x84) 15:32:19 executing program 6: inotify_init() socket$inet6_sctp(0xa, 0x5, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x10002, 0x0) timerfd_create(0x7, 0x80800) socketpair$inet(0x2, 0x6, 0xf64f, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x6000) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x2, 0x442c02) r2 = dup3(r1, r0, 0x80004) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7070000010001004870000000000100000000000000c4864d83b27a8e000095dfa0a00634134e9a2d5388dc430850b2338bf9ea597f4c55211a7c17877d17edd5a5246b3c21af6caf38782ed804ae0064237d104b3a27c28f551ffe0f93bd8b92ed4980e0e4aba9211bebbd76fc0a4bcd0171c67550560b71eb5c66d140df5b908df26051f52051ff0b734ac997588518214ef6c483221d4095d0b340edd20c004e5f71d01023acfa7da33a4dee8beb346c9c460cf924c98757759e9b7e7e5a699e897697bb6308673bfdd5389e"], &(0x7f0000000540)='syzkaller\x00'}, 0x48) 15:32:19 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x40) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x0) socketpair(0x1, 0x5, 0xfffffffffffffff9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r1, &(0x7f0000000040), 0x8) r2 = fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) setpgid(r2, r3) 15:32:19 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x7, 0x3, 0x9, 0x1f, '\x00', 0x3}) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x0, @empty, 0x8}}}, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, &(0x7f0000000180)) [ 2588.905956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2588.907999] ? shmem_alloc_and_acct_page+0x396/0x3e0 [ 2588.908008] ? __radix_tree_insert+0xe5/0x150 [ 2588.924072] ? mem_cgroup_commit_charge+0x6d/0xf0 [ 2588.928908] alloc_pages_current+0x1b7/0x270 [ 2588.933309] ? skb_page_frag_refill+0x41/0x110 [ 2588.937966] skb_page_frag_refill+0xa7/0x110 [ 2588.942360] ? sk_alloc_sg+0x6c/0x360 [ 2588.946154] sk_alloc_sg+0x91/0x360 [ 2588.949779] ? local_bh_enable+0x1f/0x30 [ 2588.953829] tls_sw_sendpage+0x243/0x4d0 [ 2588.957879] ? trim_sg+0x1a0/0x1a0 [ 2588.961410] inet_sendpage+0x11d/0x1c0 [ 2588.965290] ? inet_sendmsg+0x170/0x170 [ 2588.969253] sock_sendpage+0x63/0x90 [ 2588.972955] ? sock_fasync+0x90/0x90 [ 2588.976683] pipe_to_sendpage+0x93/0xb0 [ 2588.980641] __splice_from_pipe+0xdd/0x2a0 [ 2588.984875] ? generic_splice_sendpage+0x90/0x90 [ 2588.989614] generic_splice_sendpage+0x6e/0x90 [ 2588.994180] direct_splice_actor+0x42/0x50 [ 2588.998395] splice_direct_to_actor+0x174/0x350 [ 2589.003048] ? do_splice_direct+0xe0/0xe0 [ 2589.007185] do_splice_direct+0x87/0xe0 [ 2589.011146] do_sendfile+0x424/0x680 [ 2589.014848] __x64_sys_sendfile64+0x59/0xb0 [ 2589.019173] do_syscall_64+0x61/0x90 [ 2589.022870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2589.028056] RIP: 0033:0x457089 [ 2589.031224] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2589.050267] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 15:32:20 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x9) r1 = socket$inet(0x2, 0x3, 0x100000000052) recvmsg(r1, &(0x7f0000001780)={&(0x7f0000000000)=@xdp, 0xf, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x20) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="3c608a1c7e4e08f09dd5c4fa33fee8db16c5649a02b275888ac3c8c94fca5bc2841485b5a89bffbf812bc3fc553018ac31b1b6c7261930aa5c9c1865c1572ce5f89bc48ce8d84e3a91083b480884c6d9ada43ce847c3d1e6be3540099d70a84f4f2eebe10b2f65e0d976f217172bf219566016", 0x73) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00000000c0)=0x5, 0xfffffffffffffd9d) r2 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x4, 0x80000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000340)=0x4, 0x4) sendto$inet(r1, &(0x7f0000000180)="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", 0x351, 0x0, &(0x7f0000002000), 0x10) 15:32:20 executing program 1: unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r0, &(0x7f0000000100)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x2a, 0x0, [0x5, 0xb3ac, 0x6, 0xffffffffffffffc1, 0x3, 0x3ff, 0xfffffffffffffc01, 0x6, 0x20000000000, 0x10001, 0x40, 0x3e, 0x3, 0x6, 0x7fffffff, 0x800]}, {0x4, 0x0, [0x3f, 0x64, 0x0, 0x3, 0x1, 0x9, 0x100, 0x4, 0x9, 0x21ed627c, 0x5, 0x9, 0x7, 0x1, 0x0, 0xdb4c]}, {0x24, 0x0, [0xc11, 0x1, 0xffffffff, 0x4, 0x2, 0x2, 0x401, 0x9, 0x80, 0xfffffffffffffbff, 0x2, 0x4, 0x1, 0x1, 0x10000, 0x7]}, {0x1, 0x0, [0xfa1c, 0x7, 0x5, 0x80000000, 0x7, 0x9, 0x5, 0x9, 0xc3, 0x39a2, 0x2, 0x3ff, 0x0, 0x6, 0x1, 0x401]}, {0x0, 0x0, [0x4, 0x8, 0x161, 0xfffffffffffffffd, 0xfffffffffffff000, 0x0, 0x10001, 0x0, 0xd1f9, 0x1f, 0x100000001, 0x9, 0x6, 0x7fff, 0x80, 0x1]}, {0x10, 0x0, [0x9, 0xfffffffffffffe00, 0x7, 0x8, 0x1ff, 0x1, 0x7, 0x1, 0xc6, 0x7, 0x2, 0x9b53, 0x2, 0x0, 0x7, 0x200]}, {0x38, 0x0, [0x5, 0xff, 0x1, 0x7fff, 0x1, 0x7ea, 0x69b, 0x0, 0x9, 0x2, 0x7ff, 0x4, 0x7f, 0x10000, 0x7fffffff, 0x5]}], r2, 0x1, 0x1, 0x1f8}}, 0x20) 15:32:20 executing program 4 (fault-call:10 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8205) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendfile(r1, r3, &(0x7f0000000240), 0x8000000008) [ 2589.057972] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2589.065224] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2589.072474] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.079733] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2589.086987] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000c [ 2589.099008] IPVS: ftp: loaded support on port[0] = 21 [ 2589.118483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2589.128742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2589.150641] FAULT_INJECTION: forcing a failure. [ 2589.150641] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.161912] CPU: 1 PID: 4110 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2589.164989] IPVS: ftp: loaded support on port[0] = 21 [ 2589.169089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2589.169090] Call Trace: [ 2589.169102] dump_stack+0xae/0xf0 [ 2589.169110] should_fail+0x144/0x230 [ 2589.169121] ? __should_failslab+0x67/0x90 [ 2589.192728] bridge0: port 1(bridge_slave_0) entered blocking state [ 2589.193353] __should_failslab+0x7e/0x90 [ 2589.193359] should_failslab+0x9/0x20 [ 2589.193364] __kmalloc+0x61/0x250 [ 2589.197599] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.203894] ? skb_page_frag_refill+0x7f/0x110 [ 2589.203899] tls_push_record+0x48/0x470 [ 2589.203904] tls_sw_sendpage+0x380/0x4d0 [ 2589.208350] device bridge_slave_0 entered promiscuous mode [ 2589.211727] ? trim_sg+0x1a0/0x1a0 [ 2589.211734] inet_sendpage+0x11d/0x1c0 [ 2589.211738] ? inet_sendmsg+0x170/0x170 [ 2589.211745] sock_sendpage+0x63/0x90 [ 2589.219896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2589.221480] ? sock_fasync+0x90/0x90 [ 2589.221485] pipe_to_sendpage+0x93/0xb0 [ 2589.221491] __splice_from_pipe+0xdd/0x2a0 [ 2589.226069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.230022] ? generic_splice_sendpage+0x90/0x90 [ 2589.230026] generic_splice_sendpage+0x6e/0x90 [ 2589.230029] direct_splice_actor+0x42/0x50 [ 2589.230035] splice_direct_to_actor+0x174/0x350 [ 2589.234470] device bridge_slave_1 entered promiscuous mode [ 2589.239693] ? do_splice_direct+0xe0/0xe0 [ 2589.239697] do_splice_direct+0x87/0xe0 [ 2589.239703] do_sendfile+0x424/0x680 [ 2589.239707] __x64_sys_sendfile64+0x59/0xb0 [ 2589.239712] do_syscall_64+0x61/0x90 [ 2589.239719] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2589.247759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2589.251058] RIP: 0033:0x457089 [ 2589.251059] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 [ 2589.259101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2589.261064] 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c [ 2589.277286] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2589.279246] 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f [ 2589.288413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2589.288572] 84 00 00 00 00 [ 2589.383583] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2589.391263] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2589.398519] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2589.405760] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.413018] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2589.420358] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000d [ 2589.441925] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2589.448777] team0: Port device team_slave_0 added [ 2589.457333] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2589.464362] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008 [ 2589.465252] team0: Port device team_slave_1 added [ 2589.472310] PGD 80000001f4dab067 P4D 80000001f4dab067 PUD 1eb5b9067 PMD 0 [ 2589.472318] Oops: 0000 [#1] SMP PTI [ 2589.472322] CPU: 1 PID: 4110 Comm: syz-executor4 Not tainted 4.18.0-rc8+ #32 [ 2589.472324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2589.472334] RIP: 0010:blkcipher_walk_done+0x18e/0x290 [ 2589.481710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2589.484144] Code: 45 28 49 8b 5d 38 8b 43 0c 03 43 08 41 39 45 40 73 07 e8 05 f5 83 ff eb 18 e8 fe f4 83 ff 48 89 df e8 b6 74 0d 00 49 89 45 38 <8b> 40 08 41 89 45 40 45 89 7d 48 45 89 7d 30 41 f6 46 11 02 75 07 [ 2589.535503] RSP: 0018:ffff8801efc1b948 EFLAGS: 00010246 [ 2589.540836] RAX: 0000000000000000 RBX: ffff8801eee88270 RCX: 0000000000040000 [ 2589.548081] RDX: ffffc90006332000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2589.555325] RBP: ffff8801efc1b970 R08: ffff8801ed26f8ec R09: 0000000000000005 [ 2589.562573] R10: 000000000000330b R11: 00000000a459bcb9 R12: 0000000000000010 [ 2589.569817] R13: ffff8801efc1b9a0 R14: ffff8801efc1ba88 R15: 0000000000000ff0 [ 2589.577759] FS: 00007f81bc56d700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 2589.585957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2589.591811] CR2: 0000000000000008 CR3: 00000001ed64a000 CR4: 00000000001406e0 [ 2589.599070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2589.606315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2589.613558] Call Trace: [ 2589.616123] crypto_ctr_crypt+0x21c/0x250 [ 2589.620246] ? aesti_set_key+0x680/0x680 [ 2589.624279] ? scatterwalk_ffwd+0x53/0xe0 [ 2589.628400] skcipher_encrypt_blkcipher+0x49/0x50 [ 2589.633216] crypto_gcm_encrypt+0xd1/0x160 [ 2589.637421] tls_push_record+0x1f0/0x470 [ 2589.641453] tls_sw_sendpage+0x380/0x4d0 [ 2589.645485] ? trim_sg+0x1a0/0x1a0 [ 2589.648995] inet_sendpage+0x11d/0x1c0 [ 2589.652858] ? inet_sendmsg+0x170/0x170 [ 2589.656803] sock_sendpage+0x63/0x90 [ 2589.660487] ? sock_fasync+0x90/0x90 [ 2589.664175] pipe_to_sendpage+0x93/0xb0 [ 2589.668127] __splice_from_pipe+0xdd/0x2a0 [ 2589.672332] ? generic_splice_sendpage+0x90/0x90 [ 2589.677058] generic_splice_sendpage+0x6e/0x90 [ 2589.681613] direct_splice_actor+0x42/0x50 [ 2589.685818] splice_direct_to_actor+0x174/0x350 [ 2589.690470] ? do_splice_direct+0xe0/0xe0 [ 2589.694675] do_splice_direct+0x87/0xe0 [ 2589.698625] do_sendfile+0x424/0x680 [ 2589.702310] __x64_sys_sendfile64+0x59/0xb0 [ 2589.706604] do_syscall_64+0x61/0x90 [ 2589.710291] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2589.715465] RIP: 0033:0x457089 [ 2589.718635] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2589.737641] RSP: 002b:00007f81bc56cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2589.745336] RAX: ffffffffffffffda RBX: 00007f81bc56d6d4 RCX: 0000000000457089 [ 2589.752595] RDX: 0000000020000240 RSI: 0000000000000006 RDI: 0000000000000004 [ 2589.759848] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 2589.767113] R10: 0000008000000008 R11: 0000000000000246 R12: 0000000000000007 [ 2589.774379] R13: 00000000004d3840 R14: 00000000004c85ae R15: 000000000000000d [ 2589.781625] Modules linked in: [ 2589.784790] Dumping ftrace buffer: [ 2589.788298] (ftrace buffer empty) [ 2589.791981] CR2: 0000000000000008 [ 2589.795435] ---[ end trace fe9604d7ba830ac4 ]--- [ 2589.800186] RIP: 0010:blkcipher_walk_done+0x18e/0x290 [ 2589.805356] Code: 45 28 49 8b 5d 38 8b 43 0c 03 43 08 41 39 45 40 73 07 e8 05 f5 83 ff eb 18 e8 fe f4 83 ff 48 89 df e8 b6 74 0d 00 49 89 45 38 <8b> 40 08 41 89 45 40 45 89 7d 48 45 89 7d 30 41 f6 46 11 02 75 07 [ 2589.824406] RSP: 0018:ffff8801efc1b948 EFLAGS: 00010246 [ 2589.829763] RAX: 0000000000000000 RBX: ffff8801eee88270 RCX: 0000000000040000 [ 2589.837020] RDX: ffffc90006332000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2589.844278] RBP: ffff8801efc1b970 R08: ffff8801ed26f8ec R09: 0000000000000005 [ 2589.851713] R10: 000000000000330b R11: 00000000a459bcb9 R12: 0000000000000010 [ 2589.858989] R13: ffff8801efc1b9a0 R14: ffff8801efc1ba88 R15: 0000000000000ff0 [ 2589.866271] FS: 00007f81bc56d700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 2589.874490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2589.880361] CR2: 0000000000000008 CR3: 00000001ed64a000 CR4: 00000000001406e0 [ 2589.887633] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2589.894899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2589.902175] Kernel panic - not syncing: Fatal exception [ 2589.902518] Dumping ftrace buffer: [ 2589.902521] (ftrace buffer empty) [ 2589.902522] Kernel Offset: disabled [ 2589.918647] Rebooting in 86400 seconds..