0000000180)='./file0\x00', &(0x7f0000000040)={0xc}, &(0x7f0000000080), 0x0) 04:37:05 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x84000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:37:05 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r1) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000100)={r3, &(0x7f00000002c0)=""/166}) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:37:05 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x4, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0049d13d339c3a83b57716ee817c892fe57dda6e3ac07858a088ca4db18e363c2dea8bdb564a22c9bc8faf6c532aaab9b6ba0630f11c15b164a12d3e48f3fd"}, 0x60) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200c00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0xfffffffffffffffd, 0xffffffffffff8369, {"af206b26262815f90e6954ec69feb745"}, 0x2, 0x8000, 0x8}}}, 0x90) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0xd3f93fa19810adf3) 04:37:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x717940c4, 0x2000) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="1f0000000203193b000007000000068100023b05090002000b004042010058", 0x1f}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="9dfc0f9beab2d17e8094fd55874a11f53206581fab68eb03865d815139b01b144e868dd5830dced6de35b7dcfb22d9441c719afd054c8cb8756b7e6c7f6231a289dfc0762909e5e90e9b378c106413a63666a91dd746ddc71c8451e030bd6dcab5d6505a1538a483d0c89345ff3879e7e95f96d5d536e9ea7854ff1cd6", 0x7d}], 0x1) 04:37:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:05 executing program 2: r0 = socket$kcm(0x2, 0xb, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2}, &(0x7f0000000100)=0xc) getsockopt$bt_hci(r0, 0x10d, 0xa, &(0x7f0000000080)=""/86, &(0x7f00000001c0)=0x19) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 233.194276] netlink: 'syz-executor4': attribute type 1 has an invalid length. 04:37:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x5d, @loopback, 0x4e22, 0x1, 'wlc\x00', 0x1, 0x3, 0x45}, {@empty, 0x4e20, 0x2, 0x200, 0x401, 0x8}}, 0x44) 04:37:05 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 04:37:05 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x821f, 0x40002) write$cgroup_type(r1, &(0x7f0000000280)='threaded\x00', 0xfe9e) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) 04:37:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0a5600000000000000000000028000007a0a00ffff0900fd63010c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000e3ffffffffff0000950000003900000000000000000000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x4bb, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xb}, 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="71ac201ffe1abd1213ba3e8c728a6d2358", 0x11) [ 233.361782] Restarting kernel threads ... done. [ 233.375490] Restarting kernel threads ... done. 04:37:05 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xff) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lgetxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'}, &(0x7f0000000780)=""/74, 0x382) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x2400, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)) write$FUSE_LSEEK(r0, &(0x7f0000000280)={0x18, 0x0, 0x8, {0x3}}, 0x18) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000240)=0x6) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0004000000000000000000000000"], 0x90) 04:37:05 executing program 4: r0 = socket$inet(0x2, 0x80a, 0x0) bind$inet(r0, &(0x7f0000eed000), 0x10) ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x759, 0x80) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0xffff, @mcast2, 0x80000000}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="795c8e4419d994027625ba98f72ee50d5c6cd7c86f51ff595d65ea3e4e93b02b52bc9db4981787e3fb8e6bea2eaf5d42a75918389ee410b60067524741b63534287505981870d7cab8f4ce9881e050b97348fb64db15bcbdd1b67f87d607727823310604754b0088fcd454b5172eb75330c270ad78972a758d8d3efb08f930", 0x7f}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x4f8, 0x4}, 0x40) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000d0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r2, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) 04:37:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300090468fe0700000000000700ff3f07000000450001070000001419001a0004000200070000000327ee9e94c302739bdd2a1ffc", 0x39}], 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x220400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0x1, 0x0, 'client0\x00', 0x0, "91e8f882018807c4", "1c950da310672bc977ac87d81e1e684639e97d4a44752c702122e9b2817002b2", 0x0, 0x1ff}) socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) [ 233.587395] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 233.598896] syz-executor1 cpuset=syz1 mems_allowed=0 [ 233.604163] CPU: 0 PID: 8130 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 233.611454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.611459] Call Trace: [ 233.611484] dump_stack+0x1c4/0x2b4 [ 233.611519] ? dump_stack_print_info.cold.2+0x52/0x52 [ 233.611537] ? mark_held_locks+0x130/0x130 [ 233.611550] ? mark_held_locks+0x130/0x130 [ 233.611568] dump_header+0x27b/0xf72 [ 233.611590] ? debug_smp_processor_id+0x1c/0x20 [ 233.611607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.611631] ? pagefault_out_of_memory+0x197/0x197 [ 233.611649] ? debug_smp_processor_id+0x1c/0x20 [ 233.611663] ? perf_trace_lock_acquire+0x15b/0x800 [ 233.611681] ? perf_trace_lock_acquire+0x15b/0x800 [ 233.640894] ? perf_trace_lock+0x7a0/0x7a0 [ 233.640909] ? perf_trace_lock+0x7a0/0x7a0 [ 233.640929] ? debug_smp_processor_id+0x1c/0x20 [ 233.640945] ? perf_trace_lock_acquire+0x15b/0x800 [ 233.640961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.640983] ? perf_trace_lock+0x7a0/0x7a0 [ 233.649380] ? task_will_free_mem+0x239/0xb30 [ 233.649405] ? ___ratelimit+0x36f/0x655 [ 233.649422] ? lock_downgrade+0x900/0x900 [ 233.659927] ? trace_hardirqs_on+0xbd/0x310 [ 233.659940] ? kasan_check_read+0x11/0x20 [ 233.659954] ? ___ratelimit+0x36f/0x655 [ 233.659984] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 233.659999] ? trace_hardirqs_on+0x310/0x310 [ 233.660017] ? lock_downgrade+0x900/0x900 [ 233.669592] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 233.669608] ? ___ratelimit+0xaa/0x655 [ 233.669632] ? idr_get_free+0xec0/0xec0 [ 233.669646] ? kasan_check_write+0x14/0x20 [ 233.669661] ? do_raw_spin_lock+0xc1/0x200 [ 233.669678] oom_kill_process.cold.27+0x10/0x903 [ 233.683055] ? kasan_check_write+0x14/0x20 [ 233.683070] ? do_raw_spin_lock+0xc1/0x200 [ 233.683088] ? oom_evaluate_task+0x540/0x540 [ 233.683107] ? cgroup_procs_next+0x70/0x70 [ 233.692692] ? _raw_spin_unlock_irq+0x60/0x80 [ 233.692707] ? oom_badness+0xaa0/0xaa0 [ 233.692726] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 233.692743] ? mem_cgroup_iter_break+0x30/0x30 [ 233.692769] ? cgroup_file_notify+0x226/0x2f0 [ 233.692786] out_of_memory+0xa84/0x1430 [ 233.810651] ? kasan_check_read+0x11/0x20 [ 233.814816] ? oom_killer_disable+0x3a0/0x3a0 [ 233.819343] ? kasan_check_write+0x14/0x20 [ 233.823572] ? do_raw_spin_lock+0xc1/0x200 [ 233.827796] mem_cgroup_out_of_memory+0x15e/0x210 [ 233.832628] ? memcg_memory_event+0x40/0x40 [ 233.836934] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 233.841698] ? page_counter_try_charge+0x1c1/0x220 [ 233.846640] try_charge+0xc43/0x1690 [ 233.850342] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 233.855463] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 233.861518] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 233.866357] ? lock_downgrade+0x900/0x900 [ 233.870495] ? lock_release+0x970/0x970 [ 233.874473] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 233.880290] ? mark_held_locks+0x130/0x130 [ 233.884519] ? get_mem_cgroup_from_mm+0x206/0x440 [ 233.889357] ? mem_cgroup_can_attach+0x580/0x580 [ 233.894098] ? check_preemption_disabled+0x48/0x200 [ 233.899106] ? __might_sleep+0x95/0x190 [ 233.903068] mem_cgroup_try_charge+0x5ea/0xe10 [ 233.907660] ? mem_cgroup_protected+0xa60/0xa60 [ 233.912319] ? swp_swapcount+0x530/0x530 [ 233.916384] ? pagevec_lru_move_fn+0x259/0x350 [ 233.920955] ? trace_hardirqs_on+0xbd/0x310 [ 233.925284] ? kasan_check_read+0x11/0x20 [ 233.929444] ? pagevec_lru_move_fn+0x259/0x350 [ 233.934045] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 233.939569] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 233.944502] wp_page_copy+0x46c/0x14f0 [ 233.948388] ? kasan_check_write+0x14/0x20 [ 233.952610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 233.958145] ? follow_pfn+0x2e0/0x2e0 [ 233.961949] ? do_wp_page+0x76c/0x1390 [ 233.965835] ? lock_downgrade+0x900/0x900 [ 233.969986] ? kasan_check_write+0x14/0x20 [ 233.974223] ? kasan_check_read+0x11/0x20 [ 233.978364] ? do_raw_spin_unlock+0xa7/0x2f0 [ 233.982763] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 233.987341] ? __pte_alloc_kernel+0x220/0x220 [ 233.991855] do_wp_page+0x774/0x1390 [ 233.995560] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 234.000215] ? lock_release+0x970/0x970 [ 234.004178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.009701] ? kasan_check_write+0x14/0x20 [ 234.013934] ? do_raw_spin_lock+0xc1/0x200 [ 234.018176] __handle_mm_fault+0x2c60/0x53e0 [ 234.022597] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 234.027442] ? __dump_page.cold.2+0x179/0x179 [ 234.031942] ? follow_page_mask+0x18d/0x1fb0 [ 234.036375] ? handle_mm_fault+0x42a/0xc70 [ 234.040613] ? lock_downgrade+0x900/0x900 [ 234.044772] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 234.050586] ? retint_kernel+0x2d/0x2d [ 234.054484] ? __get_user_pages+0x806/0x1b30 [ 234.058892] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 234.064345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 234.069893] ? check_preemption_disabled+0x48/0x200 [ 234.074908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.080458] handle_mm_fault+0x54f/0xc70 [ 234.084524] ? __handle_mm_fault+0x53e0/0x53e0 [ 234.089102] ? find_vma+0x34/0x190 [ 234.092647] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 234.097669] __get_user_pages+0x806/0x1b30 [ 234.101917] ? follow_page_mask+0x1fb0/0x1fb0 [ 234.106422] ? perf_trace_lock+0x7a0/0x7a0 [ 234.110661] ? lock_acquire+0x1ed/0x520 [ 234.114639] ? __mm_populate+0x31a/0x4d0 [ 234.118710] ? lock_release+0x970/0x970 [ 234.122702] ? arch_local_save_flags+0x40/0x40 [ 234.127282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.132837] populate_vma_page_range+0x2db/0x3d0 [ 234.137600] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 234.142550] ? find_vma+0x34/0x190 [ 234.146093] __mm_populate+0x286/0x4d0 [ 234.149988] ? populate_vma_page_range+0x3d0/0x3d0 [ 234.154918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.160473] ? ns_capable_common+0x13f/0x170 [ 234.164900] __x64_sys_mlockall+0x45b/0x630 [ 234.169238] ? __ia32_sys_munlock+0x160/0x160 [ 234.173734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 234.179272] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.184666] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 234.190123] do_syscall_64+0x1b9/0x820 [ 234.194015] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 234.199384] ? syscall_return_slowpath+0x5e0/0x5e0 [ 234.204315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.209167] ? trace_hardirqs_on_caller+0x310/0x310 [ 234.214184] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 234.219203] ? prepare_exit_to_usermode+0x291/0x3b0 [ 234.224222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 234.229070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.234251] RIP: 0033:0x457579 [ 234.237440] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.256340] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 234.264261] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 234.271526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 234.278801] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 04:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300050100000000000000a0eae9bd16", @ANYRES32=r1, @ANYBLOB="000000000000000014002b00100004000c000000", @ANYRES32], 0x34}}, 0x0) 04:37:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000500)=0x6, 0x4) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x8, &(0x7f00000016c0)=""/75, 0x4b, 0x7fff}, 0x2000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001780)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000017c0)={0x0, 0x5, 0x5}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001840)={r2, 0xe8f}, &(0x7f0000001880)=0x8) 04:37:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x4, 0xde0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000080), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x0, 0x0, 'veth1_to_bridge\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', 'ip_vti0\x00', @broadcast, [], @random="80edc1eaebd4", [], 0xa0, 0xa0, 0xd0, [@vlan={'vlan\x00', 0x8}]}}, @common=@redirect={'redirect\x00', 0x8}}, {{{0x1b, 0x0, 0x0, 'ip6tnl0\x00', 'bond_slave_0\x00', 'tunl0\x00', 'veth1_to_bridge\x00', @random="c97aa57c3508", [], @empty, [], 0xa8, 0x128, 0x160, [@mac={'mac\x00', 0x10, {{@local}}}]}, [@common=@log={'log\x00', 0x28, {{0x0, "03935051d757d6820e4bac5b529a00f99269470df285abab190232c45be1"}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x15, 0x0, 0x0, 'eql\x00', 'bridge_slave_1\x00', 'erspan0\x00', 'bond0\x00', @local, [], @broadcast, [], 0x918, 0x950, 0x980, [@connbytes={'connbytes\x00', 0x18}, @among={'among\x00', 0x840, {{0x0, 0x0, 0x0, {[], 0x2, [{[], @multicast2}, {[], @dev}]}, {[], 0x1, [{[], @multicast1}]}}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@remote}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x1f, 0x0, 0x0, 'team_slave_1\x00', 'bridge_slave_1\x00', 'bcsh0\x00', 'irlan0\x00', @local, [], @local, [], 0x100, 0x168, 0x1a0, [@connbytes={'connbytes\x00', 0x18}, @helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@mark={'mark\x00', 0x10}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0xe58) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f00000000c0)="dfbeb683e835b05285018746c5917da757d119b3425406b508939e269057d6c1ab1f2b359f9923ef3188941d5f4011a66658c25f2934aeb950af52a23b0793d9e535084d955b380a91db751acef383f47ab3527b77476e16f8419ec4d7b983e6b12fd8217718da26794659e82721f5060e6c0add3597e2aea218eae1ba588422cde0d7f6ea29d504d5b804f879182a6a70345d3fc8f5c7ea341aeceda2bec9820ddec7f0032cdc6d3e54cf37d5d68d") [ 234.286076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 234.293359] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 234.303736] Task in /syz1 killed as a result of limit of /syz1 [ 234.309913] memory: usage 204800kB, limit 204800kB, failcnt 49 [ 234.315963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 234.347460] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 234.364551] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 234.378748] Memory cgroup stats for /syz1: cache:0KB rss:198888KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:17156KB active_anon:136KB inactive_file:4KB active_file:4KB unevictable:181688KB [ 234.411594] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 234.415760] Memory cgroup out of memory: Kill process 8026 (syz-executor1) score 346 or sacrifice child [ 234.434691] Killed process 8053 (syz-executor1) total-vm:70736kB, anon-rss:18452kB, file-rss:32768kB, shmem-rss:0kB 04:37:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:06 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') lsetxattr$security_smack_entry(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f00000004c0)='net/arp\x00', 0x8, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) r2 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000700)=[0x0]) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 04:37:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f436f3902e360f01d1baf80c66b8bc5b6e8966efbafc0c66edf2df5bdbbaf80c66b80491988766efbafc0c66b80058000066ef0f22d066b9800000c00f326635000800000f30baf80c66b8100b728266efbafc0cb86394ef660f70de05", 0x5d}], 0x1, 0x0, &(0x7f0000000140), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x400, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) r5 = getegid() fchown(r2, r4, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x2, 0x0) ioctl$RTC_WIE_ON(r6, 0x700f) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:37:06 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x88002) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140)="2e80aef60d16a393d6919089ae7ce22d899b3995406dbf8d857f748cfd81200541557c4e7cc5696ded2edde9572a66fe63b30d9940d921faf13e6e", &(0x7f0000000180)=""/71}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xb0863114ea3ca9ee, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 04:37:06 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x106, 0x1}}, 0x20) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000280)={0x3f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) accept$alg(r1, 0x0, 0x0) socket$unix(0x1, 0x6, 0x0) r2 = socket$unix(0x1, 0x9, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000600)={0x0, {{0x2, 0x4e24}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000140)={0x2, 0x6, 0x4, 0x7, 0xadb, 0x0, 0x7, 0xfff, 0x3, 0x10000, 0x1000, 0x101}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(r2, &(0x7f0000000040)=@ax25, &(0x7f0000000100)=0x80, 0x80800) openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000900)='./file0\x00') getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r2, &(0x7f0000000580)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) 04:37:06 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000500)={0xffffffffffffffca}, 0xfffffe7c) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000600)={{0x0, 0xd8e}, {}, 0x0, 0x7ccdf13147df7b60}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0x2a, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x14400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',obj_type=,obj_user=procvmnet0eth1vboxnet0$:@$,\x00']) sendmmsg$unix(r2, &(0x7f00000005c0)=[{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000940)="6ae91cef60cb60485cad07184d4696c7ec0be60d8ceb6cd942ca295557ea71f4ced4542adffb3f05e11d27391c2fccf246f0625bd6f621a1826386c3df2818cafdb714d362ccc49e6c8f5e8e4c632bff8192ef6287f7ce87d110478cb485ce66dac6fb4706a7501c66730804e793ebb54f22328e1dd7f6697a007f9ed15ec3b6e40e82b143689d889eae1a6258c722adbcd1db4360a785663994486cc7b73c83c43341931beaf19d5d0c3f6e4e4f87a8a455c65a31fd154e2bd55f7fa67aa0989dcd6a20526ea9c885df870cfb11f30ac16f898813b51c225dda1f1c8016a7068da3e51a2b05b4b802c414320f2e481e63ac14ff721081d212084d70049ef8270d8cbea358e60e190ebfd9c4bd08fa37c98da77dbd9fb3f826815db205df653f98d84b620f49572302c0915511d91672ddbe9c85339d41d39d9adb76165fb156b9ce7603d9f5183d18bfb8e7c9109038c612b832df4dc737d8cb3ca0e9729326f9ae01c06c132f7002e37931c66ab5be4bd68652a53b3ebc09ff3801a174725edcc844de2204eb2371e21610410fd86827f87c7645fb8e3f3ea294a7696d668980227309a3da85ce7023da888a1cba464789497b7877e4dfdc7ea004568eec1d43c2f85717c187f7b2414709925434713a514bdd5f0ac66d3b813c62fc049ec178db6e42a53612a4556fa8b1322ab33088b6bcf02afb5809a2fd19fb52feafadae722c0ea86e2f2965d4fe50d85190c875543d672faf1d783a4b94af1d6a8a1805fe8484943ef18a20b5ce6d0b7d7684b0e78944cde5146570c3f31627c1068a8dcf721a0ff728c3db44453911779782bf17449526dad909f79424930a6cc5fb21e20119fe409624e5e0e489e6803a8031dfbb8dacd8ed713a2b38d11c375f84939f01664de5401fd9313854306d66b94f3f231bd544a66d87f8a5f5395adad6203cccde430a9afacf9c31e10a946ce71c7085fa01716257dfb8af8e0d5983950d43d04f23c9934a52e482889842433b3f7650152f0d2b02f732e01968550b1980bc038e45fc93651b55e4952a1eb15b92541eceea2b9c4b399edb6f696eae7763ca49d8da1b98b515e16c674bdaa7540275cd5d0cbdbd5afec453a4ca78e92d95df758fd6d978a258c1588fc110744c878f879739b1614e643fd24f84b28304279601b449819d162984f503446fe06a36a2cfe42a91ca3bcc29b449d70a9fa50e7eba9c7b34f3e8c8d059e19c05a48e88c860bfb8b138bca64392e9694bc0d3597c41cbd703fcf032cc804aab32aa3c422f2535048fb9ddb9b5a84fb3e2c32087c643fd10ed82be2c3fdf6f05c992a1e8d86eab2b0a4272c60b3c1b539ebb66951d30f10d30e2643a58e975f8c318ce6c9495768a61859d4a8ae623fc0aa12004845573191a319ce40e43212840be3212fc33488ad33cd108b0fc4e0290a8327d055ec2a96ff90c6f1327668c24b5f500ad46c24fbffb7433b6e6c3f638f7ea17facce41f94b5709c46cee5f9ffea237ee1bcd49a9d47b3249423549460d1ed27f6d12dcd4c55b7bd0df1057937e30bbae4862bb0a28b3f14437f4802f41c8fdc63b077535aba300fca798d9b67d214f94ce6ea4c99ad2d335c80764c261da98d0c4df5fda93c587274b19d67e0d070bae2c10fb0eb696cb326e2a80bb1bc380cb44a352c2d539422feefb9c64b658337cb5b69d7eaf6795250d3eadccbc5b384eaf26debc22f2852aa95239c8e1eec4551aaddcafba21d8f722905ad5847ab6e6dfae35bcb805fce82df169163c4f060289f2ab7bf88b89489037c7b0317de6ededa765324ce0b6d399106e36f78c4a202ff5f340bc6d9c51fa234c00fbac239d1fc698be20a4e59b63e7e053a7437616810fbf24a96ada37c5f373b04186ae0817002d02d03620909294d7246bb644246c4bb5869988f56997c5b7428ae47d504bc61474858a02181aaca22a9491f04aac1bd3511b5b9f5626f4405849568f46fdcbcc4c53c05ef8cec4187c173a43815a387a65ff8a19845c33550ebe4f706bb970a904e0292f0a9292717eb1bf3dadb9975c6f7681fbdd748c7c365f17301f268d79ecad2be49ac326fef805a4d7ce4a9aa1f237ed56be494fe6f5c617769871c82e1c6ebd4ea10bcd53858948adb93a2ff7214a93a1576d193f955834bb6a325b0183a7eb5f874f909460da400b7dd8a068196979417aa55e5a49ed50de1d3f40d9016700031af949bf8d8de2656ce4787cb117f54d93fda3a89a75a78bbb6db2a1624e67bbbe79e8877f9362b6714cafbd50dfe0b1305572cde1a78396aa0086e2b527607a27d00087f2a1eaff41cc70c2042bd8c560745a10219946019d08fe052eb825100c3486843f0a81349b143765a0b79609a13e080a259ae9a9a094271d3fc16b5ae894a3d6d34f79fdc8de748ad1b8d16d670f12c1c337af8578b52edcf812778ea3664e32f9579eac0e7ddb5714cf8051bca227f960c29e859c9daa7545b7cf04a1c82fcde3fcd1b5a2a96cd6d4a339efacdb8c886f490a03f25c8cf2cc6a8cb39042f98de5ed8bb17120dfd9a0eb3d006cc5fd5d50bc129eaa94a75c8b1bee93faccdf173c38b1b5f8cb0be09323400735bb442f33f844c9451b2a3524c704ed6b8566c9d4d97baa15be193ea9edd7b05bf64198b8fd8a50a428b1e1fa4186c45a40c3a9b56df1b3c6a003d7af12c3b2645b2c01739ec5780f18552ee2a90164295864bdb7651f5c82acc822ae99825ce5ffa846c5c5b8995bab313a45d6e826ac46053c75dbdf1e15fc49bda6b8b6d4e2ae5be65", 0x7bd}], 0x1}], 0x1, 0x800) fchmod(0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)={0x0, 0xffffffffffffff6b}) umount2(&(0x7f0000000780)='./file0\x00', 0x0) [ 234.775174] 9pnet: Insufficient options for proto=fd 04:37:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)="6370755b6363742e73746100003c3267f62f879fbaea3f2a815eda37b450adfc3b6abe3bddcff27f4bdac2e8462b3dce39f026487fda503fbba1b6185fd05f9b67f0c9abba33decc974bcaff59f2aa1e8e63eafaef2e5632541a1080dccd7c67164197d5444c04dd7fcd164a43a8c242b1755b0636789da0135835bf224698ff02c4ddcfed4031b0178912a37446dc2c6edd86aee827428f58e1136c42987eebb0efc6d257f0a978e28d5878a9f74d6d52a69f986251baf0c4b4652350b0", 0x275a, 0x0) r1 = socket$inet6(0xa, 0x6, 0xffc) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$cgroup_int(r0, &(0x7f0000000200), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x7f) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) fdatasync(r2) r3 = gettid() syz_open_procfs(r3, &(0x7f00000000c0)='gid_map\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x10200, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x200, 0x0) 04:37:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000080)="3ae1e373fbb71b18913d28f07dafe63acfcb3349ec809c47a682f564e71ae1c0c4494cc84fc75c3aecddf08629a0b58ebbbde1d37598d4a4004918a327a247c488e2bc474e90952816a9e949657ebfa13de2dbb706123d6970a94cde4655f4aac0c91c312d525067dc80a070738bbed9ff2377d96ae1cb97641d6249579341ede220a6ddd50707121c281a03d22c452cb577c3131d9a0f12c8c23a60bb8220db725ab3cc57effca47a657bb3cb60a0c97e533adebc", 0xb5, 0x80, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 04:37:07 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1ff, 0x202) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3c040402f9381200fe80000000400000000000000000800045c932822a0000000000000000000000"], 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3) fcntl$notify(r0, 0x402, 0x20) 04:37:07 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2, 0x6) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0xfffffffffffffffc, {{0x2, 0x4e24, @broadcast}}}, 0x88) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[{0x18, 0x0, 0x7, "bc02"}], 0x18}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 234.973265] attempt to access beyond end of device [ 234.978975] loop0: rw=1, want=114, limit=112 [ 234.988931] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 235.008658] Buffer I/O error on dev loop0, logical block 113, lost async page write [ 235.057892] attempt to access beyond end of device [ 235.068422] syz-executor1 cpuset=syz1 mems_allowed=0 [ 235.114641] loop0: rw=1, want=115, limit=112 [ 235.121500] CPU: 0 PID: 8209 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 235.128780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.138128] Call Trace: [ 235.140731] dump_stack+0x1c4/0x2b4 [ 235.144383] ? dump_stack_print_info.cold.2+0x52/0x52 [ 235.149597] ? mark_held_locks+0x130/0x130 [ 235.153845] ? mark_held_locks+0x130/0x130 [ 235.158088] dump_header+0x27b/0xf72 [ 235.161818] ? debug_smp_processor_id+0x1c/0x20 [ 235.166498] ? check_preemption_disabled+0x48/0x200 [ 235.171527] ? pagefault_out_of_memory+0x197/0x197 [ 235.176475] ? debug_smp_processor_id+0x1c/0x20 [ 235.181151] ? perf_trace_lock+0x14d/0x7a0 [ 235.185417] ? perf_trace_lock_acquire+0x15b/0x800 [ 235.190359] ? perf_trace_lock_acquire+0x15b/0x800 [ 235.195311] ? zap_class+0x640/0x640 [ 235.199039] ? perf_trace_lock+0x7a0/0x7a0 [ 235.203278] ? debug_smp_processor_id+0x1c/0x20 [ 235.207949] ? perf_trace_lock+0x14d/0x7a0 [ 235.212189] ? perf_trace_lock_acquire+0x15b/0x800 [ 235.217120] ? zap_class+0x640/0x640 [ 235.220838] ? perf_trace_lock+0x7a0/0x7a0 [ 235.225077] ? task_will_free_mem+0x239/0xb30 [ 235.229607] ? zap_class+0x640/0x640 [ 235.233336] ? zap_class+0x640/0x640 [ 235.237068] ? ___ratelimit+0x36f/0x655 [ 235.241058] ? lock_downgrade+0x900/0x900 [ 235.245213] ? trace_hardirqs_on+0xbd/0x310 [ 235.249552] ? kasan_check_read+0x11/0x20 [ 235.253713] ? ___ratelimit+0x36f/0x655 [ 235.257940] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 235.263403] ? trace_hardirqs_on+0x310/0x310 [ 235.267814] ? lock_downgrade+0x900/0x900 [ 235.271972] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 235.277079] ? ___ratelimit+0xaa/0x655 [ 235.280973] ? idr_get_free+0xec0/0xec0 [ 235.284950] ? kasan_check_write+0x14/0x20 [ 235.289202] ? do_raw_spin_lock+0xc1/0x200 [ 235.293460] oom_kill_process.cold.27+0x10/0x903 [ 235.298244] ? kasan_check_write+0x14/0x20 [ 235.298801] Buffer I/O error on dev loop0, logical block 114, lost async page write [ 235.302488] ? do_raw_spin_lock+0xc1/0x200 [ 235.302524] ? oom_evaluate_task+0x540/0x540 [ 235.302544] ? cgroup_procs_next+0x70/0x70 [ 235.310505] attempt to access beyond end of device [ 235.314561] ? _raw_spin_unlock_irq+0x60/0x80 [ 235.314576] ? oom_badness+0xaa0/0xaa0 [ 235.314595] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 235.319082] loop0: rw=1, want=116, limit=112 [ 235.323222] ? mem_cgroup_iter_break+0x30/0x30 [ 235.323250] ? cgroup_file_notify+0x226/0x2f0 [ 235.328286] Buffer I/O error on dev loop0, logical block 115, lost async page write [ 235.332660] out_of_memory+0xa84/0x1430 [ 235.332677] ? kasan_check_read+0x11/0x20 [ 235.332693] ? oom_killer_disable+0x3a0/0x3a0 [ 235.336643] attempt to access beyond end of device [ 235.341322] ? do_raw_spin_lock+0xc1/0x200 [ 235.341360] mem_cgroup_out_of_memory+0x15e/0x210 [ 235.341379] ? memcg_memory_event+0x40/0x40 [ 235.345860] loop0: rw=1, want=117, limit=112 [ 235.350379] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 235.350403] ? page_counter_try_charge+0x1c1/0x220 [ 235.350421] try_charge+0xc43/0x1690 [ 235.350439] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 235.350460] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 235.355008] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 235.362714] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 235.362745] ? lock_downgrade+0x900/0x900 [ 235.362761] ? lock_release+0x970/0x970 [ 235.362794] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 235.362810] ? kasan_check_read+0x11/0x20 [ 235.366858] attempt to access beyond end of device [ 235.370904] ? do_raw_spin_unlock+0xa7/0x2f0 [ 235.370920] ? zap_class+0x640/0x640 [ 235.370940] ? get_mem_cgroup_from_mm+0x206/0x440 [ 235.370957] ? mem_cgroup_can_attach+0x580/0x580 [ 235.375508] loop0: rw=1, want=130, limit=112 [ 235.380397] ? __might_sleep+0x95/0x190 [ 235.380415] mem_cgroup_try_charge+0x5ea/0xe10 [ 235.380434] ? lock_downgrade+0x900/0x900 [ 235.384723] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 235.389504] ? mem_cgroup_protected+0xa60/0xa60 [ 235.389521] ? retint_kernel+0x1b/0x2d [ 235.389545] ? __handle_mm_fault+0x2c32/0x53e0 [ 235.389567] ? pmd_val+0x88/0x100 [ 235.393950] attempt to access beyond end of device [ 235.398259] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 235.398280] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 235.398297] __handle_mm_fault+0x273a/0x53e0 [ 235.398312] ? zap_class+0x640/0x640 [ 235.403101] loop0: rw=1, want=131, limit=112 [ 235.407972] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 235.407986] ? __dump_page.cold.2+0x179/0x179 [ 235.408003] ? follow_page_mask+0x18d/0x1fb0 [ 235.411803] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 235.416801] ? zap_class+0x640/0x640 [ 235.416818] ? handle_mm_fault+0x42a/0xc70 [ 235.422978] attempt to access beyond end of device [ 235.430657] ? lock_downgrade+0x900/0x900 [ 235.430678] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 235.430694] ? __get_user_pages+0x806/0x1b30 [ 235.430714] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 235.435610] loop0: rw=1, want=132, limit=112 [ 235.439674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.439690] ? check_preemption_disabled+0x48/0x200 04:37:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x77, 0x0, 0x9, "b386092a2ef3e3d95e4272979972bab3", "969c917292734cafaac238301951433709846e2ea137e6ee976f27a5d3ec22b4f5ebf86da4d574aa062eff739aa8d04721fe9e7325ab982ef7f1d3f75e80018218a35c1527f0e1a82499390def4dbd73a507d8eb3b9272b47345f6f7528c4a134fe6"}, 0x77, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000800)=""/252, 0x1eed}, 0x28) [ 235.439703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.439724] handle_mm_fault+0x54f/0xc70 [ 235.443743] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 235.449464] ? __handle_mm_fault+0x53e0/0x53e0 [ 235.449476] ? find_vma+0x34/0x190 [ 235.449491] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 235.449509] __get_user_pages+0x806/0x1b30 [ 235.449545] ? follow_page_mask+0x1fb0/0x1fb0 [ 235.453763] attempt to access beyond end of device [ 235.458596] ? zap_class+0x640/0x640 [ 235.458611] ? perf_trace_lock+0x7a0/0x7a0 [ 235.458635] ? lock_acquire+0x1ed/0x520 [ 235.458647] ? __mm_populate+0x31a/0x4d0 [ 235.458666] ? lock_release+0x970/0x970 [ 235.466267] loop0: rw=1, want=133, limit=112 [ 235.466775] ? arch_local_save_flags+0x40/0x40 [ 235.472522] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 235.476409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.476443] populate_vma_page_range+0x2db/0x3d0 [ 235.485707] attempt to access beyond end of device [ 235.489402] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 235.489419] ? find_vma+0x34/0x190 [ 235.489437] __mm_populate+0x286/0x4d0 [ 235.489459] ? populate_vma_page_range+0x3d0/0x3d0 [ 235.493707] loop0: rw=1, want=3733, limit=112 [ 235.501417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.501432] ? ns_capable_common+0x13f/0x170 [ 235.501447] __x64_sys_mlockall+0x45b/0x630 [ 235.501462] ? __ia32_sys_munlock+0x160/0x160 [ 235.508586] attempt to access beyond end of device [ 235.509991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 235.510007] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.510055] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 235.514683] loop0: rw=1, want=3734, limit=112 [ 235.518071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 235.518095] do_syscall_64+0x1b9/0x820 [ 235.518108] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 235.518128] ? syscall_return_slowpath+0x5e0/0x5e0 [ 235.523409] Buffer I/O error on dev loop0, logical block 3733, lost async page write [ 235.528615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.528641] ? trace_hardirqs_on_caller+0x310/0x310 04:37:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818d96299218e5a080000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r2}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) io_setup(0xa6, &(0x7f0000000180)=0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x400001, 0x0) io_cancel(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f00000004c0)="0fcd415f1e1a05ca89a00f273fc3653e46313520fff9f6dc308aef917e486942fb51611667d55575567fb869d5cf9cdd5907ede6393485e06892a767e69f56ebaf15c248bf3d6e3fd5374413bee9342444c26b0e5c509e467a071d43cc4769b472e9f26180c27e8c8ac5908f7b9381033702732606d88cc2d7e086b1237b61d7416ae72704f8fa12da4ba1f883526e383d930dddd57416c738244b3663f70b945d69ba3379ffcda79eb8b81bd34fb9e234b2a2ab1a1fe8132891f5565c5bf36224f2f10f84be594b7d33110ed72345b6ce9cac070d5759e003339343dd", 0xdd, 0xfffffffffffffc00, 0x0, 0x1, r4}, &(0x7f0000000600)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x30c, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r5}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x1c0270, r5}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 235.528657] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 235.528674] ? prepare_exit_to_usermode+0x291/0x3b0 [ 235.528695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.540795] attempt to access beyond end of device [ 235.541733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.541751] RIP: 0033:0x457579 [ 235.546251] loop0: rw=1, want=3735, limit=112 [ 235.550979] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.550988] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 235.551003] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 235.551011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 235.551019] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 235.551027] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 235.551034] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 235.616022] Task in [ 235.641166] Buffer I/O error on dev loop0, logical block 3734, lost async page write [ 235.645754] /syz1 [ 235.661792] killed as a result of limit of [ 235.668019] attempt to access beyond end of device [ 235.680945] loop0: rw=1, want=3736, limit=112 [ 235.713144] /syz1 [ 235.833390] memory: usage 204800kB, limit 204800kB, failcnt 77 [ 235.851675] attempt to access beyond end of device [ 235.874005] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 235.891523] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 235.907069] Memory cgroup stats for [ 235.947559] loop0: rw=1, want=3737, limit=112 [ 235.953426] /syz1 [ 236.002743] attempt to access beyond end of device [ 236.007702] loop0: rw=1, want=3766, limit=112 [ 236.053240] attempt to access beyond end of device [ 236.068221] : cache:0KB rss:198932KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:17304KB active_anon:140KB inactive_file:12KB active_file:0KB unevictable:181496KB [ 236.099841] loop0: rw=1, want=3767, limit=112 [ 236.123792] attempt to access beyond end of device [ 236.137171] loop0: rw=1, want=3768, limit=112 [ 236.149023] attempt to access beyond end of device [ 236.150512] Memory cgroup out of memory: Kill process 8026 (syz-executor1) score 346 or sacrifice child [ 236.156805] loop0: rw=1, want=3769, limit=112 [ 236.163701] Killed process 8026 (syz-executor1) total-vm:70736kB, anon-rss:18452kB, file-rss:52256kB, shmem-rss:0kB [ 236.206391] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 236.232362] syz-executor1 cpuset=syz1 mems_allowed=0 [ 236.248722] CPU: 0 PID: 8209 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 236.256000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.265555] Call Trace: [ 236.268150] dump_stack+0x1c4/0x2b4 [ 236.271826] ? dump_stack_print_info.cold.2+0x52/0x52 [ 236.277047] ? mark_held_locks+0x130/0x130 [ 236.281279] ? mark_held_locks+0x130/0x130 [ 236.285523] dump_header+0x27b/0xf72 [ 236.289243] ? debug_smp_processor_id+0x1c/0x20 [ 236.289260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.289278] ? pagefault_out_of_memory+0x197/0x197 [ 236.299455] ? debug_smp_processor_id+0x1c/0x20 [ 236.299468] ? perf_trace_lock_acquire+0x15b/0x800 [ 236.299480] ? perf_trace_lock_acquire+0x15b/0x800 [ 236.299495] ? perf_trace_lock+0x7a0/0x7a0 [ 236.323120] ? perf_trace_lock+0x7a0/0x7a0 [ 236.327397] ? debug_smp_processor_id+0x1c/0x20 [ 236.332077] ? perf_trace_lock_acquire+0x15b/0x800 [ 236.337023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.342573] ? perf_trace_lock+0x7a0/0x7a0 [ 236.346818] ? task_will_free_mem+0x239/0xb30 [ 236.351327] ? ___ratelimit+0x36f/0x655 [ 236.355318] ? lock_downgrade+0x900/0x900 [ 236.359512] ? trace_hardirqs_on+0xbd/0x310 [ 236.363851] ? kasan_check_read+0x11/0x20 [ 236.368003] ? ___ratelimit+0x36f/0x655 [ 236.371983] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 236.377443] ? trace_hardirqs_on+0x310/0x310 [ 236.381866] ? lock_downgrade+0x900/0x900 [ 236.386025] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 236.391128] ? ___ratelimit+0xaa/0x655 [ 236.393903] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 236.395022] ? idr_get_free+0xec0/0xec0 [ 236.406772] ? kasan_check_write+0x14/0x20 [ 236.408253] FAT-fs (loop0): Filesystem has been set read-only [ 236.411012] ? do_raw_spin_lock+0xc1/0x200 [ 236.421109] oom_kill_process.cold.27+0x10/0x903 [ 236.425878] ? kasan_check_write+0x14/0x20 [ 236.430118] ? do_raw_spin_lock+0xc1/0x200 [ 236.434365] ? oom_evaluate_task+0x540/0x540 [ 236.438781] ? cgroup_procs_next+0x70/0x70 [ 236.443021] ? _raw_spin_unlock_irq+0x60/0x80 [ 236.447519] ? oom_badness+0xaa0/0xaa0 [ 236.451414] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 236.456184] ? mem_cgroup_iter_break+0x30/0x30 [ 236.460799] ? cgroup_file_notify+0x226/0x2f0 [ 236.465275] out_of_memory+0xa84/0x1430 [ 236.469232] ? kasan_check_read+0x11/0x20 [ 236.473363] ? oom_killer_disable+0x3a0/0x3a0 [ 236.477849] ? kasan_check_write+0x14/0x20 [ 236.482062] ? do_raw_spin_lock+0xc1/0x200 [ 236.486277] mem_cgroup_out_of_memory+0x15e/0x210 [ 236.491098] ? memcg_memory_event+0x40/0x40 [ 236.495398] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 236.500137] ? page_counter_try_charge+0x1c1/0x220 [ 236.505061] try_charge+0xc43/0x1690 [ 236.508761] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 236.513846] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 236.519883] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 236.524705] ? lock_downgrade+0x900/0x900 [ 236.528865] ? lock_release+0x970/0x970 [ 236.532840] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 236.538652] ? kasan_check_read+0x11/0x20 [ 236.542779] ? do_raw_spin_unlock+0xa7/0x2f0 [ 236.547166] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 236.551733] ? get_mem_cgroup_from_mm+0x206/0x440 [ 236.556557] ? mem_cgroup_can_attach+0x580/0x580 [ 236.561299] ? __might_sleep+0x95/0x190 [ 236.565254] mem_cgroup_try_charge+0x5ea/0xe10 [ 236.569816] ? lock_downgrade+0x900/0x900 [ 236.573944] ? mem_cgroup_protected+0xa60/0xa60 [ 236.578597] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 236.583595] ? retint_kernel+0x1b/0x2d [ 236.587463] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 236.592469] ? __handle_mm_fault+0x2c32/0x53e0 [ 236.597038] ? pmd_val+0x88/0x100 [ 236.600476] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 236.606001] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 236.610917] __handle_mm_fault+0x273a/0x53e0 [ 236.615312] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 236.620136] ? __dump_page.cold.2+0x179/0x179 [ 236.624612] ? follow_page_mask+0x18d/0x1fb0 [ 236.629008] ? follow_page_mask+0x18d/0x1fb0 [ 236.633439] ? handle_mm_fault+0x42a/0xc70 [ 236.637656] ? lock_downgrade+0x900/0x900 [ 236.641788] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 236.647567] ? __get_user_pages+0x806/0x1b30 [ 236.651955] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 236.657385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.662901] ? check_preemption_disabled+0x48/0x200 [ 236.667894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.673442] handle_mm_fault+0x54f/0xc70 [ 236.677496] ? __handle_mm_fault+0x53e0/0x53e0 [ 236.682054] ? find_vma+0x34/0x190 [ 236.685575] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 236.690572] __get_user_pages+0x806/0x1b30 [ 236.694792] ? follow_page_mask+0x1fb0/0x1fb0 [ 236.699271] ? zap_class+0x640/0x640 [ 236.702965] ? perf_trace_lock+0x7a0/0x7a0 [ 236.707179] ? lock_acquire+0x1ed/0x520 [ 236.711146] ? __mm_populate+0x31a/0x4d0 [ 236.715186] ? lock_release+0x970/0x970 [ 236.719155] ? arch_local_save_flags+0x40/0x40 [ 236.723717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.729243] populate_vma_page_range+0x2db/0x3d0 [ 236.733993] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 236.738900] ? find_vma+0x34/0x190 [ 236.742419] __mm_populate+0x286/0x4d0 [ 236.746287] ? populate_vma_page_range+0x3d0/0x3d0 [ 236.751196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.756727] ? ns_capable_common+0x13f/0x170 [ 236.761114] __x64_sys_mlockall+0x45b/0x630 [ 236.765417] ? __ia32_sys_munlock+0x160/0x160 [ 236.769906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 236.775422] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.780764] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 236.786194] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.791732] do_syscall_64+0x1b9/0x820 [ 236.795597] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.800962] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.805870] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.810691] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.815732] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.820760] ? prepare_exit_to_usermode+0x291/0x3b0 [ 236.825763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.830589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.835754] RIP: 0033:0x457579 [ 236.838941] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.857818] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 236.865505] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 236.872753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 236.879999] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 236.887245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 236.894492] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 236.902961] Task in /syz1 killed as a result of limit of /syz1 [ 236.910929] memory: usage 186136kB, limit 204800kB, failcnt 88 [ 236.916908] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 236.923706] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 236.929944] Memory cgroup stats for /syz1: cache:0KB rss:180460KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:17304KB active_anon:140KB inactive_file:0KB active_file:0KB unevictable:163056KB [ 236.951297] Memory cgroup out of memory: Kill process 8203 (syz-executor1) score 257 or sacrifice child 04:37:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000280)='GPL\x00', 0x1, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x400000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r2, r1, 0xc, 0x1}, 0x10) 04:37:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}]) socket$netlink(0x10, 0x3, 0xf) io_getevents(r1, 0x805, 0x80000000000016d, &(0x7f0000000300)=[{}, {}], 0x0) io_destroy(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x100000000000e, 0x8, 0x0, 0x0, 0x24, r0, 0x80000000}, 0x2c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getgid() 04:37:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x77, 0x0, 0x9, "b386092a2ef3e3d95e4272979972bab3", "969c917292734cafaac238301951433709846e2ea137e6ee976f27a5d3ec22b4f5ebf86da4d574aa062eff739aa8d04721fe9e7325ab982ef7f1d3f75e80018218a35c1527f0e1a82499390def4dbd73a507d8eb3b9272b47345f6f7528c4a134fe6"}, 0x77, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0xfc, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", &(0x7f0000000800)=""/252, 0x1eed}, 0x28) 04:37:09 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000300)) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b9b, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x401, 0x12) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000015340)={&(0x7f0000014d00)=@can, 0x80, &(0x7f0000014e40), 0x0, &(0x7f0000014e80)}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000048c0)) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) fstat(r2, &(0x7f0000000980)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003a80)={{{@in, @in6}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000003b80)=0xe8) getegid() getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004580)={{{@in=@dev, @in6}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000004680)=0xe8) getresgid(&(0x7f00000046c0), &(0x7f0000004700), &(0x7f0000004740)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005d00)) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005e00)={0xffffffffffffffff, r1, 0x0, 0x12, &(0x7f0000005dc0)='selfkeyringvmnet1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000005e40)={{{@in6=@local, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000005f40)=0xe8) getgroups(0x3, &(0x7f0000005f80)=[0xee01, 0xee01, 0xee00]) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005fc0)) getuid() getgid() sendmmsg$unix(r3, &(0x7f00000060c0)=[{&(0x7f0000004840)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005c80), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0, 0x11}], 0x1, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x97) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000340)="d362de1052521ee2f2396ea61bf835c90965e1922c5f25fe2d19f866056c0846f1857114728282f81ba9b187006d25d9b6a34775d8285db13c6892beca912b84c157e709e2369d2137438368a6c6258e372c01161b12c6ebeae7c566b4225d3072717c5e3166fbee8b4c5fc4d46dcf57030fbbce742233b3aaaba1fa0df357d863ae3cf3b8d39afb232ad98aaaed3e871a8e69715b7bf8fb772d5f3e57405bc8e5041feacc99976b52caea000000000000000000"}, {&(0x7f0000000280)="172686f52cf471274380dcf54171192777b14bfc06000000000000008cb10493e653ae1f1543981482aafd5f328715c795624d37b3306244ac10f78ada8b96f3803ef7c5e5c9c5cce67e062ad6244b271ea3ce8596"}, {&(0x7f0000000580)="1ba81f088b5219d3438b609edd2afe6aa14f70391ef3bae429787630d442524bf31225c543ae4c0304b4806a7e8eb20b6b35b7631823c9bc24ba7f3e683bbbe9a06f40e37c3dc1efc6bbe4396520dae450b28e47815303062f9a38430c5195296b2b9076b00e5d8b26fc9a1606605ab8de44c4d62266f4e4ecd9354f5f90746cd9d1b5fbe607ee423bcf12ac", 0x62}, {&(0x7f0000000440)="79b099eebd52e5910d30f43dc4a9af8acf374541454ddf2424465fad97af158bb7b3c910f94d2dd2376303091c17b30075eac043e13adc9ef1bdcef18aba3591d5aaecb072d2b342743750c32d4b314a42281fddc35530d72efaf376b1a1810e0075eb01a8ae2d4e6edf341d646e4ec82347ce0af629d5a0429b20"}, {&(0x7f0000000640)="53f05eeb1f076b2ff23a492dd90e1286f04f737fb12989dda7ce8528889f3359221454687d327bd9595983c8d8165e7bd1e1d0ee5d6f250a341cff862d1f61d0959be0e8ce88384a83285d52c08d7a268d926b3eab522ec787bf0c4c211fa9587ed40f2186d442fe31c47860276ac0efbc03a22db66d22885fcf87a2b76a61d4"}, {&(0x7f00000006c0)="76bc08521c1d4a72abe196383a2a067c90ccacb5a93dcc5674e4329af51b21062d69ac3d33d82c84e81acc7cefb224478628eb44acf8d9743170f661f47b623d29a394dedd5e07787b78229fedf6df7e1331073fdb430fbd6c32c7"}, {&(0x7f0000000740)="898a9ef104e2e240fc70c66645419b641a6b189c71f6d4a39e76b1601013a5e068ef9bf91906a71074622d45934047325783443ecd2780728b4eccd8d66e450e061708e2fe603d0e091332387f2a0de4b83ee9c7f436f1944cdac194be9565a627051c167b5d0b746332cf5f4a4d049e21b78908d7148b64566ce8b25fd8768f68cf5c37d07121816b"}, {&(0x7f0000000a80)="51f4ebabcac821474c17f14b34c92ce092e84ea1c86ed7e51a8645521bf34122f5d39c8f0a88cbb7a08490dd0c112e8f1bfb59140f562f1e132d08ad43fcf0ac283eec8a448c32bee05d4c916453808331d2dc496a028c4aff0eaaa1dcc54e67c055f168e73c0ede9e7ae5cca142478e2415796870901702ef5a246d513fb2a9f771a01658c1d0e03652c1076542cf73fdf456271cce342895bf24a7da0279ba7c27c7a55653afdedb54e3460131301ed04e75d9070170f5b19fdbc2e7c39f8f0522"}], 0x10000000000002ff, 0x0) 04:37:09 executing program 2: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x420800, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000180)=0x1, 0x4) listen(r0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)={0x0, @aes256}) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = msgget(0x3, 0x711) msgctl$IPC_RMID(r4, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x300, @dev={0xac, 0x14, 0x2a4}, [0xf401000000000000, 0x300000000000000, 0x6800000000000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 04:37:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 236.961061] Killed process 8203 (syz-executor1) total-vm:70340kB, anon-rss:17380kB, file-rss:35160kB, shmem-rss:0kB [ 236.971927] oom_reaper: reaped process 8203 (syz-executor1), now anon-rss:17424kB, file-rss:35884kB, shmem-rss:0kB [ 237.038916] QAT: Invalid ioctl 04:37:09 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6a640cdb3d2e2f66696c65302c6a6465833d2eca4f698b65302c00"]) lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000540)='./file0\x00', 0x7, 0x6, &(0x7f0000001800)=[{&(0x7f0000000580)="d2d6a874fc37f391c9c4e00bb47fbef9a5fb68777e29fd0114b8a8c307ed902df62f615b7e97ffd23e3748db8f0edeffce7f62c725e83de5389304ce9bb647f6c3d2f3fdd2665c57a39f4d2d54fde473715439f692c8ca994ee50684c57f3028e8ebc3497aef2d265a72b3a6e97c03a92bd9d099dbd489e05a2f09fb419f9725e0e05271fa453bbac7a73d8f8475a400600885cdd02d8d9ffc8e3c8be764bfaadfd8872752adbcd9012ae6cf61a5787ddd30c610221a2f14e2d3a914bdfb554bae2c06aa8fd5dc396eebefbd710ea577973db94608a45f15686e68c4cd", 0xdd, 0x3}, {&(0x7f0000000680)="f53f1bc1", 0x4, 0xc3}, {&(0x7f00000006c0)="c1913035a0c3b22f025ffed64ec570d27337a5897dd74ccab884f0cbe9c7cb89488b512c55fbd9643255be67", 0x2c, 0x9}, {&(0x7f0000000700)="a35fc07ce9006e0cdcbd5a2d9204b0b0595b777488d4d7bcd134be16ba9ab30c2bfd00288f6d366fabf1f84b083f8b3799138787a96bca33902e62b19bb79ee71f438ae77834df9c0f94eba8aec60d99884a", 0x52, 0x8001}, {&(0x7f0000000780)="b45ab4af4863cf5d899ac55b00e3afa4f42b23ad94c248ed5c29d87e3274bcd399e2cf5defa4afa9060e9ee7652309c6a7a98a19875683b2b66fad2c55860dcd8500db0af474a64da6bf9019fe01bffafef7604b3538263d5743516821bfd4376318fc5c0b911fed2d9783d93d889beb3904c3", 0x73, 0x1}, {&(0x7f0000000800)="aecdbd4b0e52863177d39f94380448f82ab4ba2b76cdeceb4b81ccf89ab16aa3bed559265f8f8b3a5d252275325771b15b29c26bcf3b694eb6ed804ae86298947224f72d57d311edb40d6071f3e144eaabeaa0e3c112f96818a5c68b647fadf1df8264e0d3cfca22b1b4876f8da4514c89767eb24e2708ad032f1d101d449fa020f8e68aa0c2e1d70f218b30881db2ec794309d03d324234bc7cd530a0b4951d9f94f6b62aa668c71f2180fb1e9f91fb7606d22f593045ed1cc6efb86e49f7eb1523ace45332af936dd3937784a90c28225416d18ab7f95ed075e6c8fe86a7d6c88b5a9d99e4dade4ad1457a73e004fe80e1ec9764d5986c9dca2d381ebfeabbd30ec1a14746ca128ceb4992588740764e7e2f62c48b2fb7f788f6b9c34de71ba23e72b680c27b18f1f611a1d4d42056937b4668ccd727c9f3a32ec7d547bfe0191ff7c517600ed3e8bbe3bf66a9f83e39a968223df100d37fe4420035a5114749aac1eea931e56d9fbd2f4362b14a6576d04e4da89e5813ae02e0dd6a670983a148ddc6ef69ca14d356d27dd09a2da00e2dd5a4e4ce54e688c07ae7a8fca687c436153d8e54eddce7c8a7d330c84303530e3fe8ae76aea75257bb9383a549fcc6aa9600920acbfd8c03e5324356c12ccbb13340cffbe075a0075cdeeb39da74a2e4b349443e12ae0e18d8b52588216d31c86e0a428e10fe8cdf938d67d00add7cb356a96afdb768c98d6fdde225ce89a23932cb67eeef542b1442cd450ff7eea3a3043c30498b0bc1ecfc9d076a0c7734a04031b07fbadb64262e37de2c1872beb43a1a9f30ef2426ff354eb402df43ba56a792b15164d2cbce5891feb210a70cf6f57674c42377a71e797b047d9e3bfc04d538bc951c31ee6bb6caf4cd54083ad0f7aedd34d8b538d0781234dc1864ad64b3ac0258b8810154a0bbe0692ea0c4065a2c78f6bb08f4e8316ec9ede751726419d65088bc0582ae540b53deb92386b7ef12b77998605cdac74938d4f1d272445de4289ab7cf2caa130376e2f6e224b23cd302b1d3f0972c38e4fc9e2654b8acb5f07b8773ce2ae3497869bba5c001287f99b0aa5530200cdab22df8cc80e34ee3afdaafebd42eb945de26d911e3ac4f1d85fd17825d28bf8bc67751371a43b9748ff429a75c81a8b4fb24ae40d5028f3ed9158a5d04adaaa0a118e32a9953ab4b9eef379d8cee5337540e9fbeb3517cf8efd87c63f1bd1561b1183f295f253b59ba02a47b1b009dd83cc9eb99407a6eba56fa37ae0e27000d8b9e1423e7838138c38504fdcc5966984d5af4bd3284a42acb0d102ca03de4130664d9a7684a2d29971e79c93aed37e96613db3530fb3453c30836f55bc3b2f1b6bc9d4430f3d50597b10f8d46633db731b04158931b500b4c4ef3af8b25ff28e49da4820510f95721a156975bb11214e1e1a325ea8bcee9444569645b97d2b67941adbff8ce41102e0f5f52a888db9f5d5776f4922b794f75baa6ac77d813eb8934e805dd95df8fed81dd8d2265859e760052c6dafef603b9ce06d7b575595dda83451c729e719a80682689eae34138077123c0a74ca954b69ca79f671a5e301a7adc2860ec834760ddc8d18f05ffe3a6c0102ecc032a7889038eb03c07fc3bdfa6d662cde1ba9f6bd5b41312345638ebb7b686e29cbe9cd8f4742823cb8eb54d50393777882c37db1c72e2f86e957512b97580b45e40a49d5b41f1705967b2ede4b1173135d16d10582567e4c6797ce68411a57e00ea83e2cc8ac5c517db4fec0ec8a605f8cefd0da50674b0dfc6ba084ecb44470b6a25cf175c5f8b43e280ddcec8f4984fa5a439cc016ee709ecdd0957fbd045b0bd54c7a8a8bfae834f25d732494967d7885e77107275d922ec16616b2bca2a8fd1b2929e54ce244e9d699b1426a67f86b4e77f4041d50299bed2c79628061e9a1d0b4b2abe56a9f6bef365003ea3a4f530592f65877ccd20603c56f38bc0d4b00a0944776026f94e91c65af8f82a718677b96db3abea31e4bcf75f8ee7ab655d1f94b5f533b9c0bcd5f850cfe14fda8ee85d8c109101177603e3c3ec0eed89f3811b0f578063a00dcf468e52e2d4a6efb8faa642d65cf10e31a37bd97df291a0ef27674706338fe4d4041bfaa8f9290038ae09e6ca561f2caf29aae0cbfb2ba922990a1dd2a7b195f3cd1ee1f5338f7434024448e1974dc22c4994b903f9f0cca368ad6fc25d3199faa29aa69b2bc41bb65505d735ef22eb3a80d5198add64b8e2d4ad6abffe9bd94ad1b306ed30db23e6f254e936af7f37627e4b3e3a11314d70f82ce8a59c6dd4503813745521d460aa4b1baa7c66de85961c4bdcf5d0cf1d45a514d512ff55e10be9713ff96955b43ff78a2204828b7eed07c6acbfd22967893188738b61608a42977ba4ab5949d6f7a0fddc7f1d9c01f4dc6a7390889c83e39efa34aff81c75a71d5d9f146fd90d3ae1f9d8280f69a0f176069e80aed7d16841fd34f21364ed49114a513c4bd44c405bfc1c5a1967e51cbfbbd1818a95e89d10a27e0fed21ade1fd79e317438357e0fdb67cffca16460b05869462aa92cf18d25d853952f0b4751a2e46d0352ec139b3c0d2d7a624ab16e027ab4c1a2baf9e98218f9dfa07fe3b278f9ebf90d533b5ef7ab3df70de6193531f7f4b343c4549b60ab049c2f362b8404d1433d261d6f1aac42e578ca559b25a900f459bd292b472f3c36a2be92daa6d4e94265ca7577cbdb6864beb2241f86d549c0a23f82766d296dff028d129e8881cec533e59dd4f0972c9498dfa1e5d092da3abc9f467e242cabb3228135bf45adda817347eccdd120481b17d197cb2fe10e95fe91fe3167f5859fe225efa664b6efec9f2344f8bd5f5a81f24f821e5a9a032fda1a8f4e1f65130d61ad53cde6d8f9d215b197e452a20337f27642491a4e987d1a1370572f05536e09fd8e58d99586868099a4ac9be1534e22b612258f1f3ab3962d51ee9a1fbc605678bf8af31dbcfa4751b635da87febe5bc27b728e5075a99ea39f8ccc00c4c5b9005d12fb23415b3daa871478dffec4896841fac4cfa510e249f053f9e1a868b8925a0fc4c002c3a09b688e8b94a28b38d1624ae7f87d9728a14892c29287685e6c56d12ac7442cde547df1ababbcc8f706033a834c756fe858bcad57bf11765b7624a57717e82c57f299fb2fded472111ada9774036d278e652c472f1e71781065f2465233d0a52b59d5fdba1a15cdb8aa14c022cf82dd1f25abe801349800980af3ab8604e4b8b4778a094ded2d04d721cca1948e11f26bddffc1d3f5ed02c9c9d0b41ee44fdf6aaae71e66bc87e454a40c95c9338d81740da028cc6f308484718ab34a3432ff60dae1679e6be55df6c4ca8b86b025d593a5eb974ff268fd9066a09b4a1c91f9e1d421af6823c0c1671d710d7b64797bf46a9c143a513393e394bfa3ada93ca863ce6d9b9ff71f22daf343c8023f84d4765b955200a49e823ba8b524b3e1e466948beca78a6dd07e6634859c0312bbf76092a9096246b048e82d31874f648fa295f5c7d7499a949a30b1114a5e780c31d9712de11a6c157720b3f5717c6d45d2f1f3ecf8128783303a4475792bac0472e4bdc043171819285acb48ad51e194c6b2bcfa9c7f2dd930e049e0c44e504f9157fae5ae35f9904f861ce1124f6f0f954a489bd0e21c10f4e45184f0a52d7a4e7158ec5f13fc5c7a1a444a615ca9201cb4c8f66d8816f132c4068fe54d4d540d19f028f0ccb169470b5a92b16470824b872b9a3e39533a6b63e2afbae9d299ac0d522b40a4cb81dacef5764aa2f1fafa05991728058daf6649f5ba4eb2d86cc2c5c5bcf7bb4c67659b8a8e46d5cf29dc362c916fda0f52fa44b71b4375398b731a3408a8a85f33898eb35780bf446df991f7b721e9510b49b13a27f646e47561fc9659b1c8f2035d2c9ab0d61a613bacdd420fa985ccf74e58930eed79e9f47e744a86af8a99efd19c8115a0306fc8d2c752af6bfec3e1002e5e05dbe9c7517d2f7f6a424b90a434a704ff67dc268ca793f1e6057d0a6bb16a60b45515bc968e0a769fbaef6384316ae6a7e73475c2a5984746967929ba15242f046d30ef864f4250a107921027993db7b205fa21f6187493f976dde9b64078d7fc373f7672ee1986fd6e342666042534a6ceaf29b20446f470920d3cafe67ecb8b3f8e30836f07b5c1d397360223d7d4b8f482f5d7cdadb72d5b63a0aa6e3a660604f70b94cd8211c3e16242fcf350f542655007237d573bd360dc7920aaa6ffc0c2e538c062643e1be1732cf4fede70edc5af739ce9305a21e9b8d814de407052c315af35a2086294004e145f32f70db7b2cf6e5098fa60e2111d6b185616221d18b2fc673975706c11b2af0cd92d5fe555307979e772e746b3ece02ad4e5b85f4ddfe8586628b1d3007182819c756fe230b26b8f8881e76ea2427293be75d05fd38338e8b753689a5dbe824214d07ccc565ec5a6490c3cfd20357b4107e32e7bf06649b34e035a323f607e394c5d59ea4ba64f1bcd36b557df8a552b4a55ba354bec2978235d3353848e69b6ba3ac93ce7d8be4d48380e1349fa9878d62a57b9f631d6f2e1cdc6b7ea0ccce7b5c8cd176a7589472bf91c5ffd34acae50d600b02c37f9a330cf828c882c6e43ef901d4a63c4d022c5fb7b56117f22833ef488bfa0ae0c4662aefd51ed26103da068ceb728824f7b6bde99c26e0fa10e93ea12413cfc5ae17accf3098a7040f497196da2dc6d20f5f9312c924562bdf8ce1355562c39a5db668dcca90fa5e03d576f969e79af1b8535a8286b58dd78d0da3f744d6c2aa6da03c30896f94c3244303f8b7090435c0bb00a02d48921af927072e648b62da042d5b8668f48b0d9aff81cd2865816e2e1473ff96fbf49dc2f93ad11aefff83ccd1633c67047430e9686210d9169b1becf107aa3d9ccae487edae93f266dc76efd9f98d905b56a1231a68ddc6db41837ef7785c73d95c3c31d608db4f446e0f86760b2e67a84239aa0d3858cdf5f55f9fdfa25301499b4dc54c2bb2b4cc894583f3a8bcd5efd4781465b03ad8d429685c9e419dc58b58dd08e68067ed3be24271cfd8da28b34a10ca46f993c77a1441fc838b6a063e5f390eb9b96da2088052d835a274d1e157267bcc73ef11af5afd68f1bc0afb661e7cace8dc7b269b418e4bd9d983c28a97d2cabc7e7f7371cca8b4fc464a529a45454885a525ca4339caa958120762487383e78bfd0583b792f9797c5ccff1a6c28ebbe85b07c2056307f590a090309e141cb68a5039f42615b87b55f0da268c2b9e6cd0c6680d12492aa6622791501985ef06d4f47a59585336da7f9cc96094b20bb1a14c509dcc3fddb75f2d1b7f6ae040d0f7aca68009a85fcb5ae260ac5f4e94ee5068dcac8bb78de2d5b3d78b492f36b868f8bf8032576e19077389f174995c05760b2cd93cf19996797aac1b65572758647352de949377b430619dd9fbfd15f5d7a704958bfaaf74087bb4328905447808ba8d14df55837f38ec58d5e8d37f596a15ffea1c8f1e6393e19129cec72156b275c8edafbf384509c376aaa385a8bc085da39242377abf60cc77e3f99f558eb91b7f529015482a3c6bdc2bb874520fc9c152684752f0b0e1592660eb05c66332e2c4ee5df61c5a4f122646bd75a12a5a81940fb7d18358b8867949bb4f4fe170c97e7212470ae6a70354d9e3337e160d035905bb325863350505bdeba24d0a336f75b51f3b6ef22a5fc4177307a3390bc8c796808d75312f964964", 0x1000}], 0x2028, &(0x7f0000001980)={[{@norecovery='norecovery'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'reiserfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) r1 = getuid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x4, &(0x7f0000000400)=[{&(0x7f00000000c0)="214098a037d4bc615f4a21bdfa2d719ca8ec006d7f27b2f93a", 0x19, 0xfffffffffffffffb}, {&(0x7f0000000240)="95dea6df8b074b8690d296f742f45751a9998d4489985b1f402f4031347bd44f529bc9dd0c57055e8bb6db7d5dc1c002baaf3ece87ff26b5d6ceb13e4f7073f1af9449636fbf5f87bd74edba05240b09fb7ddd1d7d08ff3b146057863d5ff2bad16b97e26c5698068603c49e39f0fff455781dfae80d4cfc02cc4d9b00a6255c28b85f4efb4aaa22e137a5bfdb16ad22602c32ac0743a29e374be468b1da4188b3c1b9707c8efbdcf6", 0xa9, 0x100000000}, {&(0x7f0000000300)="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", 0xfa, 0x200000000}, {&(0x7f0000000180)="e7ffaa41ff2e3105f995ac016eb7ac280c83feda2d64843277aaad4654ed02fea8acb21e2e8d97677a0ae37c31026228bda0651f524b1749cd821a6bd5c3cde88d73f18d4c97b8ff2fa618271714ca2676964b120d6303648446fab25b2ca07e267a", 0x62, 0x9}], 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6c617a797469ffff2c6e6f6a6f75726e616c5f636865636b73756d2c6e6f71756f74612c6a6f75726e616c5f506174683d2e2f66696c65302c70726a71756f74612c6e6f6d626c6b5f696f5f7375626d69742c6e6f6d6263616368652c6e6f757365725f78617474722c61707072616973652c7569643c", @ANYRESDEC=r1, @ANYBLOB=',\x00']) 04:37:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000280)='GPL\x00', 0x1, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x4e23, @local}}) [ 237.134161] QAT: Invalid ioctl 04:37:09 executing program 0: setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000008c0), 0xc) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) memfd_create(&(0x7f0000000200)='%vmnet0+\x00', 0x1) read$eventfd(r1, &(0x7f0000000140), 0x20000148) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=@newae={0x1d4, 0x1e, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in6=@loopback, 0x4d2, 0xa, 0xff}, @in=@local, 0x1, 0x3502}, [@algo_auth_trunc={0x14c, 0x14, {{'sha1-ssse3\x00'}, 0x7f8, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in, @in6=@mcast2, 0x0, 0xa}}, @lastused={0xc, 0xf, 0x8}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd26, 0x400}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) [ 237.173040] Unknown ioctl 35097 04:37:09 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'stack ', 'permprofile '}, 0x12) [ 237.213624] Unknown ioctl 35097 [ 237.221522] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "jd Û=./file0" 04:37:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x1, 0x0, 0x80) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/62) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x30, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x3fd, 0x4) 04:37:09 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x3fff) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) mprotect(&(0x7f000057b000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) 04:37:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x1f, &(0x7f00000000c0)) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0x100000001, 0x4) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) shutdown(r2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x880, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) tkill(r0, 0x1004000000016) sched_setattr(r0, &(0x7f0000000080)={0x30, 0x3, 0x0, 0x3f, 0x8, 0x82, 0xfffffffffffffffe, 0xbc0f}, 0x0) [ 237.307534] audit: type=1400 audit(1539146229.344:37): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="permprofile" pid=8304 comm="syz-executor4" [ 237.352730] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "jd Û=./file0" 04:37:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:09 executing program 4: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/169) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) dup(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000400)=""/208, 0xd0, 0x4093}}, {{&(0x7f0000000dc0)=@ethernet={0x0, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/205, 0xcd}], 0x1, &(0x7f0000001240)=""/194, 0xc2}}], 0x2, 0x0, &(0x7f0000003e00)={0x77359400}) r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xfc08000000000000, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x228, [0x20000780, 0x0, 0x0, 0x200008a0, 0x200008d0], 0x0, &(0x7f0000000140), &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x17, 0x1, 0xe9f7, 'erspan0\x00', 'syzkaller0\x00', 'gre0\x00', 'bond0\x00', @dev={[], 0xf}, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20, {{0x7ff, 0x1, 0x9, 0xac8, 0x100, 0x9}}}]}}, @snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x19, 0x0, 0x0, 'veth1_to_bond\x00', 'vcan0\x00', 'syzkaller0\x00', 'bpq0\x00', @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000], @random="fc1cb525cbc8", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2a0) unlink(&(0x7f0000000040)='./file0\x00') 04:37:09 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000), 0x344, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x8000001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da05}}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001340)='/dev/audio#\x00', 0x8478, 0x600100) syz_open_dev$audion(&(0x7f00000015c0)='/dev/audio#\x00', 0x4f, 0x1) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000001600)) stat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x50, r0, 0x0) readv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x80000001}, 0x10) 04:37:09 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0x27}}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xffffffffffffffb3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr=0xfffffffd}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x9, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x9}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r6, 0xe, r2, 0x2) fcntl$dupfd(r4, 0x406, r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x1, 0xff, 0xc, 0x0, 0x12000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x100000000001d, &(0x7f00000005c0)=0x5, 0x4) 04:37:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e1f, @rand_addr=0x566}, 0xfffffffffffffff3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="76000000ffffffff11f000", 0x10) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x6, {0x2, 0x1, 0x7, 0x0, 0xa73, 0x3}, 0x6, 0x3}, 0xe) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00'}, 0x30) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000200)={0x1, 0x0, [{}]}) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x0, {0xa, 0x4e23, 0x10000, @dev={0xfe, 0x80, [], 0x14}}}}, 0x38) 04:37:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 237.692407] kernel msg: ebtables bug: please report to author: bad policy 04:37:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000640)={0xe51a, 0x80, 0x7800000000000000, 0x6}, 0x10) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0xffffff80, 0x0, @in6}]}, 0x38}}, 0x0) [ 237.750041] IPVS: length: 193 != 8 04:37:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x4000000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x3}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) getsockname$packet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x14) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'trusted.', "996367726f75702470707030766d6e657430766d6e6574312e73656c696e75785e2f7472757374656400"}, &(0x7f00000002c0)='/dev/snd/timer\x00', 0xf, 0x2) [ 237.834578] IPVS: length: 193 != 8 04:37:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 237.862636] IPVS: ftp: loaded support on port[0] = 21 04:37:09 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup3(r0, r1, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x809}) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 04:37:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000040), 0x4) 04:37:10 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0x27}}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xffffffffffffffb3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr=0xfffffffd}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x9, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x9}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r6, 0xe, r2, 0x2) fcntl$dupfd(r4, 0x406, r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x1, 0xff, 0xc, 0x0, 0x12000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x100000000001d, &(0x7f00000005c0)=0x5, 0x4) [ 238.004171] : renamed from eql [ 238.026345] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 238.047329] syz-executor1 cpuset=syz1 mems_allowed=0 [ 238.053021] CPU: 1 PID: 8346 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 238.060316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.069678] Call Trace: [ 238.072285] dump_stack+0x1c4/0x2b4 [ 238.075932] ? dump_stack_print_info.cold.2+0x52/0x52 [ 238.081149] ? mark_held_locks+0x130/0x130 [ 238.085411] ? mark_held_locks+0x130/0x130 [ 238.089659] dump_header+0x27b/0xf72 [ 238.093413] ? debug_smp_processor_id+0x1c/0x20 [ 238.098089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.103642] ? pagefault_out_of_memory+0x197/0x197 [ 238.108576] ? debug_smp_processor_id+0x1c/0x20 [ 238.113257] ? perf_trace_lock_acquire+0x15b/0x800 [ 238.118181] ? perf_trace_lock_acquire+0x15b/0x800 [ 238.123113] ? perf_trace_lock+0x7a0/0x7a0 [ 238.127360] ? perf_trace_lock+0x7a0/0x7a0 [ 238.131597] ? debug_smp_processor_id+0x1c/0x20 [ 238.136266] ? perf_trace_lock_acquire+0x15b/0x800 [ 238.141194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.146737] ? perf_trace_lock+0x7a0/0x7a0 [ 238.150973] ? task_will_free_mem+0x239/0xb30 [ 238.155481] ? ___ratelimit+0x36f/0x655 [ 238.159458] ? lock_downgrade+0x900/0x900 [ 238.163613] ? trace_hardirqs_on+0xbd/0x310 [ 238.167938] ? kasan_check_read+0x11/0x20 [ 238.172098] ? ___ratelimit+0x36f/0x655 [ 238.176081] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 238.181555] ? trace_hardirqs_on+0x310/0x310 [ 238.185967] ? lock_downgrade+0x900/0x900 [ 238.190133] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 238.195237] ? ___ratelimit+0xaa/0x655 [ 238.199147] ? idr_get_free+0xec0/0xec0 [ 238.203127] ? kasan_check_write+0x14/0x20 [ 238.207370] ? do_raw_spin_lock+0xc1/0x200 [ 238.211612] oom_kill_process.cold.27+0x10/0x903 [ 238.216378] ? kasan_check_write+0x14/0x20 [ 238.220634] ? do_raw_spin_lock+0xc1/0x200 [ 238.224876] ? oom_evaluate_task+0x540/0x540 [ 238.229293] ? cgroup_procs_next+0x70/0x70 [ 238.233528] ? _raw_spin_unlock_irq+0x60/0x80 [ 238.238020] ? oom_badness+0xaa0/0xaa0 [ 238.241914] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 238.246668] ? mem_cgroup_iter_break+0x30/0x30 [ 238.251257] ? cgroup_file_notify+0x226/0x2f0 [ 238.255762] out_of_memory+0xa84/0x1430 [ 238.259731] ? kasan_check_read+0x11/0x20 [ 238.263874] ? oom_killer_disable+0x3a0/0x3a0 [ 238.268370] ? kasan_check_write+0x14/0x20 [ 238.272633] ? do_raw_spin_lock+0xc1/0x200 [ 238.276873] mem_cgroup_out_of_memory+0x15e/0x210 [ 238.281717] ? memcg_memory_event+0x40/0x40 [ 238.286034] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 238.290792] ? page_counter_try_charge+0x1c1/0x220 [ 238.295762] try_charge+0xc43/0x1690 [ 238.299489] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 238.304600] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 238.310667] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 238.315508] ? lock_downgrade+0x900/0x900 [ 238.319654] ? lock_release+0x970/0x970 [ 238.323626] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 238.329417] ? kasan_check_read+0x11/0x20 [ 238.333565] ? do_raw_spin_unlock+0xa7/0x2f0 [ 238.337977] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 238.342583] ? get_mem_cgroup_from_mm+0x206/0x440 [ 238.347430] ? mem_cgroup_can_attach+0x580/0x580 [ 238.352196] ? __might_sleep+0x95/0x190 [ 238.356174] mem_cgroup_try_charge+0x5ea/0xe10 [ 238.360757] ? lock_downgrade+0x900/0x900 [ 238.364947] ? mem_cgroup_protected+0xa60/0xa60 [ 238.369618] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 238.374637] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 238.379661] ? __handle_mm_fault+0x2c32/0x53e0 [ 238.384253] ? pmd_val+0x88/0x100 [ 238.387705] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 238.393705] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 238.398656] __handle_mm_fault+0x273a/0x53e0 [ 238.403067] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 238.407918] ? __dump_page.cold.2+0x179/0x179 [ 238.412431] ? follow_page_mask+0x18d/0x1fb0 [ 238.416850] ? handle_mm_fault+0x42a/0xc70 [ 238.421081] ? lock_downgrade+0x900/0x900 [ 238.425818] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 238.431614] ? __get_user_pages+0x806/0x1b30 [ 238.436022] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 238.441467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 238.447002] ? check_preemption_disabled+0x48/0x200 [ 238.452015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.457550] handle_mm_fault+0x54f/0xc70 [ 238.461608] ? __handle_mm_fault+0x53e0/0x53e0 [ 238.466210] __get_user_pages+0x806/0x1b30 [ 238.470455] ? follow_page_mask+0x1fb0/0x1fb0 [ 238.474968] ? perf_trace_lock+0x7a0/0x7a0 [ 238.479201] ? lock_acquire+0x1ed/0x520 [ 238.483169] ? __mm_populate+0x31a/0x4d0 [ 238.487230] ? lock_release+0x970/0x970 [ 238.491199] ? arch_local_save_flags+0x40/0x40 [ 238.495778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.501366] populate_vma_page_range+0x2db/0x3d0 [ 238.506128] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 238.511049] ? find_vma+0x34/0x190 [ 238.514618] __mm_populate+0x286/0x4d0 [ 238.518511] ? populate_vma_page_range+0x3d0/0x3d0 [ 238.523444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.529027] ? ns_capable_common+0x13f/0x170 [ 238.533454] __x64_sys_mlockall+0x45b/0x630 [ 238.537774] ? __ia32_sys_munlock+0x160/0x160 [ 238.542269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 238.547811] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.553201] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 238.558644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 238.564187] do_syscall_64+0x1b9/0x820 [ 238.568074] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 238.573455] ? syscall_return_slowpath+0x5e0/0x5e0 [ 238.578384] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.583226] ? trace_hardirqs_on_caller+0x310/0x310 [ 238.588237] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 238.593250] ? prepare_exit_to_usermode+0x291/0x3b0 [ 238.598286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 238.603143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.608328] RIP: 0033:0x457579 [ 238.611533] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.630428] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 238.638138] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 238.645401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 238.652663] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 238.659927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 238.667190] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 238.689955] Task in /syz1 killed as a result of limit of /syz1 [ 238.726035] memory: usage 204800kB, limit 204800kB, failcnt 131 [ 238.752995] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 238.787850] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 238.800977] IPVS: ftp: loaded support on port[0] = 21 [ 238.814380] Memory cgroup stats for /syz1: cache:0KB rss:198340KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:35112KB active_anon:140KB inactive_file:0KB active_file:0KB unevictable:163164KB [ 238.923474] Memory cgroup out of memory: Kill process 8345 (syz-executor1) score 257 or sacrifice child [ 238.943972] Killed process 8345 (syz-executor1) total-vm:70340kB, anon-rss:17380kB, file-rss:35160kB, shmem-rss:0kB [ 238.955226] oom_reaper: reaped process 8345 (syz-executor1), now anon-rss:17424kB, file-rss:35884kB, shmem-rss:0kB 04:37:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x3, 0x391480) sendmsg$nl_netfilter(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000a0304012bbd7000fddbdf250200000908006820", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x21, 0x420b000000000000, @scatter={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000580)="5f39203a1ec61c000f2657a275e0338c73d24faf8117a1bbcec4ae78adceccee3f", &(0x7f00000004c0)=""/44, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000600), 0x7400}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000340)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x0, 0x95, &(0x7f0000000400)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_tcp_buf(r1, 0x6, 0xc47670c8bd9622a5, &(0x7f0000000640)=""/83, &(0x7f00000005c0)=0x53) r4 = syz_open_procfs(r3, &(0x7f0000000200)='net/ip_mr_cache\x00') timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000800)="23404c618a52db5388cf6ff7c3db63ae9e9058a94b2dfc78ae9e818d8e6fe84b80d203a0f61645be675253c7d120a98bdba7c63840bd7bc908f9667bcde5c17438132b563cf8c9caa87055fce6250a760e57260075b6b3b1a2edbd492dfcf6a451e7fc15337d91bcf2a1f68c21d7b2269503433a736a9c3a7250372f15d11e4058bc47b8271abc60348af7391834820aaa86a7c773a1ab65985272", &(0x7f0000000140)="2acfa3824929be3e50faf8f9300f053f5130c6845ba86ab238f2aa9cef1a9f0577dd448a63d5ee73f7950deb3c576199275fbb9b44f4dadf7e961e6cfeaabc28"}}, &(0x7f0000000100)) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380), 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000740)=ANY=[@ANYBLOB="0400000000000000010000000300000001000000000000003a680000080002000100000000000000000000000000000002000000019000000001000000fcffffff05c6867e000000000000000800000000000000000000000000000000000000070000000100000000000000e4000000000000000900000000000000000000000200000000000000050000000600000009000000020000020000000000000000000000000000"]) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0xfffffffffffffd42) 04:37:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 239.044004] sd 0:0:1:0: [sg0] tag#284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 239.053038] sd 0:0:1:0: [sg0] tag#284 CDB: Persistent reserve out, sa=0x19 [ 239.060714] sd 0:0:1:0: [sg0] tag#284 CDB[00]: 5f 39 20 3a 1e c6 1c 00 0f 26 57 a2 75 e0 33 8c [ 239.069825] sd 0:0:1:0: [sg0] tag#284 CDB[10]: 73 d2 4f af 81 17 a1 bb ce c4 ae 78 ad ce cc ee [ 239.078953] sd 0:0:1:0: [sg0] tag#284 CDB[20]: 3f [ 239.265761] sd 0:0:1:0: [sg0] tag#284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 239.274442] sd 0:0:1:0: [sg0] tag#284 CDB: Persistent reserve out, sa=0x19 [ 239.281510] sd 0:0:1:0: [sg0] tag#284 CDB[00]: 5f 39 20 3a 1e c6 1c 00 0f 26 57 a2 75 e0 33 8c [ 239.290315] sd 0:0:1:0: [sg0] tag#284 CDB[10]: 73 d2 4f af 81 17 a1 bb ce c4 ae 78 ad ce cc ee [ 239.299144] sd 0:0:1:0: [sg0] tag#284 CDB[20]: 3f [ 239.308435] IPVS: length: 193 != 8 04:37:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000300), 0x0) write$9p(r1, &(0x7f0000000340)="cc", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="8390c6947d00000029f7f79748a66169babde6260ba92796ba32af1855f83c79fffd5cbb87abb6c8d53b9ddd5561256a2586259102385a3382a3ef92e1a74ec2fd152354a0be6424099bb81f68304cb8aa7e7936864c48bb4d6b373e561fe64c17c6d2b4e48f51f106e724d6f3062dced5da1e119f75e4cb667bce6388658d2ee665e2"], &(0x7f0000000180), 0x1000) clock_adjtime(0x0, &(0x7f0000000200)) 04:37:11 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast2, @in6=@ipv4={[], [], @dev}}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x10000, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0, 0xdc030000}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='squashfs\x00', 0x0, &(0x7f00000003c0)='/dev/dsp\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x10001, 0x4) ioctl$RTC_VL_CLR(r2, 0x7014) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_fscache='cache=fscache'}]}}) lstat(&(0x7f0000001980)='./file0/file0\x00', &(0x7f00000019c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) [ 239.594032] block nbd5: Attempted send on invalid socket [ 239.599550] print_req_error: I/O error, dev nbd5, sector 0 [ 239.648299] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 239.708779] 9pnet: Insufficient options for proto=fd [ 239.761941] squashfs: SQUASHFS error: unable to read squashfs_super_block [ 239.818694] block nbd5: Attempted send on invalid socket [ 239.824211] print_req_error: I/O error, dev nbd5, sector 0 [ 239.837247] SQUASHFS error: squashfs_read_data failed to read block 0x0 [ 239.888600] 9pnet: Insufficient options for proto=fd [ 239.924850] squashfs: SQUASHFS error: unable to read squashfs_super_block 04:37:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0xfffffffffffffff7, 0x3a, 0x372, 0x100000001, 0x9, 0x100000000, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xa904, 0xff0b, 0x6, 0x1000}, {0x100000001, 0x4e, 0x80000000, 0xffffffffffffffff, 0x8, 0x3, 0xd86, 0x0, 0x5, 0x86, 0x8, 0x0, 0x6}, {0x20, 0x1000, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0xb8, 0x3, 0x1f, 0xfffffffffffffffc, 0x1000}], 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x6, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x201) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f0000000180)) 04:37:14 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00]) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2000000, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0xda}}], [{@subj_role={'subj_role', 0x3d, ',,'}}]}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x345, &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='rqd\tv=.-gile2,\b']) 04:37:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x20, 0x21, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@FRA_FLOW={0x8}, @FRA_SRC={0x8}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0xa00}}]}, 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 04:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x84e1f, @rand_addr=0x566}, 0xfffffffffffffff3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="76000000ffffffff11f000", 0x10) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) bind$bt_l2cap(r2, &(0x7f00000004c0)={0x1f, 0x6, {0x2, 0x1, 0x7, 0x0, 0xa73, 0x3}, 0x6, 0x3}, 0xe) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0xd, &(0x7f0000000180)='/dev/binder#\x00'}, 0x30) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r2, 0x4) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000200)={0x1, 0x0, [{}]}) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x0, {0xa, 0x4e23, 0x10000, @dev={0xfe, 0x80, [], 0x14}}}}, 0x38) 04:37:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 242.432184] XFS (loop3): unknown mount option [rqd v=.-gile2]. 04:37:14 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioprio_set$pid(0x1, r0, 0xb24) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10, 0x80800) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e6574000b0000000100000000000000721a0f0000646573b14a887463", 0x2, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', "2f70726f632f2f6e6574000b0000000100000000000000721a0f0000646573b14a887463"}, &(0x7f00000000c0)=""/196, 0xc4) ioctl$NBD_CLEAR_QUE(r2, 0xab05) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) syz_mount_image$f2fs(&(0x7f0000000340)='f2fs\x00', &(0x7f0000000380)='./file0\x00', 0x4, 0x6, &(0x7f00000007c0)=[{&(0x7f00000003c0)="796280fea8c8ef15edb7d2712fc6223896f65b3c32be3c5e83286f42d884b8012bccbf392c6a882f8013fb4093a56287936006fb548f7f3d7d207c506b340b00f00b260687ce5b948a", 0x49, 0x8}, {&(0x7f0000000440)="d66720260080bd2acfc3b8a1b2acd8dfe6ff97b63a00624f37eed8d97a7d4b1b638fe4d69ecb758e40d25924c0757fa5b450b2da08ee8af97fd6ad0cbc16908467b4afce6aad7b88b2b019bbacb44d6c0f68eadbf96530255f355af27b418dfb20ba6d2d", 0x64, 0x1}, {&(0x7f00000004c0)="1a27d9daa9c0ab01e460d261a265295fe7b15ddb6387f329fa48abfb63c6090ea72eeb89d9cc63ba77267d8da8418f3d4dd7d0e4e7082cb0d39e22a64861392a34ed5d8f25c4bb8bc7385d0cbc3b1337e59b167a1c770b23d09afa4114f58e25a4b35c46be7eeeeb6536877279d6df6afeb5c0952ed222848c24c64cc415dd0ec97907b73b3e7e01367d9657e0476f9ec5c1097565b5cdaa30200cfc155f39b51c88df57b4ba6d1e0f5964beb10ef8b9e7163b4422d83b4f0da4d12eaeedb4c38b9cba173551a0", 0xc7, 0x8}, {&(0x7f00000005c0)="e637cd6380b91b57eab7740d08c8a6c7adae04186fd42b354cc448c56778ae0dcaff8af3db8e0f23dbf204076796b79e47795913d1f80179bf06ed96ea2774ed2d9f45a2344584fa31f9328833468e28db2c44c81d6f96d5dc5eda1915d500c6b9e08757bda5909d3d379981b9da8aa80088dbeb400ff70673fe2a561207f0ab5757675778b50adaf070df", 0x8b, 0x1}, {&(0x7f0000000680)="2989c1474f60263ce8fa4adcbad1abb62909b634a34b273f8ed4ce298cd2584fbf1439405c5177da4250bae0a75e31a143c92d95f046f4fc5df56204afff7eec60cb1f52efc735cc52f90f22eacc32abe4e2aa17edaa15a951cd95c241da7e3b926cce3c6fef97757c782d00aec2e8f55631fe42aa95579c", 0x78, 0x40}, {&(0x7f0000000700)="026e81aa267df13e42699c53e68c68913824d4aa925673c5c882924771c56cb236ccba750ebb912c056ab6cea57620f4d75fec5c905e96a4b80b79674647515fba21d9fad5ad0c0120122dc565d6e7e85a59a1d74b84abc888959d87b1df758d3ba52ab4f9881931feb1de3abf03f2041d783b30b174a0cfbafcda8bf973717e41312276b6dcd4d1b11046a213335029866424cf4289218493f6aea3c4e053e5149390", 0xa3, 0x81}], 0x0, &(0x7f00000009c0)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}, {@whint_mode_user='whint_mode=user-based'}, {@user_xattr='user_xattr'}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fowner_gt={'fowner>', r3}}, {@dont_measure='dont_measure'}, {@audit='audit'}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@seclabel='seclabel'}]}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 242.591587] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.624382] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.640843] IPVS: ftp: loaded support on port[0] = 21 04:37:14 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380)={[{0x0, 'memory'}, {0x0, 'cpu'}]}, 0xd) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/170, 0xaa) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @dev}, &(0x7f00000006c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0), 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x14, r2, 0x500, 0x70bd27}, 0x14}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0), 0x7f8, r0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x4000, 0x0) epoll_create1(0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x8) ioctl$TIOCSTI(r4, 0x5412, 0x92f5) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x3) sysfs$3(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00003e1000/0x2000)=nil, 0x2000}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)) write$binfmt_misc(r3, &(0x7f00000000c0)={'syz1'}, 0x4) [ 242.665474] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.695780] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 242.736001] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.772921] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.811922] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.842566] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 242.975362] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.988271] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 04:37:15 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x100, 0xa000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="9e6563757269747900000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000"], 0x78) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) close(r0) socketpair$inet(0x2, 0x2, 0x7e7, &(0x7f0000000000)) 04:37:15 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfffffe77) fallocate(r0, 0x3, 0x0, 0x8001) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast2}}) fallocate(r0, 0x0, 0x3, 0xfff9) r1 = getgid() setgid(r1) 04:37:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677230d2705f61643d", @ANYRESDEC=0x0, @ANYBLOB="0095adee00"]) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = dup(r0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x9927, 0x4) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x189c40, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x7, {0x3}}, 0x18) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) 04:37:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000040)=0xe8) quotactl(0xff, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000013c0)="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") 04:37:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1c1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) 04:37:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80002, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', 0x2}, 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f0000000140)=0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) connect$can_bcm(r1, &(0x7f0000000340), 0x10) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="060000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000000", 0x38}]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 04:37:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:15 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x210000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200), &(0x7f00000002c0)=0x8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="6465762f6e36d0f38b3000279531fc4ccfb99862790a197ad906b00100c2e21f4d54e6333bac70baebe15e1b77c58d5de3b3b223a5c76828b7626a522443c75f84ca0e14a28476073830c71d6d9e5d9c7c40f5280e30d17073175b9dbd28cf67ccf6c76ac36799d20bdb8df39774c92d09f3af3a32793000a12cc13d6a34cfaa"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='efivarfs\x00', 0x200000, &(0x7f0000000180)='vmnet0\x00') sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000000), 0x10) dup2(r1, r2) recvmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1, &(0x7f0000000540)=""/207, 0xcf}, 0x0) 04:37:15 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0x6, 0x0, [{0x10f000, 0x97, &(0x7f0000000180)=""/151}, {0x10000, 0x8d, &(0x7f0000000400)=""/141}, {0x4001, 0x1d, &(0x7f0000000000)=""/29}, {0x5, 0x2c, &(0x7f0000000080)=""/44}, {0x13000, 0xb5, &(0x7f00000004c0)=""/181}, {0x2000, 0x92, &(0x7f0000000680)=""/146}]}) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x180, 0x2) getdents64(r0, &(0x7f00000005c0)=""/186, 0xfda6) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) 04:37:15 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc68, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)="282727143f798e7e5334da3e21fb523ccb837b2cede2c163346e773c06b214c81fcc6444b1878e9bac3a991d2f1a18cc3eb149453c170613e43efb3df98018057a4ab3808a1cb53c779ee6b5efc6a42b98c249dab45bbb2f27991be1934e1d8d59cfb42fc9fecd4b60ff426841064ea03fec4a7d19ae283efd5886e59a2e90dcaaf1ae4af1b30dc0a573e20197d9dd5350246f44e64014a7212c732b274559a1261136fc98752a50770cdbbca2334a43f0dfccb9cf4e985d86d63e986ce6dd2492716fb8c3140802f82ae70c20315302096a6172") 04:37:15 executing program 2: unshare(0x24020400) mknod(&(0x7f0000000280)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00', &(0x7f00000003c0)=""/184, 0xb8) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/178, 0xb2}], 0x1, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000016c0), &(0x7f00000017c0), 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$RTC_AIE_OFF(r0, 0x7002) open(&(0x7f0000000000)='./file0\x00', 0x401, 0x0) 04:37:15 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000003480)=""/159, 0x9f}, {&(0x7f0000003540)=""/255, 0xff}], 0x8, &(0x7f00000036c0)=""/98, 0x62, 0x50}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0)={0xca0}, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x4, 0x1, 0x3c5) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000400)=""/95) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000300, 0x500000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) 04:37:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x8}], 0x1c) close(r2) close(r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./control\x00', &(0x7f0000000180)='./file0\x00') [ 244.139634] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 244.150754] syz-executor1 cpuset=syz1 mems_allowed=0 [ 244.156113] CPU: 1 PID: 8494 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 244.163392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.172744] Call Trace: [ 244.175337] dump_stack+0x1c4/0x2b4 [ 244.178985] ? dump_stack_print_info.cold.2+0x52/0x52 [ 244.184181] ? mark_held_locks+0x130/0x130 [ 244.188449] ? __switch_to_asm+0x40/0x70 [ 244.192516] dump_header+0x27b/0xf72 [ 244.196232] ? lock_downgrade+0x900/0x900 [ 244.200404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.205952] ? pagefault_out_of_memory+0x197/0x197 [ 244.210889] ? debug_smp_processor_id+0x1c/0x20 [ 244.215566] ? perf_trace_lock_acquire+0x15b/0x800 [ 244.220511] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 244.225966] ? kasan_check_write+0x14/0x20 [ 244.230202] ? perf_trace_lock+0x7a0/0x7a0 [ 244.234442] ? debug_smp_processor_id+0x1c/0x20 [ 244.239135] ? perf_trace_lock_acquire+0x15b/0x800 [ 244.244078] ? perf_trace_lock+0x7a0/0x7a0 [ 244.248320] ? task_will_free_mem+0x239/0xb30 [ 244.252841] ? retint_kernel+0x2d/0x2d [ 244.256735] ? trace_hardirqs_on_caller+0xc0/0x310 [ 244.261673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.266479] ? ___ratelimit+0x36f/0x655 [ 244.270458] ? lock_downgrade+0x900/0x900 [ 244.274612] ? trace_hardirqs_on+0xbd/0x310 [ 244.278927] ? kasan_check_read+0x11/0x20 [ 244.283113] ? ___ratelimit+0x36f/0x655 [ 244.287094] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 244.292556] ? trace_hardirqs_on+0x310/0x310 [ 244.296973] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 244.302082] ? ___ratelimit+0xaa/0x655 [ 244.306000] ? idr_get_free+0xec0/0xec0 [ 244.310013] ? kasan_check_write+0x14/0x20 [ 244.314270] ? do_raw_spin_lock+0xc1/0x200 [ 244.318519] oom_kill_process.cold.27+0x10/0x903 [ 244.323292] ? kasan_check_write+0x14/0x20 [ 244.327560] ? do_raw_spin_lock+0xc1/0x200 [ 244.331816] ? oom_evaluate_task+0x540/0x540 [ 244.336231] ? cgroup_procs_next+0x70/0x70 [ 244.340467] ? _raw_spin_unlock_irq+0x60/0x80 [ 244.344967] ? oom_badness+0xaa0/0xaa0 [ 244.348884] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 244.353643] ? mem_cgroup_iter_break+0x30/0x30 [ 244.358234] ? out_of_memory+0xbc/0x1430 [ 244.362313] out_of_memory+0xa84/0x1430 [ 244.366291] ? kasan_check_read+0x11/0x20 [ 244.370446] ? oom_killer_disable+0x3a0/0x3a0 [ 244.374944] ? kasan_check_write+0x14/0x20 [ 244.379189] ? do_raw_spin_lock+0xc1/0x200 [ 244.383440] mem_cgroup_out_of_memory+0x15e/0x210 [ 244.388282] ? memcg_memory_event+0x40/0x40 [ 244.393105] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 244.397873] ? page_counter_try_charge+0x1c1/0x220 [ 244.402805] try_charge+0xc43/0x1690 [ 244.406520] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.411643] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 244.417711] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 244.422556] ? lock_downgrade+0x900/0x900 [ 244.426747] ? lock_release+0x970/0x970 [ 244.430726] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 244.436523] ? mark_held_locks+0x130/0x130 [ 244.440771] ? get_mem_cgroup_from_mm+0x206/0x440 [ 244.445635] ? mem_cgroup_can_attach+0x580/0x580 [ 244.450390] ? check_preemption_disabled+0x48/0x200 [ 244.455415] ? __might_sleep+0x95/0x190 [ 244.459425] mem_cgroup_try_charge+0x5ea/0xe10 [ 244.464025] ? mem_cgroup_protected+0xa60/0xa60 [ 244.468712] ? swp_swapcount+0x530/0x530 [ 244.472773] ? pagevec_lru_move_fn+0x259/0x350 [ 244.477370] ? trace_hardirqs_on+0xbd/0x310 [ 244.481688] ? kasan_check_read+0x11/0x20 [ 244.485833] ? pagevec_lru_move_fn+0x259/0x350 [ 244.490419] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 244.495972] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 244.500921] wp_page_copy+0x46c/0x14f0 [ 244.504803] ? kasan_check_write+0x14/0x20 [ 244.509037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.514577] ? follow_pfn+0x2e0/0x2e0 [ 244.518399] ? do_wp_page+0x76c/0x1390 [ 244.522285] ? lock_downgrade+0x900/0x900 [ 244.526429] ? kasan_check_write+0x14/0x20 [ 244.530664] ? kasan_check_read+0x11/0x20 [ 244.534816] ? do_raw_spin_unlock+0xa7/0x2f0 [ 244.539226] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 244.543827] ? __pte_alloc_kernel+0x220/0x220 [ 244.548329] do_wp_page+0x774/0x1390 [ 244.552056] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 244.556753] ? lock_release+0x970/0x970 [ 244.560733] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.566270] ? kasan_check_write+0x14/0x20 [ 244.570501] ? do_raw_spin_lock+0xc1/0x200 [ 244.574740] __handle_mm_fault+0x2c60/0x53e0 [ 244.579162] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 244.584002] ? __dump_page.cold.2+0x179/0x179 [ 244.588502] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.593261] ? follow_page_mask+0x18d/0x1fb0 [ 244.597679] ? handle_mm_fault+0x42a/0xc70 [ 244.601929] ? lock_downgrade+0x900/0x900 [ 244.606087] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 244.611921] ? __get_user_pages+0x806/0x1b30 [ 244.616330] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 244.621787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.627336] ? check_preemption_disabled+0x48/0x200 [ 244.632371] handle_mm_fault+0x54f/0xc70 [ 244.636437] ? __handle_mm_fault+0x53e0/0x53e0 [ 244.641026] ? handle_mm_fault+0x56e/0xc70 [ 244.645263] ? handle_mm_fault+0x59a/0xc70 [ 244.649506] __get_user_pages+0x806/0x1b30 [ 244.653767] ? follow_page_mask+0x1fb0/0x1fb0 [ 244.658286] ? perf_trace_lock+0x7a0/0x7a0 [ 244.662539] ? retint_kernel+0x2d/0x2d [ 244.666425] ? trace_hardirqs_on_caller+0xc0/0x310 [ 244.671374] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.676151] ? trace_hardirqs_off+0x310/0x310 [ 244.680669] ? lock_release+0x970/0x970 [ 244.684642] ? arch_local_save_flags+0x40/0x40 [ 244.689242] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 244.694016] populate_vma_page_range+0x2db/0x3d0 [ 244.698775] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 244.703723] ? find_vma+0x34/0x190 [ 244.707265] __mm_populate+0x286/0x4d0 [ 244.711196] ? populate_vma_page_range+0x3d0/0x3d0 [ 244.716164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.721711] ? ns_capable_common+0x13f/0x170 [ 244.726142] __x64_sys_mlockall+0x45b/0x630 [ 244.730487] ? __ia32_sys_munlock+0x160/0x160 [ 244.734983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.740521] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.745885] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 244.751344] do_syscall_64+0x1b9/0x820 [ 244.755240] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 244.760605] ? syscall_return_slowpath+0x5e0/0x5e0 [ 244.765549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.770398] ? trace_hardirqs_on_caller+0x310/0x310 [ 244.775415] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 244.780433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.785975] ? prepare_exit_to_usermode+0x291/0x3b0 [ 244.791015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.795865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.801056] RIP: 0033:0x457579 [ 244.804260] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.823160] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 244.830873] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 244.838152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 244.845418] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 244.852684] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 244.859948] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff 04:37:16 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "00f40c442848cb166b002ee8dc4da7ae20d7c965d4fab6ad71c03cb2aa506b39b663e1c4c87d263fc05a6a042b6feba7da240eb2ca83e630e3b925b24361dc", 0xfffffffffffffffd}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44a72107130ee55d660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0x1}, 0x60) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x158) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3}, 0x8) 04:37:16 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x10000, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000000c0)=""/117, &(0x7f0000000140)=0x75) fdatasync(r0) r1 = socket(0x1, 0x3, 0x57) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000003d020000000000000000000000"]}) 04:37:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x104) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x81}}, 0xa) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000007c0)={0x0, 0x38}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000840)={0x0, 0x23, "54dc95a2c1f9e30c68dc80935a8c88429482c2cf3302b5fd6481bffc36bdf00702a5f8"}, &(0x7f0000000880)=0x2b) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r4, 0x101000000000}, 0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) waitid(0x0, r5, &(0x7f0000000180), 0x1000000, &(0x7f0000000500)) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet(0x2, 0x3, 0x1000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@abs, 0xffffffffffffff0c, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x7, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1038, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000280)="563f5bdcdfa7b20df92fb6e2c2144d254ad092ed84000037c4d44fca63") sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @local, 0x1f}}, 0xfffffffffffffb56, 0x8}, &(0x7f0000000240)=0x12) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x1) listen(r2, 0xfffffffffffffe14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x80, @mcast2, 0x8}}, [0x0, 0x7, 0xffffffffffffff80, 0x2, 0x8, 0xfffffffffffffff8, 0x7ff, 0x4, 0x7ff, 0xe18, 0x0, 0x8000, 0x1, 0x8, 0xf01]}, &(0x7f0000000040)=0x100) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x6}, &(0x7f0000000140)=0x8) 04:37:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000400)=0xfffffffffffffe00, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) [ 244.883949] Task in /syz1 killed as a result of limit of /syz1 [ 244.890116] memory: usage 204792kB, limit 204800kB, failcnt 152 [ 244.913038] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 244.988252] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 245.039472] Memory cgroup stats for /syz1: cache:0KB rss:197244KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:20788KB active_anon:2288KB inactive_file:4KB active_file:4KB unevictable:174300KB [ 245.117112] Memory cgroup out of memory: Kill process 8492 (syz-executor1) score 344 or sacrifice child [ 245.152553] Killed process 8522 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 245.179352] oom_reaper: reaped process 8522 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000004700)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4028af11, &(0x7f00000000c0)) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000000)) close(r1) 04:37:17 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000001, 0x1d1c42) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x1}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0xa, 0x5, 0x84) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x200800) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x6, 0x0, 0x707000}}) 04:37:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x4000000000002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="b8010000000f01c1420f08470f30c74424004183e3b2c744240204000000c7442406000000000f011c24b9600600000f32c4211972f4000f201cb8010000000f01d9c4634d7c32c83e0fc1b95bdb7275", 0x50}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup2(r4, r0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000140)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="0f23ec66baf80cb8dcb42185ef66bafc0c66edc481f9df5c953d406e66ba400066ed66baf80cb8fc945286ef66bafc0cb8b31cf4a1ef66ba2000ecf30f7fe2b9800000c00f3235000100000f30b805000000b98b0000000f01d9", 0x5a}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000000)={0x30003}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r5, 0xae80, 0x0) 04:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f0000000080)=@setlink={0x2c, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, [@nested={0x8, 0x1, [@generic="4b97e19e"]}]}]}, 0x2c}}, 0x0) 04:37:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x80000000000000a}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x20000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000340)) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f0000000480)=""/210, 0xd2}, &(0x7f00000000c0), 0x60}, 0x20) r3 = accept$inet6(r0, 0x0, &(0x7f0000000040)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="200990c8802349e9bf2b56bb3856c0c584a09e46cfd9e699070b6bbf81d1fd36a2cd82bc2e493980e93192619a0789f6031ca5bad0789421820e7c813a5103b20cff6431cccbd0982641"], &(0x7f0000000100)=0xa) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x5d3, 0x0, 0x2, 0x4, r4}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x22080, 0x0) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00), 0x7}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8) socketpair(0x13, 0x3, 0x40, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x2, 0xf5f, 0x81]}) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 04:37:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x400000000001032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/sctp\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bcc9de7f", @ANYRES16=r2, @ANYBLOB="000125bd7000ffdbdf25020000000800050003000000340001001400030000000003000000000000000000000000080001000200000014000300000000000000000000000000000000005c0001000800060073680000080009003500000008000900630000000c00070010000000080000000c00070000000000020000000c0007001100000008000000080008000300000008000200df0000000c0007000600000020000000080004000600000008000600e6000000"], 0xbc}, 0x1, 0x0, 0x0, 0x8840}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x70cbda19868d3144, 0x40) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x2000000000000002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0xfffffffffffffffe) 04:37:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{0x4, 0x3, 0x4, 0x9, 'syz1\x00', 0xffffffffffffffe1}, 0x0, [0x3, 0x7, 0x6, 0x740, 0x1f, 0x9, 0x3, 0x401, 0x5278, 0xa2b, 0x8, 0x5, 0x4, 0x6, 0x5, 0xeda, 0x2, 0xfffffffffffff324, 0x800, 0x4, 0x5aff, 0x6b00, 0x80000000, 0x5, 0x964, 0x6, 0x7, 0x2, 0x6, 0x100000000, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x3, 0x8000, 0x3, 0x8, 0x7fffffff, 0x3, 0x3ff, 0x40ed, 0xffffffffffffff81, 0x0, 0xe71, 0x2d0, 0x8, 0x10000000000, 0x9, 0x6, 0xffffffff, 0x200, 0x4a9, 0x5500000000, 0x5, 0x7ff, 0x4, 0x8, 0x2, 0x3, 0xbdd, 0x7, 0x3f, 0x1ff, 0x6, 0x7, 0x7ff, 0xffffffffcf778d22, 0x7, 0x33, 0x1f, 0x9, 0x5, 0x4133, 0x8000, 0x1, 0x400, 0x0, 0x8, 0xbffe, 0x100, 0x3f, 0xfff, 0x10a, 0x1874, 0x72211c61, 0x1f, 0x6, 0x63, 0x7, 0x295ebaef, 0x2, 0x851b, 0x200, 0x7fffffff, 0x8, 0x3, 0x80, 0x9, 0x1, 0x400, 0x4, 0x1c24, 0x1000, 0x1, 0x1f, 0x1, 0x6, 0x2, 0x6, 0x2, 0x81, 0x7fff, 0x2, 0x30ab849d, 0x80000000, 0x10000, 0x5, 0x8, 0x2, 0x7f, 0xffffffffffff263b, 0x7, 0x5, 0x2, 0x3, 0x9]}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x81, 0x4000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80000000, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000007c0)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x5, 0x2, 0x4}, 0x98) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000001c0)={0x1, 0xffffffff, 0x81, 0x4ed1, 0x45, 0x9}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)="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", 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendfile(r6, r5, &(0x7f0000000200), 0x3) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x7fff, 0x8002, 0x100, 0x6, r3}, 0x10) ioctl$EXT4_IOC_RESIZE_FS(r5, 0x40086610, &(0x7f0000000040)=0x436f) 04:37:17 executing program 4: setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) futex(&(0x7f00000000c0), 0x84, 0x0, 0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x2000, 0x0) 04:37:17 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8001, 0x2002) mremap(&(0x7f000086b000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfffffffffffffff7, 0x410400) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x3, 0x7, 0x1, 0x684e, 0x1, [{0x1, 0x7f, 0x7, 0x0, 0x0, 0x800}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0xffffffffffffffff, 0x9}, {0xffff, 0x100000001}, 0x8, 0x3, 0x4}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 04:37:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x7d8827bf7953de10, &(0x7f00000001c0)=0x800000008) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 04:37:18 executing program 0: r0 = dup(0xffffffffffffffff) sendto$unix(r0, &(0x7f0000000040)="23f38d5a369cba55eb6a58bf70cfb2c7455d48141c5ab4219a5cb2c499c705b4b6429896dfffb569b37b9dd20800b60e8e11a4b671a274a725f52b8fba18fe675b676f6028d3475eac0cebe9c03a430d6b0290f8e47efa8fccb5f966270d204f746f7204e577641f898a6e41bed232f94d1c23f8ca43eb719583e0bbfaf6c60934a6d1c447b0efb807ce095a7b61c3b1c9885a1845acc1f0376947e62008ec469045d1119feb3216844b08ce922aef6c722b2c84b42b0303dd9533a23d0f7633ea174724e033c147", 0xc8, 0x4000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) madvise(&(0x7f00008ed000/0x4000)=nil, 0x4000, 0x9) 04:37:18 executing program 4: r0 = socket(0x1, 0x4000000000000005, 0xffffffffffff970e) recvfrom(r0, &(0x7f0000000040)=""/141, 0x8d, 0x0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x709000) r1 = gettid() timer_create(0x4, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000200)) r2 = dup(r0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000002c0)={0x1, 0x0, 0x2080, {0xf001, 0x2004, 0x1}, [], "950abd63b4b522f039029085856a931b161dc0018864e1f5cb25ae727f5c58cabf80b58941222a810918431b3279c306cd37798b9ec99a1b36dc58af0eb1eb7159e78589a02b0caa9ae3c528c0fdb7702240448118f783737c37c1d91ecd484ea7efc1e492cc2e59170fee1c23b5d9cd1e7c01b42a9ee002022cc7178a93eef1ffd6ccc4004de56355ef21b777e9ecf62a9ff18413732f4666ee13e3d48daef28c82813a4df3cef1e4c442c76494a1daa93f9b4993fd93afd106203084f53d6bee6f44941bffd980fcf98a41099fc18028d1226980adb15b9fc0180cc1db16b721fa8006e207d4827563410fd53be83a97d835defcc23ac1464186aca2ba45d75c0bce8442c4905ff64a07f9ccfec572ab567ccff862a4c0bd437b51f3324ff3211a390a32035e3d3abd2ce28356b88096278fd52b3de085c2d6d65b62580d55d836814b906f8918c89ba2f3560b1f45c49bb550c3737f852322339bc0feabc2d6d608a6e9587222c00f428ea79d5a01d9311890f534b78bdb635b5cce3b25f59983eec61bdeab2521a7c01d5df555f12c6357adf355a0c5b370c34cb70b27d5cf0753d017d9edb5e3bdbb50eb4648f773eee24a58a491951345e7ce43cd9fffddc8d7d7715202f359e3e36de64389fad250ff010e684d20ccf1d6ff0fcf5f0290fe44268a3713f932f0d99e24d5f3f6b96becccb20471724ef4dc5b0f9e678627db83e0389784a7ce3471836819975c8f8dab9e57cf89f42d91a8a4da71da1bcb0d5346432737f2192592eaed415ccb72931c00108c7d918e07068b28c9a4151a21c8e1d3a6194cb71db3ec7d2c1f676e28f1f9546555da58cf36bcf97d41b54f81ff6a05e664b987b3a8b906531ac2df96d7900bca4d3e486e82c1ea00671a818ebb59b21fb6c1a31f7e8ed59241f22d120f8d8fb6f9e2027956cece4867afd8b1edf7d900ff3ba87998844a6e7c491613886bc89b4d6aeda597d91e3495efe635d2741687fea8a401620b841d9abe7cde7d02765154041f21fb6d01d53589d09e14ff4ef3cca20feea94ee8fbc58aa282835899ba7e79e746d3ae2cd3c77f783ba639c081f5563691bb41efb07910c5c32516ddcb4755aeee65f578a68485ccd322c79d304f85edb8d2b1449cf102ecee76d4f3f483d7b2313253c503f97ec5f39aff07e40ef3f5cf16dcc611033ced4f00c5a30d685f8d3eca56a7c2037b723cad34bde4c44b255fc802babfefec0bcc51f8cca9a621fc03049beb56473bdd19a00a93690787fb74510518a381fe411164e79692a57897797be1e7e2e81a29af5d9ffc19cec17ea46caddaee8d2b4a8e01b06b5885235ddc145982f63152201eba72c33bbd0d7a2f333f7778356e20ffc6c8a9ce12d90c005d3146a91234416ba598e0227775abdf3e586356c661ec284b0855efb87f13d33a615910d09591f5529a3286706236a296bff574ca3b6d5a85fede5116089b1e5fff0e8fb056d99d9a9668dfbea139915b4b3902a156d5cbd4302fea511c77c4b7e180a39f81013014010c06edb6c88cd05628b9f9b3e9b2bf4c0379575de8d12b267b2e972b18712f385d27b53694fec1336f3e1f93091ddb040346d8f2dccd04a37494dabafa5f129420049cbf478feef1dd4821b9cff919b19711fb968f02007acfbdb89b200af2388eafdf5d964b66f80d074a56421ba8b20551f42790b460662a1ba3dcad4af80796cf110dd605951bac9db811e9f7aec53c1179067cfcf11d3fdf93b7fddc5878e85f8fb5f98a8f33c3889c3f4650f8354ed90479ee02ae0ca0ca069f12d91f2408542a61f9ac5785d0d55ae6a81a611b357ff15d07cd7cb4f38a63b17140cf9b85ddfabb0afd2ae41ca84d2d3556a010e8bde3dec235ff5c206e8b72f4eacb2324fb8d610a2113a0dd462d41048489adbb8a7fd5fc9c3afc29f03871ee8fec80cef9cf8deea3121ad7f43f5cee3d880d03a47d6324f9f439daf4c3eb662ce5783553ccc6aaaf7e483f6596c6a870330688a3dc4ef179e2b4f5d7c6e6ac69f82096a604f066a6dec78bd2faa6eb20cf9545f60f6c9b61a10dbb1183bc92f04f6596c99d1a8659b71b261908afa9fe42c4b13df10e10dba18071f4d8952b8902422f4499757bce010ac0c0ddd4c861c3ee0b8ed8262f746c7616aca2c5efa4f0f44e1d9b821d5baf88fa2df6502d148a8b7d8e77883d0e05da7b02287a05638c2556f38d6b8c3a0cf32d29f983b03708796a98b606bc682e708e2fdc8f98daef80325f328fbd008d63b3e7d0779a40f22013dc7ba13545836db0aedbbf37571ebb342becb678935b2f70f42ca5cc748ecad1e5026bac4ea321a9874b18fa89d4f0ecc245b6f580452d3b7b4a99b73b5d1563866f448b6191ffebdee797f7bd713f0d765aa4dbc2d00b6dee8ab0996cb6fc9aed03ecc191cc59f522fe12171b582cbcfa2da36b5c94114bdaa48cda6df452ac6ebb7ae78afc2baf00d4020fbc9262c94dfc399effcc7fc892aea88f443b99542ada28787b48d0c7795cfedfba99519eeaeb6f72956c797d6002e5e19756f54643442c377ec2daa39e0aa39b251b215b8f9b4e8dd229b27734131172b429c837d0f90a677e584cd3c0e0f66008b0f0d9f94eaf914b9cf2f92a6f23e0910f3e5a37d821916c0d2e2db986e251b965fa753d3e744d8cca53430b9584d99872543b2589f484f4474fbad4a59de69c0f14a7cba00d68d633bfcaf7b5806f9a9abcaed0a008ebf5dd669cc6ed3f83835f8111f1e879669e016e451920eb1c806a2dca8c4b564015bef9fca560794085ec85f6697bf290d4aba34e347fed509f285cd1395e519d60966e050fc60bb9bfe62aa67935662966d33c9146c77c7243c21b06a59ceeb281b3c1568f795a128865d13f591a40cf5643d3a3c21f481eae4fdf47ad5787d014a2288b001c95d530fcedbfe35dcb85ef9ae8f3ac4eb4a2ddeacc5e4c9eac292f539aa650c93f9b74f6580dd04575d86988190db095a95823f7bb7eb1207d24fdc2b29f9bf05ec8d0855e5bf6b9f67d41f5085b240ab3f7dc44e288edc57c82526745566b859ae865bec848c891152e90e87578b35856d5ee157aac5ed25d759747c1eea7864d5a5e1bcd1be05f5e097958904d6c3e877f75a4725e8c921dbee90bb21c21d857423a3c9f58b743c3ea9b452fee284b2dedce4fbe6af8d4274033f5552b994d7a762590151e17f054d2e28dd2ea50a87d4717d44ab115bec0c7ba65be1b79debf39e483d091614a77b0828c20b0e13f12c7c885ffbe4245dcd19bb039f6a2d5366477db0cda7551c2e46425ee032f8df703ca83a95b7b5e4556821a4ae9c7ae5d703440b4195b863cabf6ae1b2d54f95983d60d4a83e8f9bdf1203a50926aae7463f27595a56a20921391774013a181d1f51fc6cca1a022f1753f1b99a766c8a5d912fda072243c534eac05df796a7cf74e112ef59841d2f99487ddbb3659aab85f86dfef73fa0e63a9128a41ec5dca66de6a9d7604f402f1ca16a7864ad34f9041e47019b09d01dfaa893d4ebeb1a6b1f0b58f77c5e1abc7b831eaff0394c631c9fde2f78a0b053dfe74f3c04ce019bc1411e13ee5be1fdc49af482a99d78f2c00a699e53b998f245ec929abd83b65fa3fa4114d5cdcb88a8c6f7c88c5105a7f98b44d7b693935d6b17d3eff6e758f26d68dd3ac4638c6ee227ad32bfdc93a47b6eaf4292391e187ab29beac90b04421a0334f4659b64a38bd5eb805aaa7af0be1e9a74da39e28c81434f4de12b1b2cd23b3d2bd43fcf2f1a6b6b9024130375602f20c85b0ff6ba8e00f280e45f51b6a83c4df5ced10d06582a247ac2f43a9176c456a3cc5deb7ab621ca0ea6ccb0203dc56415ea0937832616bc429dcdcbc933664c8f86cbeea7f32bf1f03aa5587466c86c7f9077619843211cf94b9434c8e17ae7dd74056f7da57a1a663b35cea9b1fdf778e565c687bd54635e267d22e741b30defd1f441c2855a1409696d75f0ea2a519f872ceb64d0e6a7c45ccb093a8357c436a049fa0a226d29f6ab1103e484ee772b8733d61750aa7d36a98bbef064b66a2f1c3368c99d1b04dbd7ba647825f8b34a53ee151a94110e8da256f6f7e052303e1a8a42dfabb4a7e68e6eaba77d466e8668fe97bfa63c56eea80e7e81644febfac3294bfd655cca4bc31cf273a20859c68000e44c22afb5911d6f3538b9fc379f9b8734d7b5b31be7501289d2dee7a90ed24bf9ba8cc9d6c32541b4065f551ebe7c8c1268bc3d8abd8cb5eaeb1b3fd306a998fb05fbf4d59c66973fb61586a263a1d43c9683138f048fe363b9a9f46a31619134f8b61355cddbc5e144921ffceea8964c0118d6087214032390ddeb9a6e3f12235e73ffd288b69e668a1f312beca9574ad61d74cb83af77262835dc5f3084cb06658d311d2a2ff7742074530dffdc3797b60e9fe67204ab27804172ca587afe313d5491adae6950ad24829f871703ecd06b0726abbc0158a6aaf23177160bd602eba6a37d244794169522b21e152a0c4c02c78a2c4dc600f0dbea417ab05e4f983e25129f7a2856c16dd2414afbff9e295efebe9a7e9c11b14f4bfef0ad3af02ab0ada1436691cb0347e1696c7338c4d87b0dcc07b7fe407e96418c70e2fe4bab2cc417ddaec0802b4b0a3c082e0690437906ee75b9ebc84de7e2638c7134beda94c0a78e4208ca74ea8df0a8269f4d0beb2a8011fc9a8be61f09f635d6f7e0197227d528964fefcc57071a7b113a2dba167a75e00d3e1f12cd427bb0cc640aef9e072a6e0727e43007a31db9c345f438abefa7a7585fee91262e7bdbf365a2cf450a71fe0cef378269434f629c4cccc0c69778ab071bef51975ed43f0e43ef51b141aefb08870a932a02b668276005e02558c09a28355b78ab73a9eda558f023acbd44c0c5c975015582546096f3c709255929ee67349ccef756959baeea04b8bd700d3c3cd59319a1a18c2d0b277ddfd6655587c1d53d62808e5fffc571d0748eb754aabfc67cc1e2d63d77340c3a4910899e6390cbc2f3dd5363f2983eeadc6628cc8f832910f107d419f317f869869047dc8ede54929d43c226ff7a62890788a50143474e4e92457418b4b2531a48d5bfa292a55c2acad796da2114ba3523b61b500256a46dc52853e4ef629090a172a1863efdfa9badea0c0d5f1b647afcfecf3565731e413333461b5a8489b1a3e81b02e4020002c86044ddbd91be602b34c66a0151a5826960d88ab0d8558ec56f261d329a8fad32c90651e6fce2667b7d6675faca1fb97bfcfe81a9b9ece0a6324c93b6c570e10552d85caceb8524f46dc6f6d857c7d1c14186edac9f8bca6fbfe42bb93d957c3e0bd318a238e12a697679e289df65fbd29532ac7519d1bde33c08e39270c0c748bc2450edd583a4786e2319188bf79d20d62e9e5ff2365849db24b33b2ba4da604cf6d4c72e08132a34419b3310a967da8ebd3e9a384f3b040554bcc94187bcd4e3c1e50ba30e0e471ced8d5163357775d5139ef837a4fdae3aa49119ee1ef255b78bd06624117b35721a3fc847b86f762bdaa423ee586066277ee132000f04503d298be25264a323cbcd43a933f1cc69cf7abffef7cf788695aaa6673f60b84fabec894724e3452ccc9984246a8ecfb4d5d6b0253cf12b126b150dce4aa8b0df9a68ca750f5cac35b0a44a9095fd035a48923af8f9a845fb8be661fdf43729791025b5ebe08eed7bb16edf34404828a630b24b40023ed14fb247041abf2ade97463f2041de0a056a9070d9a95be5c22cdb0", "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"}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet(r0, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000002340)={@empty, @multicast1}, &(0x7f0000002380)=0x8) r4 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x400140) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000240)) 04:37:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x301, 0x1) io_setup(0x8, &(0x7f0000000300)=0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000140), 0x2}]) 04:37:18 executing program 5: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000001000)={0x14, 0x0, 0x1, 0x24}, 0x14) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x210000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x6c, 0x32, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x2, 0x1}, [@action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x20, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xb, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 04:37:18 executing program 2: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)="72616d667300d971abaf50e501000000923627a5744cd7d1b96b8d4618e24e36049b5844a75fe6f6d4200b96b0749fdd17fc0d8c51663f69b78999dff00ad5d5f2a5940579d3189bfa01a1fe357cacc04a77d5ebfe32e5b27547a1e8d9069f53814969fc451b9223e747c9d972a8c2fb93bb23f6a8a43261fa33fcbfbe5071cf48002b25fabc803bd3e52cc10a1bce00c7e3bf430fb3422b8a3219edd913fce89d56b7f1df27a46c63aacd69c9a1184731ca152e528709dfe5f7cdd5f5a8784c82896cc9a067073488f4fd1d3ec0c3aff2685fcfd3e22bd62311fb2779727bf10fa24555", 0x0, &(0x7f00000003c0)="76626f786e6574313a706f7369785f61636c5f6163636573736c6f2f657468306e6f64657617296e6f6465764073656375726974793a73797374656d2c776c616e3100") poll(&(0x7f0000000400), 0x0, 0x400007f) rmdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x24) 04:37:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:19 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(r1, r1, r1) setuid(r1) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="350ee37280f0090d94f55ac778b3b2efdbc3796fcca7e095bc297dc34daf650feca2f6cef48dc18d6d462015c4f071c5969d8ce628c16976544d48f3c3f5e62a6335e339f6c12abd1a6edb03c58e1e46c08927a2d5ff2317217b2be72b2cb6a7375a4edf6c8322a0cb7b8af7c5dc73cca89f573615198183c7910724123494a0c5946e7224849324455abadc0c16095520163313", 0x94, 0x3f}, {&(0x7f0000000140)="6466164b45e057f56bfaa6d9397076656528c15b01a6242c2b1593dace578cf7732d0cd2218666379b5d5e371de35c8d", 0x30, 0xfffffffffffffffe}], 0x100080, &(0x7f0000000240)={[{@four_active_logs='active_logs=4'}, {@user_xattr='user_xattr'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@nolazytime='nolazytime'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@nouser_xattr='nouser_xattr'}, {@fsync_mode_posix='fsync_mode=posix'}, {@whint_mode_fs='whint_mode=fs-based'}, {@whint_mode_fs='whint_mode=fs-based'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@hash='hash'}]}) 04:37:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup3(r0, r1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) 04:37:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20140, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x19, 0x201, 0x0, 0x0, {0x1d, 0xd601}, [@nested={0x18, 0xb, [@typed={0x14, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x0) chroot(&(0x7f0000000180)='./file0\x00') 04:37:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:19 executing program 0: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000005c0)) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000600)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x301002, 0x0) r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x39e, 0x80000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000007c0)=""/4096) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) finit_module(r3, &(0x7f00000027c0)='/dev/loop#\x00', 0x0) 04:37:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="5a1606d3d72c7033", 0x8}], 0x1}, 0x8082) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f, 0x6}, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) 04:37:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x100, 0xfd50) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x8400, 0x22) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) close(r0) [ 247.287253] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 247.321236] syz-executor1 cpuset=syz1 mems_allowed=0 [ 247.326452] CPU: 0 PID: 8679 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 247.333730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.343083] Call Trace: [ 247.345702] dump_stack+0x1c4/0x2b4 [ 247.349342] ? dump_stack_print_info.cold.2+0x52/0x52 [ 247.354552] ? mark_held_locks+0x130/0x130 [ 247.358813] ? mark_held_locks+0x130/0x130 [ 247.363056] dump_header+0x27b/0xf72 [ 247.366795] ? debug_smp_processor_id+0x1c/0x20 [ 247.371492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.377041] ? pagefault_out_of_memory+0x197/0x197 [ 247.382002] ? debug_smp_processor_id+0x1c/0x20 [ 247.386729] ? perf_trace_lock_acquire+0x15b/0x800 [ 247.391674] ? perf_trace_lock_acquire+0x15b/0x800 [ 247.396631] ? perf_trace_lock+0x7a0/0x7a0 [ 247.400882] ? perf_trace_lock+0x7a0/0x7a0 [ 247.405134] ? debug_smp_processor_id+0x1c/0x20 [ 247.409818] ? perf_trace_lock_acquire+0x15b/0x800 [ 247.414751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.420307] ? perf_trace_lock+0x7a0/0x7a0 [ 247.424541] ? task_will_free_mem+0x239/0xb30 [ 247.429790] ? ___ratelimit+0x36f/0x655 [ 247.433782] ? lock_downgrade+0x900/0x900 [ 247.437948] ? trace_hardirqs_on+0xbd/0x310 [ 247.442275] ? kasan_check_read+0x11/0x20 [ 247.446433] ? ___ratelimit+0x36f/0x655 [ 247.450414] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 247.455914] ? trace_hardirqs_on+0x310/0x310 [ 247.460356] ? lock_downgrade+0x900/0x900 [ 247.464521] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 247.469627] ? ___ratelimit+0xaa/0x655 [ 247.473530] ? idr_get_free+0xec0/0xec0 [ 247.477504] ? kasan_check_write+0x14/0x20 [ 247.481741] ? do_raw_spin_lock+0xc1/0x200 [ 247.485980] oom_kill_process.cold.27+0x10/0x903 [ 247.490739] ? kasan_check_write+0x14/0x20 [ 247.494996] ? do_raw_spin_lock+0xc1/0x200 [ 247.499234] ? oom_evaluate_task+0x540/0x540 [ 247.503656] ? cgroup_procs_next+0x70/0x70 [ 247.507894] ? _raw_spin_unlock_irq+0x60/0x80 [ 247.512404] ? oom_badness+0xaa0/0xaa0 [ 247.516298] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 247.521055] ? mem_cgroup_iter_break+0x30/0x30 [ 247.525667] ? cgroup_file_notify+0x226/0x2f0 [ 247.530166] out_of_memory+0xa84/0x1430 [ 247.534154] ? kasan_check_read+0x11/0x20 [ 247.538300] ? oom_killer_disable+0x3a0/0x3a0 [ 247.542796] ? kasan_check_write+0x14/0x20 [ 247.547061] ? do_raw_spin_lock+0xc1/0x200 [ 247.551300] mem_cgroup_out_of_memory+0x15e/0x210 [ 247.556137] ? memcg_memory_event+0x40/0x40 [ 247.560467] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 247.565236] ? page_counter_try_charge+0x1c1/0x220 [ 247.570169] try_charge+0xc43/0x1690 [ 247.573884] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 247.578992] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 247.585062] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 247.589908] ? lock_downgrade+0x900/0x900 [ 247.594056] ? lock_release+0x970/0x970 [ 247.598037] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 247.603838] ? kasan_check_read+0x11/0x20 [ 247.607993] ? do_raw_spin_unlock+0xa7/0x2f0 [ 247.612439] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 247.617040] ? get_mem_cgroup_from_mm+0x206/0x440 [ 247.621896] ? mem_cgroup_can_attach+0x580/0x580 [ 247.626675] ? __might_sleep+0x95/0x190 [ 247.630669] mem_cgroup_try_charge+0x5ea/0xe10 [ 247.635263] ? lock_downgrade+0x900/0x900 [ 247.639421] ? mem_cgroup_protected+0xa60/0xa60 [ 247.644119] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 247.649151] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 247.654181] ? __handle_mm_fault+0x2c32/0x53e0 [ 247.658785] ? pmd_val+0x88/0x100 [ 247.662249] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 247.667818] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 247.672760] __handle_mm_fault+0x273a/0x53e0 [ 247.677197] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 247.682047] ? __dump_page.cold.2+0x179/0x179 [ 247.686577] ? follow_page_mask+0x18d/0x1fb0 [ 247.691012] ? handle_mm_fault+0x42a/0xc70 [ 247.695259] ? lock_downgrade+0x900/0x900 [ 247.699425] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 247.705232] ? retint_kernel+0x2d/0x2d [ 247.709132] ? __get_user_pages+0x806/0x1b30 [ 247.713551] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 247.719012] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 247.724560] ? check_preemption_disabled+0x48/0x200 [ 247.729591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.735198] handle_mm_fault+0x54f/0xc70 [ 247.739269] ? __handle_mm_fault+0x53e0/0x53e0 [ 247.743857] ? find_vma+0x34/0x190 [ 247.747409] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 247.752434] __get_user_pages+0x806/0x1b30 [ 247.756686] ? follow_page_mask+0x1fb0/0x1fb0 [ 247.761195] ? perf_trace_lock+0x7a0/0x7a0 [ 247.765437] ? lock_acquire+0x1ed/0x520 [ 247.769415] ? __mm_populate+0x31a/0x4d0 [ 247.773487] ? lock_release+0x970/0x970 [ 247.777469] ? arch_local_save_flags+0x40/0x40 [ 247.782058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.787618] populate_vma_page_range+0x2db/0x3d0 [ 247.792406] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 247.797341] ? find_vma+0x34/0x190 [ 247.800895] __mm_populate+0x286/0x4d0 [ 247.804789] ? populate_vma_page_range+0x3d0/0x3d0 [ 247.809721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.815268] ? ns_capable_common+0x13f/0x170 [ 247.819700] __x64_sys_mlockall+0x45b/0x630 [ 247.824052] ? __ia32_sys_munlock+0x160/0x160 [ 247.828547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 247.834114] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.839485] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 247.844962] do_syscall_64+0x1b9/0x820 [ 247.848849] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 247.854211] ? syscall_return_slowpath+0x5e0/0x5e0 [ 247.859139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.863998] ? trace_hardirqs_on_caller+0x310/0x310 [ 247.869019] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 247.874044] ? prepare_exit_to_usermode+0x291/0x3b0 [ 247.879081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.883947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.889140] RIP: 0033:0x457579 [ 247.892335] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.911247] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 247.918960] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 247.926228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 247.933515] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 247.940787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 247.948057] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 247.963330] Task in /syz1 killed as a result of limit of /syz1 [ 247.982654] memory: usage 204800kB, limit 204800kB, failcnt 162 [ 247.990435] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 248.006019] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 248.016321] Memory cgroup stats for /syz1: cache:0KB rss:197128KB rss_huge:178176KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:35492KB active_anon:2308KB inactive_file:8KB active_file:0KB unevictable:159412KB [ 248.038478] Memory cgroup out of memory: Kill process 8104 (syz-executor1) score 249 or sacrifice child [ 248.048416] Killed process 8104 (syz-executor1) total-vm:70472kB, anon-rss:18196kB, file-rss:32768kB, shmem-rss:0kB [ 248.325435] oom_reaper: reaped process 8677 (syz-executor1), now anon-rss:18076kB, file-rss:52248kB, shmem-rss:0kB 04:37:21 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000400)={0xe5, ""/229}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x0) syslog(0x9, &(0x7f0000000080)=""/191, 0xbf) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000500)=""/239, 0xef}]}, &(0x7f0000000180), &(0x7f0000000180)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0xfe9d) ioctl$SG_GET_NUM_WAITING(r1, 0x227c, &(0x7f0000000200)) 04:37:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write(r0, &(0x7f0000000040)="6cf87fec52330965268febf948cb82ffaabaaa3ae9c2e06089d2c26f90e7bf78d4fe14f2b4915a4a2dca", 0x2a) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0xf) 04:37:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="5a1606d3d72c7033", 0x8}], 0x1}, 0x8082) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f, 0x6}, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) 04:37:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x88, 0xff5d) recvmmsg(r2, &(0x7f0000008400)=[{{&(0x7f00000081c0)=@l2, 0x80, &(0x7f00000082c0), 0x0, &(0x7f0000008300)=""/231, 0xe7}}], 0x1, 0x0, &(0x7f0000008640)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000004c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="277a4c148d89", 'bridge_slave_0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r2}) 04:37:21 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2000000802, 0x2) connect$inet6(r1, &(0x7f000000cfe4), 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x36, '\x00'}], 0x18}}], 0x1, 0x0) 04:37:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 249.085808] sg_write: data in/out 1886284043/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 249.085808] program syz-executor4 not setting count and/or reply_len properly 04:37:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r7 = fcntl$getown(r0, 0x9) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x6, r2, r3, r4, r5, 0x80, 0x7}, 0x8001, 0x8, 0xa5c, 0x0, r6, r7, 0x3}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 249.127914] sg_write: data in/out 1886284043/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 249.127914] program syz-executor4 not setting count and/or reply_len properly [ 249.127988] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 249.157458] syz-executor1 cpuset=syz1 mems_allowed=0 [ 249.175316] CPU: 1 PID: 8720 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 249.182608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.191959] Call Trace: [ 249.194571] dump_stack+0x1c4/0x2b4 [ 249.198210] ? dump_stack_print_info.cold.2+0x52/0x52 [ 249.203416] ? mark_held_locks+0x130/0x130 [ 249.207667] ? mark_held_locks+0x130/0x130 [ 249.211937] dump_header+0x27b/0xf72 [ 249.215658] ? debug_smp_processor_id+0x1c/0x20 [ 249.220334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.225885] ? pagefault_out_of_memory+0x197/0x197 [ 249.230804] ? debug_smp_processor_id+0x1c/0x20 [ 249.235454] ? perf_trace_lock_acquire+0x15b/0x800 [ 249.240381] ? perf_trace_lock_acquire+0x15b/0x800 [ 249.245297] ? perf_trace_lock+0x7a0/0x7a0 [ 249.249509] ? perf_trace_lock+0x7a0/0x7a0 [ 249.253737] ? debug_smp_processor_id+0x1c/0x20 [ 249.258411] ? perf_trace_lock_acquire+0x15b/0x800 [ 249.263338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.268855] ? perf_trace_lock+0x7a0/0x7a0 [ 249.273069] ? task_will_free_mem+0x239/0xb30 [ 249.277577] ? ___ratelimit+0x36f/0x655 [ 249.281534] ? lock_downgrade+0x900/0x900 [ 249.285664] ? trace_hardirqs_on+0xbd/0x310 [ 249.289964] ? kasan_check_read+0x11/0x20 [ 249.294091] ? ___ratelimit+0x36f/0x655 [ 249.298056] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 249.303507] ? trace_hardirqs_on+0x310/0x310 [ 249.307893] ? lock_downgrade+0x900/0x900 [ 249.312025] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 249.317122] ? ___ratelimit+0xaa/0x655 [ 249.320993] ? idr_get_free+0xec0/0xec0 [ 249.324946] ? kasan_check_write+0x14/0x20 [ 249.329175] ? do_raw_spin_lock+0xc1/0x200 [ 249.333396] oom_kill_process.cold.27+0x10/0x903 [ 249.338150] ? kasan_check_write+0x14/0x20 [ 249.342375] ? do_raw_spin_lock+0xc1/0x200 [ 249.346623] ? oom_evaluate_task+0x540/0x540 [ 249.351056] ? cgroup_procs_next+0x70/0x70 [ 249.355307] ? _raw_spin_unlock_irq+0x60/0x80 [ 249.359782] ? oom_badness+0xaa0/0xaa0 [ 249.363655] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 249.368395] ? mem_cgroup_iter_break+0x30/0x30 [ 249.372965] ? cgroup_file_notify+0x226/0x2f0 [ 249.377441] out_of_memory+0xa84/0x1430 [ 249.381395] ? kasan_check_read+0x11/0x20 [ 249.385536] ? oom_killer_disable+0x3a0/0x3a0 [ 249.390029] ? kasan_check_write+0x14/0x20 [ 249.394256] ? do_raw_spin_lock+0xc1/0x200 [ 249.398475] mem_cgroup_out_of_memory+0x15e/0x210 [ 249.403294] ? memcg_memory_event+0x40/0x40 [ 249.407608] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 249.412373] ? page_counter_try_charge+0x1c1/0x220 [ 249.417293] try_charge+0xc43/0x1690 [ 249.420993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 249.426098] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 249.432143] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 249.436985] ? lock_downgrade+0x900/0x900 [ 249.441128] ? lock_release+0x970/0x970 [ 249.445098] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 249.450883] ? kasan_check_read+0x11/0x20 [ 249.455031] ? do_raw_spin_unlock+0xa7/0x2f0 [ 249.459450] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 249.464049] ? get_mem_cgroup_from_mm+0x206/0x440 [ 249.468881] ? mem_cgroup_can_attach+0x580/0x580 [ 249.473630] ? __might_sleep+0x95/0x190 [ 249.477597] mem_cgroup_try_charge+0x5ea/0xe10 [ 249.482180] ? lock_downgrade+0x900/0x900 [ 249.486338] ? mem_cgroup_protected+0xa60/0xa60 [ 249.491032] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 249.496036] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 249.501039] ? __handle_mm_fault+0x2c32/0x53e0 [ 249.505612] ? pmd_val+0x88/0x100 [ 249.509053] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 249.514594] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 249.519509] __handle_mm_fault+0x273a/0x53e0 [ 249.523908] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 249.528738] ? __dump_page.cold.2+0x179/0x179 [ 249.533222] ? follow_page_mask+0x18d/0x1fb0 [ 249.537657] ? handle_mm_fault+0x42a/0xc70 [ 249.541895] ? lock_downgrade+0x900/0x900 [ 249.546033] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 249.551818] ? __get_user_pages+0x806/0x1b30 [ 249.556215] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 249.561656] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 249.567181] ? check_preemption_disabled+0x48/0x200 [ 249.572199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.577730] handle_mm_fault+0x54f/0xc70 [ 249.581778] ? __handle_mm_fault+0x53e0/0x53e0 [ 249.586343] ? find_vma+0x34/0x190 [ 249.589901] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 249.594904] __get_user_pages+0x806/0x1b30 [ 249.599131] ? follow_page_mask+0x1fb0/0x1fb0 [ 249.603621] ? perf_trace_lock+0x7a0/0x7a0 [ 249.607860] ? lock_acquire+0x1ed/0x520 [ 249.611830] ? __mm_populate+0x31a/0x4d0 [ 249.615892] ? lock_release+0x970/0x970 [ 249.619854] ? arch_local_save_flags+0x40/0x40 [ 249.624421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.629953] populate_vma_page_range+0x2db/0x3d0 [ 249.634695] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 249.639610] ? find_vma+0x34/0x190 [ 249.643179] __mm_populate+0x286/0x4d0 [ 249.647066] ? populate_vma_page_range+0x3d0/0x3d0 [ 249.651979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.657498] ? ns_capable_common+0x13f/0x170 [ 249.661889] __x64_sys_mlockall+0x45b/0x630 [ 249.666210] ? __ia32_sys_munlock+0x160/0x160 [ 249.670704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.676230] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.681580] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 249.687016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 249.692561] do_syscall_64+0x1b9/0x820 [ 249.696430] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 249.701777] ? syscall_return_slowpath+0x5e0/0x5e0 [ 249.706689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.711537] ? trace_hardirqs_on_caller+0x310/0x310 [ 249.716550] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 249.721559] ? prepare_exit_to_usermode+0x291/0x3b0 [ 249.726560] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.731407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.736590] RIP: 0033:0x457579 [ 249.739765] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.758645] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 249.766350] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 249.773608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 04:37:21 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x6, 0x4, 0x4, 0x8}, 0x2c) r1 = getpgrp(0xffffffffffffffff) r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@ethernet, &(0x7f0000000200)=0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x100) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0xc3, 0x92b]) sched_setscheduler(r1, 0x5, &(0x7f0000000100)) write$P9_RLINK(r3, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x1}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) 04:37:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="0004c8076f00315f8571507034ef33b178577daecdd1c22ac1cab8276b1458889d24e13e5018e40f1ca8685effd5be9229d9411d59b3316e620e28241fc5dba568a8c16b8a86ce5839") getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x100) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r2) close(r1) 04:37:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004dfe1f00200020002000200020002000200020002000200000000000000000bb000000000000bb252f45000000000000000000000000000000000000000000000000000000000001040000000000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) [ 249.780857] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.788122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 249.795381] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 249.849471] isofs_fill_super: root inode is not a directory. Corrupted media? [ 249.857177] Task in /syz1 killed as a result of limit of /syz1 [ 249.863522] memory: usage 204740kB, limit 204800kB, failcnt 211 [ 249.881236] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 04:37:21 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/119, 0x77}], 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x5}, 0x3c, 0x0) llistxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001640)=""/222, 0xde) 04:37:21 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x921b527a62bfd8af) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0xfffffe1f, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x10440) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="0a239efb4c07eadadf7e3c2777b16f6b", 0x10) [ 249.894676] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 249.909325] Memory cgroup stats for /syz1: cache:0KB rss:196884KB rss_huge:176128KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:39460KB active_anon:2316KB inactive_file:0KB active_file:4KB unevictable:155192KB [ 249.933265] isofs_fill_super: root inode is not a directory. Corrupted media? 04:37:22 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) r1 = socket$kcm(0x29, 0x4000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d5c6070") socket$kcm(0x29, 0x5, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300}) 04:37:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000), 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x41) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0xffffffff00000001}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r0, r4}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x14}, 0x20000514}}, 0x58d1) [ 249.941497] Memory cgroup out of memory: Kill process 8666 (syz-executor1) score 249 or sacrifice child [ 249.954486] Killed process 8666 (syz-executor1) total-vm:70472kB, anon-rss:18196kB, file-rss:32768kB, shmem-rss:0kB [ 249.968745] oom_reaper: reaped process 8666 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:22 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0xb3d, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffeffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x8, &(0x7f00000003c0)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x4, r4, r5) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, r5) fcntl$setstatus(r1, 0x4, 0x40404) syz_emit_ethernet(0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaa35669b69aa78ac141400ac1423bb070200000e00907800000000000000000000000000000000ad7d705f1a47c5a59695793e1d86099877b8278d89e58489642631dd4d1fa0c72d46a54abf459b9e600508fba47dce89cf78b1be9968388500a88bf3975b22ef0e870d8a642fc0d2551fe6461d03d37d993545b74c05c875f5ab995b24237596205a45dc9bbf4ca0f3d3ef45ef13d6f3fa8c0b14976b5959566e5c5e1d557355b26c95131438268e91cf744285363c9d09e35d6f2b468ae95fcc0bf11d12"], &(0x7f0000000100)) fallocate(r0, 0x0, 0x100000, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000016, 0x8001, 0x10000001010) r7 = socket$inet6(0xa, 0x1200000000002, 0xffff) ioctl(r7, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x8}, 0x44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r10 = socket$inet6(0xa, 0x3, 0x2) ioctl(r10, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x4, 0x0, 0x10000, 0xde1}) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000000340)={0x8, r12, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000006c0)={0x2, r13, 0x3, 0x7}) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, &(0x7f0000000000)={0x3}) 04:37:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000100), 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) 04:37:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004fc0)=ANY=[@ANYBLOB="02132d01020000008916400000080000"], 0x10}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) epoll_pwait(r1, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0xa579, &(0x7f0000000200)={0xe28c}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021200001100000026bd700700009887000000ad6f10babc00790000000800120003000000000000000000000006003200030800220000000000000000ac010000000000000000000000000000ac14142c0000000000000000000000000400040005000000f8450e1d6e43071f000000000700003f00000000000000039d4d56910b000500000001"], 0x88}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000080)="866a059f9696bcb6b13d787110b61144d9131d81d3ce6f239e8d775d666d50c9dbe1") setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000240)={0xea13, 0x1, 0x3f, 0xffffffffffffff81}, 0x10) [ 250.163006] mmap: syz-executor0 (8780) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 04:37:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket(0xa, 0x803, 0x7) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000000)) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/4096, 0xfffffffffffffdaa, 0x0, &(0x7f0000005d80)=@un=@abs, 0x70c000) 04:37:22 executing program 2: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) msgget$private(0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback, @local}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r4 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r4, &(0x7f0000000040)='ns\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x1}) ioctl$int_in(r5, 0x0, &(0x7f0000000200)=0x1000) readv(r5, &(0x7f00000014c0)=[{&(0x7f0000003500)=""/4096, 0x1016}], 0x1) fchown(r1, r2, r3) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000d80)="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", 0x290}]) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) 04:37:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r1, 0x4e, "c1658ede88571a3e54f285b5680e19bd161d79253a738c09a8af18450d8c38693a275b449c2c977244149833d0b1154aa28e1b357665eaf2fd174d000f52398999e1a0563160207160d20e78b06a"}, &(0x7f0000000200)=0x56) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000300)={"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"}) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000080)=0x2) 04:37:22 executing program 4: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f00000002c0), &(0x7f0000000740), &(0x7f0000000540), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0xe0080, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000002c0)={0xcb0, 0x7fff, 0xfffffffffffffffd, 0x6f4, 0x5, 0x3, 0x3, 0x3356, 0x3, 0x3, 0x9, 0x6}) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00'}, &(0x7f0000000480)=0x44) syz_open_procfs$namespace(r1, &(0x7f0000000400)="6e732f75736560b59d0309fd1962cc6a1aebb761e512cfc8c7e70b306540263a1732f24708b39bf6ab81c5fc6a88ef315518b1d2c19a") r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) r6 = shmget$private(0x0, 0x4000, 0x281, &(0x7f000007f000/0x4000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000300)) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f00000005c0)=""/201) r7 = socket$inet6(0xa, 0x3, 0x3a) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400003, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @loopback}], 0xfffffffffffffcfe) ioctl$FIONREAD(r8, 0x541b, &(0x7f0000000300)) getsockname$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0xe) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000780)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7f, 0xbc6, 0x4, 0x9, 0x3f, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 04:37:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) accept(r0, &(0x7f0000000440)=@hci={0x1f, 0x0}, &(0x7f00000004c0)=0x80) uname(&(0x7f0000000180)=""/96) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@loopback, @in=@rand_addr}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast1}, &(0x7f0000000680)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @rand_addr}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={"626f6e645f736c6176655f300000fd02", {0x2, 0x0, @local, [0x0, 0x6000, 0x0, 0x200000000000000]}}) getpid() r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x541000) signalfd(0xffffffffffffffff, &(0x7f0000000140)={0x2}, 0x8) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f00000002c0)=""/81) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x9, 0x4, 0x4, 0xdd4, 0xfd, 0x1}}, 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000340)={@loopback, r3}, 0x14) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000000c0)) 04:37:22 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000280), 0x8) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x45, 0x94d, 0x8, "72b7f338ac66e3c8bb54de866b3ccf745afebae96b4c2c25a2d1442c19e6bd2f097c3a4a3911e456406f7be39a0aab88f8de49ce4a7a7089905fa3f6ed72474fc70fb2d9a9"}) r2 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}, &(0x7f00000003c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x6, 0x279d}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000b80), 0x8) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000180)) getpid() time(&(0x7f0000000080)) 04:37:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001840), 0x141ee7a00000355, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000200)={&(0x7f0000000140)=""/140, 0x8c}) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) [ 250.608676] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 250.636562] loop2: p1 start 3847852302 is beyond EOD, truncated [ 250.678236] loop2: p2 start 1882794599 is beyond EOD, truncated [ 250.693437] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 250.706951] loop2: p3 start 2559703610 is beyond EOD, truncated [ 250.720412] loop2: p4 start 3298061589 is beyond EOD, truncated [ 250.730978] syz-executor1 cpuset=syz1 mems_allowed=0 [ 250.736125] CPU: 0 PID: 8810 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 250.743398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.752774] Call Trace: [ 250.755379] dump_stack+0x1c4/0x2b4 [ 250.759050] ? dump_stack_print_info.cold.2+0x52/0x52 [ 250.764247] ? mark_held_locks+0x130/0x130 [ 250.768500] ? mark_held_locks+0x130/0x130 [ 250.772744] dump_header+0x27b/0xf72 [ 250.776461] ? debug_smp_processor_id+0x1c/0x20 [ 250.781181] ? check_preemption_disabled+0x48/0x200 [ 250.786203] ? pagefault_out_of_memory+0x197/0x197 [ 250.791137] ? debug_smp_processor_id+0x1c/0x20 [ 250.795812] ? perf_trace_lock+0x14d/0x7a0 [ 250.800063] ? perf_trace_lock_acquire+0x15b/0x800 [ 250.805034] ? perf_trace_lock_acquire+0x15b/0x800 [ 250.809973] ? zap_class+0x640/0x640 [ 250.813687] ? perf_trace_lock+0x7a0/0x7a0 [ 250.817949] ? debug_smp_processor_id+0x1c/0x20 [ 250.822713] ? perf_trace_lock+0x14d/0x7a0 [ 250.826958] ? perf_trace_lock_acquire+0x15b/0x800 [ 250.831917] ? zap_class+0x640/0x640 [ 250.835639] ? perf_trace_lock+0x7a0/0x7a0 [ 250.839889] ? task_will_free_mem+0x239/0xb30 [ 250.844395] ? zap_class+0x640/0x640 [ 250.848139] ? zap_class+0x640/0x640 [ 250.851877] ? ___ratelimit+0x36f/0x655 [ 250.855863] ? lock_downgrade+0x900/0x900 [ 250.860047] ? trace_hardirqs_on+0xbd/0x310 [ 250.864381] ? kasan_check_read+0x11/0x20 [ 250.868537] ? ___ratelimit+0x36f/0x655 [ 250.872527] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 250.878002] ? trace_hardirqs_on+0x310/0x310 [ 250.882427] ? lock_downgrade+0x900/0x900 [ 250.886588] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 250.891714] ? ___ratelimit+0xaa/0x655 [ 250.895678] ? idr_get_free+0xec0/0xec0 [ 250.899678] ? kasan_check_write+0x14/0x20 [ 250.903923] ? do_raw_spin_lock+0xc1/0x200 [ 250.908170] oom_kill_process.cold.27+0x10/0x903 [ 250.912934] ? kasan_check_write+0x14/0x20 [ 250.917182] ? do_raw_spin_lock+0xc1/0x200 [ 250.921434] ? oom_evaluate_task+0x540/0x540 [ 250.925859] ? cgroup_procs_next+0x70/0x70 [ 250.930107] ? _raw_spin_unlock_irq+0x60/0x80 [ 250.934609] ? oom_badness+0xaa0/0xaa0 [ 250.938510] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 250.943280] ? mem_cgroup_iter_break+0x30/0x30 [ 250.947888] ? cgroup_file_notify+0x226/0x2f0 [ 250.952402] out_of_memory+0xa84/0x1430 [ 250.956394] ? kasan_check_read+0x11/0x20 [ 250.960566] ? oom_killer_disable+0x3a0/0x3a0 [ 250.965064] ? kasan_check_write+0x14/0x20 [ 250.969304] ? do_raw_spin_lock+0xc1/0x200 [ 250.973556] mem_cgroup_out_of_memory+0x15e/0x210 [ 250.978420] ? memcg_memory_event+0x40/0x40 [ 250.982749] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 250.987523] ? page_counter_try_charge+0x1c1/0x220 [ 250.992478] try_charge+0xc43/0x1690 [ 250.996203] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 251.001329] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 251.007416] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 251.012266] ? lock_downgrade+0x900/0x900 [ 251.016421] ? lock_release+0x970/0x970 [ 251.020411] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 251.026212] ? kasan_check_read+0x11/0x20 [ 251.030380] ? do_raw_spin_unlock+0xa7/0x2f0 [ 251.034798] ? zap_class+0x640/0x640 [ 251.038544] ? get_mem_cgroup_from_mm+0x206/0x440 [ 251.043416] ? mem_cgroup_can_attach+0x580/0x580 [ 251.048191] ? __might_sleep+0x95/0x190 [ 251.052180] mem_cgroup_try_charge+0x5ea/0xe10 [ 251.056766] ? lock_downgrade+0x900/0x900 [ 251.060951] ? mem_cgroup_protected+0xa60/0xa60 [ 251.065664] ? __handle_mm_fault+0x2c32/0x53e0 [ 251.070276] ? pmd_val+0x88/0x100 [ 251.073740] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 251.079298] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 251.084239] __handle_mm_fault+0x273a/0x53e0 [ 251.088660] ? zap_class+0x640/0x640 [ 251.092397] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 251.097251] ? __dump_page.cold.2+0x179/0x179 [ 251.101775] ? zap_class+0x640/0x640 [ 251.105501] ? handle_mm_fault+0x42a/0xc70 [ 251.109741] ? lock_downgrade+0x900/0x900 [ 251.113931] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 251.119734] ? retint_kernel+0x2d/0x2d [ 251.123630] ? __get_user_pages+0x806/0x1b30 [ 251.128050] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 251.133528] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.139073] ? check_preemption_disabled+0x48/0x200 [ 251.144106] handle_mm_fault+0x54f/0xc70 [ 251.148175] ? __handle_mm_fault+0x53e0/0x53e0 [ 251.152763] ? find_vma+0x34/0x190 [ 251.156309] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 251.161336] __get_user_pages+0x806/0x1b30 [ 251.165595] ? follow_page_mask+0x1fb0/0x1fb0 [ 251.170116] ? perf_trace_lock+0x7a0/0x7a0 [ 251.174364] ? lock_acquire+0x1ed/0x520 [ 251.178355] ? __mm_populate+0x31a/0x4d0 [ 251.182437] ? lock_release+0x970/0x970 [ 251.186414] ? arch_local_save_flags+0x40/0x40 [ 251.190999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.196557] populate_vma_page_range+0x2db/0x3d0 [ 251.201320] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 251.206251] ? find_vma+0x34/0x190 [ 251.209796] __mm_populate+0x286/0x4d0 [ 251.213728] ? populate_vma_page_range+0x3d0/0x3d0 [ 251.218689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.224230] ? ns_capable_common+0x13f/0x170 [ 251.228652] __x64_sys_mlockall+0x45b/0x630 [ 251.232989] ? __ia32_sys_munlock+0x160/0x160 [ 251.237515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.243107] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.248477] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 251.253929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.259713] do_syscall_64+0x1b9/0x820 [ 251.263619] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 251.268990] ? syscall_return_slowpath+0x5e0/0x5e0 [ 251.273921] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.278776] ? trace_hardirqs_on_caller+0x310/0x310 [ 251.283812] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 251.288845] ? prepare_exit_to_usermode+0x291/0x3b0 [ 251.293891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.298760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.303948] RIP: 0033:0x457579 [ 251.307158] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.326083] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 251.333798] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 251.341067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 251.348338] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 251.355618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 251.362894] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 251.391016] loop2: p5 start 2435654491 is beyond EOD, truncated [ 251.415710] loop2: p6 start 1868853166 is beyond EOD, truncated [ 251.430812] loop2: p7 start 883325361 is beyond EOD, truncated [ 251.445981] Task in /syz1 killed as a result of limit of /syz1 [ 251.452807] memory: usage 204800kB, limit 204800kB, failcnt 257 [ 251.459263] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 251.466380] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 251.472961] Memory cgroup stats for /syz1: cache:0KB rss:196712KB rss_huge:174080KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:27052KB active_anon:2316KB inactive_file:0KB active_file:0KB unevictable:167492KB 04:37:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"7665740000000000000000000300", 0x43732e5398416f1b}) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7fffffff, 0x10000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={r4, 0xfa1, 0x30, 0x4, 0x7}, &(0x7f0000000280)=0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 04:37:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x4, 0x4, 0xfffffffffffffffd}, 0x2cd) socket$pppoe(0x18, 0x1, 0x0) [ 251.480600] loop2: p8 start 2186813941 is beyond EOD, [ 251.495203] Memory cgroup out of memory: Kill process 7530 (syz-executor1) score 248 or sacrifice child [ 251.510162] Killed process 7530 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:37:23 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000001c0)={[{0x2, 0xaa18, 0x5, 0x3f, 0x8, 0x700, 0x1, 0x1, 0x8, 0x8000, 0x20, 0x1, 0x3b}, {0x94, 0x2, 0x1, 0xa80, 0x3, 0x67, 0x7, 0x6, 0x0, 0x9, 0x1ff, 0xfffffffffffff7c2}, {0x3, 0x7, 0x20, 0xe1, 0xc8, 0x1, 0x80000000, 0x6, 0x2, 0x81, 0x3, 0x5, 0x3}], 0x80000000}) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x2, {0x8, 0x2, "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", 0x7e, 0xffffffff, 0x5, 0x2, 0x78b, 0x101, 0x400080, 0x1}, r2}}, 0x128) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000700)=0x20, 0x4) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000680)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000005c0)={{0x9}, "706f72743000000000000000000e00", 0x0, 0x50, 0x6, 0x0, 0x0, 0x1, 0x101}) syz_open_dev$sndpcmp(&(0x7f00000006c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x8000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)) r4 = getpgrp(0x0) getpgrp(r4) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000540)={{0x2, 0x4e24, @rand_addr=0x300000000}, {0x306}, 0xa, {0x2, 0x4e22, @broadcast}, 'veth0_to_bridge\x00'}) munlockall() memfd_create(&(0x7f00000000c0)=',%\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x800) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000480)={0xfffffffffffffff8, {{0x2, 0x4e24, @broadcast}}}, 0x88) 04:37:23 executing program 3: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0}) rt_sigtimedwait(&(0x7f0000000100)={0x7fff}, 0x0, &(0x7f0000000180)={r1}, 0x8) clock_nanosleep(0x5, 0x1, &(0x7f0000000080), &(0x7f0000000200)) clock_nanosleep(0xb, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000000)) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) [ 251.568568] truncated [ 251.571105] loop2: p9 start 2413439456 is beyond EOD, truncated [ 251.618393] loop2: p10 start 2929461042 is beyond EOD, truncated [ 251.633352] loop2: p11 start 3727832944 is beyond EOD, truncated [ 251.643323] loop2: p12 start 2916779309 is beyond EOD, truncated [ 251.665175] QAT: Invalid ioctl [ 251.752566] IPVS: ftp: loaded support on port[0] = 21 04:37:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:24 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x111000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000800)={[{@commit={'commit'}}]}) 04:37:24 executing program 3: r0 = socket(0x1e, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x9c, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) close(0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @dev={[], 0x1d}}, 0x10) 04:37:24 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000001c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f0000000100)={0x10, 0x5}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe80000000e9270000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00000000"], 0x13c}}, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x58e6) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100000001) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x1f, @dev={0xfe, 0x80, [], 0x10}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x9, 0x30, 0x401, 0x3}, &(0x7f0000000140)=0x18) 04:37:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000440)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/109, 0x6d}], 0x3, &(0x7f0000000380)=""/169, 0xa9, 0xffff}, 0x8000}], 0x1, 0x40002101, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000540)=0x8) r1 = syz_open_dev$vcsa(&(0x7f0000001100)='/dev/vcsa#\x00', 0x0, 0x109000) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000600)={0x8}) fcntl$setstatus(r1, 0x4, 0x42004) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000001140)={{&(0x7f0000399000/0x1000)=nil, 0x1000}, 0x1}) r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000500)={0x1, r2}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = userfaultfd(0x4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000840)={0xc, 0x8, 0xfa00, {&(0x7f00000006c0)}}, 0x10) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x332}], 0x352, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x400, 0x0) 04:37:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f00000000c0)='teql0\x00', 0x8603a0361321078f) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e22, @broadcast}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x20, 0x401, 0x2, 0x7fffffff, 0x7fffffff, 0x400, 0xffffffff, 0x3, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x100000001}, 0xfffffffffffffe21) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x126, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, &(0x7f0000000140)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="f800000016001d0300000000000000000000000000000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='veth0\x00') 04:37:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="64697361622c655fd6e3617273653d7965732c757466382c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB=',seclabel,\x00']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="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") [ 252.340137] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" [ 252.483555] QAT: Invalid ioctl [ 252.485366] ntfs: (device loop3): parse_options(): Unrecognized mount option disab. [ 252.505780] ntfs: (device loop3): parse_options(): Unrecognized mount option e_Öãarse. 04:37:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x127000, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x1000}) [ 252.515357] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 252.535893] ntfs: (device loop3): parse_options(): Unrecognized mount option fowner<00000000000000000000. [ 252.546740] ntfs: (device loop3): parse_options(): Unrecognized mount option seclabel. [ 252.555308] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 252.586238] QAT: Invalid ioctl [ 252.622685] IPVS: ftp: loaded support on port[0] = 21 [ 252.652245] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 252.716756] QAT: Invalid ioctl 04:37:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x6000, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/106) r1 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x0, 0x0, 0x2, 0x1}, 0x2c) close(r1) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 252.762622] syz-executor1 cpuset= [ 252.777183] syz1 mems_allowed=0 [ 252.780643] CPU: 0 PID: 8873 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 252.787933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.797297] Call Trace: [ 252.797322] dump_stack+0x1c4/0x2b4 [ 252.797344] ? dump_stack_print_info.cold.2+0x52/0x52 [ 252.803553] ? mark_held_locks+0x130/0x130 [ 252.803568] ? mark_held_locks+0x130/0x130 [ 252.803586] dump_header+0x27b/0xf72 [ 252.820947] ? debug_smp_processor_id+0x1c/0x20 [ 252.825631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.831190] ? pagefault_out_of_memory+0x197/0x197 [ 252.836134] ? debug_smp_processor_id+0x1c/0x20 [ 252.840824] ? perf_trace_lock_acquire+0x15b/0x800 [ 252.845780] ? perf_trace_lock_acquire+0x15b/0x800 [ 252.850731] ? perf_trace_lock+0x7a0/0x7a0 [ 252.854974] ? perf_trace_lock+0x7a0/0x7a0 [ 252.859237] ? debug_smp_processor_id+0x1c/0x20 [ 252.863915] ? perf_trace_lock_acquire+0x15b/0x800 [ 252.868858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.874421] ? perf_trace_lock+0x7a0/0x7a0 [ 252.878685] ? task_will_free_mem+0x239/0xb30 [ 252.878713] ? ___ratelimit+0x36f/0x655 [ 252.878729] ? lock_downgrade+0x900/0x900 [ 252.878750] ? trace_hardirqs_on+0xbd/0x310 [ 252.878763] ? kasan_check_read+0x11/0x20 [ 252.878778] ? ___ratelimit+0x36f/0x655 [ 252.878794] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 252.878810] ? trace_hardirqs_on+0x310/0x310 [ 252.878825] ? lock_downgrade+0x900/0x900 [ 252.878846] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 252.878861] ? ___ratelimit+0xaa/0x655 [ 252.878878] ? idr_get_free+0xec0/0xec0 [ 252.878892] ? kasan_check_write+0x14/0x20 [ 252.878908] ? do_raw_spin_lock+0xc1/0x200 [ 252.878928] oom_kill_process.cold.27+0x10/0x903 [ 252.878944] ? kasan_check_write+0x14/0x20 [ 252.878960] ? do_raw_spin_lock+0xc1/0x200 [ 252.878980] ? oom_evaluate_task+0x540/0x540 [ 252.878999] ? cgroup_procs_next+0x70/0x70 04:37:25 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x920, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x841) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8927, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures}) [ 252.879016] ? _raw_spin_unlock_irq+0x60/0x80 [ 252.879031] ? oom_badness+0xaa0/0xaa0 [ 252.879049] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 252.879066] ? mem_cgroup_iter_break+0x30/0x30 [ 252.879108] ? cgroup_file_notify+0x226/0x2f0 [ 252.879139] out_of_memory+0xa84/0x1430 [ 252.879153] ? kasan_check_read+0x11/0x20 [ 252.879169] ? oom_killer_disable+0x3a0/0x3a0 [ 252.879182] ? kasan_check_write+0x14/0x20 [ 252.879197] ? do_raw_spin_lock+0xc1/0x200 [ 252.879219] mem_cgroup_out_of_memory+0x15e/0x210 [ 252.879233] ? memcg_memory_event+0x40/0x40 [ 252.879247] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 252.879268] ? page_counter_try_charge+0x1c1/0x220 [ 252.879284] try_charge+0xc43/0x1690 [ 252.879302] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.879323] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 252.879336] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 252.879351] ? lock_downgrade+0x900/0x900 [ 252.879366] ? lock_release+0x970/0x970 [ 252.879399] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 252.996446] ? kasan_check_read+0x11/0x20 [ 252.996464] ? do_raw_spin_unlock+0xa7/0x2f0 [ 252.996499] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 253.009796] ? get_mem_cgroup_from_mm+0x206/0x440 [ 253.009813] ? mem_cgroup_can_attach+0x580/0x580 [ 253.009838] ? __might_sleep+0x95/0x190 [ 253.009857] mem_cgroup_try_charge+0x5ea/0xe10 [ 253.088670] ? lock_downgrade+0x900/0x900 [ 253.088690] ? mem_cgroup_protected+0xa60/0xa60 [ 253.088709] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 253.102549] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 253.107590] ? __handle_mm_fault+0x2c32/0x53e0 [ 253.112192] ? pmd_val+0x88/0x100 [ 253.115670] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 253.121227] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 253.126178] __handle_mm_fault+0x273a/0x53e0 [ 253.130601] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 253.135453] ? __dump_page.cold.2+0x179/0x179 [ 253.139995] ? follow_page_mask+0x18d/0x1fb0 [ 253.144430] ? handle_mm_fault+0x42a/0xc70 [ 253.148677] ? lock_downgrade+0x900/0x900 [ 253.152838] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 253.158652] ? __get_user_pages+0x806/0x1b30 [ 253.163072] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 253.168534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.168553] ? check_preemption_disabled+0x48/0x200 [ 253.168572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.184686] handle_mm_fault+0x54f/0xc70 [ 253.188761] ? __handle_mm_fault+0x53e0/0x53e0 [ 253.193355] __get_user_pages+0x806/0x1b30 [ 253.197617] ? follow_page_mask+0x1fb0/0x1fb0 [ 253.202132] ? perf_trace_lock+0x7a0/0x7a0 [ 253.206393] ? lock_acquire+0x1ed/0x520 [ 253.210369] ? __mm_populate+0x31a/0x4d0 [ 253.214487] ? lock_release+0x970/0x970 [ 253.218470] ? arch_local_save_flags+0x40/0x40 [ 253.223073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.228628] populate_vma_page_range+0x2db/0x3d0 [ 253.233402] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 253.238341] ? find_vma+0x34/0x190 [ 253.241898] __mm_populate+0x286/0x4d0 [ 253.245798] ? populate_vma_page_range+0x3d0/0x3d0 [ 253.250740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.256278] ? ns_capable_common+0x13f/0x170 [ 253.260927] __x64_sys_mlockall+0x45b/0x630 [ 253.265266] ? __ia32_sys_munlock+0x160/0x160 [ 253.269764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.275300] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.280673] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 253.286128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.291682] do_syscall_64+0x1b9/0x820 [ 253.295589] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 253.300969] ? syscall_return_slowpath+0x5e0/0x5e0 [ 253.305901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.310752] ? trace_hardirqs_on_caller+0x310/0x310 [ 253.315802] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 253.320833] ? prepare_exit_to_usermode+0x291/0x3b0 [ 253.325871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.330736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.335928] RIP: 0033:0x457579 [ 253.339124] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:37:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6200e3ffffff004b6d30b30000000138", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x701443, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7fff, 0x30, 0x5, 0x40e}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xe0, 0x90}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={r4, 0x0, 0x7fff, 0x100, 0x5, 0x2, 0x1ff, 0x20, {r5, @in6={{0xa, 0x4e23, 0xfffffffffffffffa, @remote, 0xcf9b}}, 0xa8, 0x3, 0x6, 0x1ff, 0x3}}, &(0x7f0000000340)=0xb0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0xa3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="03003e00000000000800010004000000"], 0x1}}, 0x0) close(r0) memfd_create(&(0x7f0000000380)="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", 0x0) 04:37:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = shmget(0x2, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) memfd_create(&(0x7f00000000c0)='vmnet1keyringnodev/(\x00', 0x1) shmctl$SHM_UNLOCK(r1, 0xc) r2 = dup3(r0, r0, 0x80000) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)=0x1) fadvise64(r0, 0x0, 0x0, 0x2) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000100)={'team0\x00', 0x143}) [ 253.358024] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 253.365738] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 253.373004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 253.380271] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 253.387539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 253.394804] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 253.437112] Task in /syz1 killed as a result of limit of /syz1 [ 253.476765] memory: usage 204800kB, limit 204800kB, failcnt 282 [ 253.525092] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 253.537824] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 253.571461] Memory cgroup stats for /syz1: cache:0KB rss:196564KB rss_huge:169984KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:41392KB active_anon:2312KB inactive_file:0KB active_file:0KB unevictable:152960KB [ 253.595748] Memory cgroup out of memory: Kill process 7593 (syz-executor1) score 248 or sacrifice child [ 253.605546] Killed process 7593 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 253.623356] oom_reaper: reaped process 7593 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffffffff1a4d, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) r0 = semget$private(0x0, 0x3, 0x60) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000000)=0x1) r1 = syz_init_net_socket$llc(0x1a, 0x80200000000002, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) times(&(0x7f00000000c0)) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, &(0x7f000000c2c0)=[{&(0x7f000000bf00)=""/139, 0x8b}, {&(0x7f000000bfc0)=""/220, 0xdc}, {&(0x7f000000c0c0)=""/93, 0x5d}, {&(0x7f000000c140)=""/193, 0xc1}, {&(0x7f000000c240)=""/115, 0x73}], 0x5, &(0x7f000000c340)=""/106, 0x6a, 0xffffffff}, 0x6}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f000000c500)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x5, 0x0, 0x0, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x5a}], 0x1, &(0x7f000000c740)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c800)=""/210, 0xd2}, {&(0x7f000000c900)=""/92, 0x5c}, {&(0x7f000000c980)=""/82, 0x52}], 0x3, &(0x7f000000ca40)=""/40, 0x28}, 0x6}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f000000cd00)=[{&(0x7f000000cb00)=""/255, 0xff}, {&(0x7f000000cc00)}, {&(0x7f000000cc40)=""/180, 0xb4}], 0x3, &(0x7f000000cd40)=""/5, 0x5, 0x2}, 0xffffffff}], 0x5, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) 04:37:25 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000080)={0x3, 0x6}) ptrace(0x4207, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000040)) 04:37:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x9, 0x20c, &(0x7f00000002c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x100, 0x1, 0x2, 0x4, 0x7, 0x7ff}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0x28}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0x9, 0x2bd, 0x300000000000000, 0x6, 0x40}) 04:37:25 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000000c0)="21e9463356e97a4442b42c1bcd64f723f7d4be4eff60b39b016e960b056cc5ba9583eb2835207b97ac7b013eb14318716afe52108b7c7771b90c8fbaca2e237840dc0fe7f1b29bcecd1ec0b826a92cee740f162adf82e63a9fbb4667b9443d5567ab0c", 0x8560afd75bc3fbc3) r2 = epoll_create(0xe29f) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 04:37:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6200e3ffffff004b6d30b30000000138", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x701443, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7fff, 0x30, 0x5, 0x40e}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xe0, 0x90}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={r4, 0x0, 0x7fff, 0x100, 0x5, 0x2, 0x1ff, 0x20, {r5, @in6={{0xa, 0x4e23, 0xfffffffffffffffa, @remote, 0xcf9b}}, 0xa8, 0x3, 0x6, 0x1ff, 0x3}}, &(0x7f0000000340)=0xb0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0xa3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="03003e00000000000800010004000000"], 0x1}}, 0x0) close(r0) memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) 04:37:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffffffff1a4d, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) r0 = semget$private(0x0, 0x3, 0x60) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000000)=0x1) r1 = syz_init_net_socket$llc(0x1a, 0x80200000000002, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) times(&(0x7f00000000c0)) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, &(0x7f000000c2c0)=[{&(0x7f000000bf00)=""/139, 0x8b}, {&(0x7f000000bfc0)=""/220, 0xdc}, {&(0x7f000000c0c0)=""/93, 0x5d}, {&(0x7f000000c140)=""/193, 0xc1}, {&(0x7f000000c240)=""/115, 0x73}], 0x5, &(0x7f000000c340)=""/106, 0x6a, 0xffffffff}, 0x6}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f000000c500)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x5, 0x0, 0x0, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x5a}], 0x1, &(0x7f000000c740)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c800)=""/210, 0xd2}, {&(0x7f000000c900)=""/92, 0x5c}, {&(0x7f000000c980)=""/82, 0x52}], 0x3, &(0x7f000000ca40)=""/40, 0x28}, 0x6}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f000000cd00)=[{&(0x7f000000cb00)=""/255, 0xff}, {&(0x7f000000cc00)}, {&(0x7f000000cc40)=""/180, 0xb4}], 0x3, &(0x7f000000cd40)=""/5, 0x5, 0x2}, 0xffffffff}], 0x5, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) 04:37:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x37, 0x3, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/166, 0xa6}]}, &(0x7f00000001c0)="faab608c64d5e166a952f3aed64ee609f1c53052a940a3f98b0dcbe3ce436b06d7fa25fac73b3d35d4c005d2878f891925a34be3f90d7e", &(0x7f0000000200)=""/236, 0x401, 0x2, 0xffffffffffffffff, &(0x7f0000000300)}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xffffffffffffffda, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010076c5bd76fe1727000000000008000008000000080003000000000004000000fb"], 0x28}}, 0x0) 04:37:26 executing program 2: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000001c0)={{0x1, 0xfffffffffffffffc}, 0x20}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0x6, 0x80ffff}) openat$cgroup_int(r4, &(0x7f0000000240)='cgroup.max.depth\x00', 0x2, 0x0) 04:37:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000280)={0x4, 0x7a, 0x6, 0xd3, &(0x7f0000000100)=""/211, 0x2d, &(0x7f0000000200)=""/45, 0x0, &(0x7f0000000240)}) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000010018000000000008001000000003f0ff000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000003050000000000ff0000000000000000eb8c2a100a3af390901ac19afc6013e8981cceb37ca6f5f6c59a7232f2f71a8fc37c65173230ad9e2a13ebfe1b8b520fe8a4a70cbd022bca44eb93fe2a760123e61480e007"], 0xa8}}, 0x0) [ 254.164156] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 04:37:26 executing program 3: r0 = socket$inet(0x2, 0x801, 0x40) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fchdir(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r3, &(0x7f0000000180)='limits\x00') r4 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x400, 0x101002) sendfile(r0, r4, &(0x7f0000000240), 0xa00004000000002) 04:37:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6200e3ffffff004b6d30b30000000138", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x701443, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7fff, 0x30, 0x5, 0x40e}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xe0, 0x90}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={r4, 0x0, 0x7fff, 0x100, 0x5, 0x2, 0x1ff, 0x20, {r5, @in6={{0xa, 0x4e23, 0xfffffffffffffffa, @remote, 0xcf9b}}, 0xa8, 0x3, 0x6, 0x1ff, 0x3}}, &(0x7f0000000340)=0xb0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0xa3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="03003e00000000000800010004000000"], 0x1}}, 0x0) close(r0) memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) [ 254.244188] syz-executor1 cpuset=syz1 mems_allowed=0 [ 254.277257] CPU: 1 PID: 8942 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 254.284580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.293933] Call Trace: [ 254.296528] dump_stack+0x1c4/0x2b4 [ 254.300175] ? dump_stack_print_info.cold.2+0x52/0x52 [ 254.305389] ? mark_held_locks+0x130/0x130 [ 254.309633] ? mark_held_locks+0x130/0x130 [ 254.313885] dump_header+0x27b/0xf72 [ 254.317639] ? debug_smp_processor_id+0x1c/0x20 [ 254.322314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.327890] ? pagefault_out_of_memory+0x197/0x197 [ 254.332839] ? debug_smp_processor_id+0x1c/0x20 [ 254.337514] ? perf_trace_lock_acquire+0x15b/0x800 [ 254.342457] ? perf_trace_lock_acquire+0x15b/0x800 [ 254.347404] ? __switch_to_asm+0x40/0x70 [ 254.351497] ? perf_trace_lock+0x7a0/0x7a0 [ 254.355750] ? perf_trace_lock+0x7a0/0x7a0 [ 254.360003] ? debug_smp_processor_id+0x1c/0x20 [ 254.364693] ? perf_trace_lock_acquire+0x15b/0x800 [ 254.369651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.375202] ? perf_trace_lock+0x7a0/0x7a0 [ 254.379449] ? task_will_free_mem+0x239/0xb30 [ 254.379475] ? ___ratelimit+0x36f/0x655 [ 254.379491] ? lock_downgrade+0x900/0x900 [ 254.379510] ? trace_hardirqs_on+0xbd/0x310 [ 254.379523] ? kasan_check_read+0x11/0x20 [ 254.379538] ? ___ratelimit+0x36f/0x655 [ 254.379553] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 254.379569] ? trace_hardirqs_on+0x310/0x310 [ 254.379589] ? lock_downgrade+0x900/0x900 [ 254.397026] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 254.397043] ? ___ratelimit+0xaa/0x655 [ 254.397076] ? idr_get_free+0xec0/0xec0 [ 254.397091] ? kasan_check_write+0x14/0x20 [ 254.397108] ? do_raw_spin_lock+0xc1/0x200 [ 254.397130] oom_kill_process.cold.27+0x10/0x903 [ 254.405234] ? kasan_check_write+0x14/0x20 [ 254.405250] ? do_raw_spin_lock+0xc1/0x200 [ 254.405271] ? oom_evaluate_task+0x540/0x540 [ 254.405290] ? cgroup_procs_next+0x70/0x70 [ 254.405309] ? _raw_spin_unlock_irq+0x60/0x80 [ 254.405325] ? oom_badness+0xaa0/0xaa0 [ 254.415206] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 04:37:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0xaaaaaaaaaaaab18, 0x0, &(0x7f00000001c0), 0x226) pipe(&(0x7f0000000340)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) [ 254.415223] ? mem_cgroup_iter_break+0x30/0x30 [ 254.415249] ? cgroup_file_notify+0x226/0x2f0 [ 254.424498] out_of_memory+0xa84/0x1430 [ 254.424517] ? kasan_check_read+0x11/0x20 [ 254.424534] ? oom_killer_disable+0x3a0/0x3a0 [ 254.424549] ? kasan_check_write+0x14/0x20 [ 254.424567] ? do_raw_spin_lock+0xc1/0x200 [ 254.424590] mem_cgroup_out_of_memory+0x15e/0x210 [ 254.432450] ? memcg_memory_event+0x40/0x40 [ 254.432467] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 254.432489] ? page_counter_try_charge+0x1c1/0x220 [ 254.432507] try_charge+0xc43/0x1690 [ 254.432526] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 254.432546] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 254.449983] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 254.450002] ? lock_downgrade+0x900/0x900 [ 254.450017] ? lock_release+0x970/0x970 [ 254.450036] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 254.450050] ? kasan_check_read+0x11/0x20 [ 254.450066] ? do_raw_spin_unlock+0xa7/0x2f0 [ 254.450083] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 254.450107] ? get_mem_cgroup_from_mm+0x206/0x440 [ 254.450128] ? mem_cgroup_can_attach+0x580/0x580 [ 254.458797] ? __might_sleep+0x95/0x190 [ 254.458817] mem_cgroup_try_charge+0x5ea/0xe10 [ 254.458832] ? lock_downgrade+0x900/0x900 [ 254.458850] ? mem_cgroup_protected+0xa60/0xa60 [ 254.458869] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 254.458888] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 254.458910] ? __handle_mm_fault+0x2c32/0x53e0 [ 254.458932] ? pmd_val+0x88/0x100 [ 254.467663] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 254.467686] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 254.467704] __handle_mm_fault+0x273a/0x53e0 [ 254.467725] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 254.476373] ? __dump_page.cold.2+0x179/0x179 [ 254.476404] ? __schedule+0x874/0x1ed0 [ 254.476424] ? follow_page_mask+0x18d/0x1fb0 [ 254.476455] ? handle_mm_fault+0x42a/0xc70 [ 254.476474] ? lock_downgrade+0x900/0x900 [ 254.485547] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 254.485563] ? retint_kernel+0x2d/0x2d [ 254.485587] ? __get_user_pages+0x806/0x1b30 [ 254.493747] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 254.493769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.493794] ? check_preemption_disabled+0x48/0x200 [ 254.493810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.493840] handle_mm_fault+0x54f/0xc70 [ 254.563237] ? __handle_mm_fault+0x53e0/0x53e0 [ 254.563256] ? __get_user_pages+0x78f/0x1b30 [ 254.563275] __get_user_pages+0x806/0x1b30 [ 254.572283] ? follow_page_mask+0x1fb0/0x1fb0 [ 254.572304] ? perf_trace_lock+0x7a0/0x7a0 [ 254.572323] ? lock_acquire+0x1ed/0x520 [ 254.572335] ? __mm_populate+0x31a/0x4d0 [ 254.572352] ? lock_release+0x970/0x970 [ 254.601760] kvm: emulating exchange as write [ 254.604306] ? arch_local_save_flags+0x40/0x40 [ 254.604325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.604354] populate_vma_page_range+0x2db/0x3d0 [ 254.688304] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 254.688322] ? find_vma+0x34/0x190 [ 254.688340] __mm_populate+0x286/0x4d0 [ 254.688359] ? populate_vma_page_range+0x3d0/0x3d0 [ 254.688389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.688406] ? ns_capable_common+0x13f/0x170 [ 254.688423] __x64_sys_mlockall+0x45b/0x630 [ 254.688442] ? __ia32_sys_munlock+0x160/0x160 [ 254.698034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.698053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.698069] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 254.698093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.698117] do_syscall_64+0x1b9/0x820 [ 254.698130] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 254.698147] ? syscall_return_slowpath+0x5e0/0x5e0 [ 254.698182] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.698198] ? trace_hardirqs_on_caller+0x310/0x310 [ 254.698214] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 254.698229] ? prepare_exit_to_usermode+0x291/0x3b0 [ 254.698249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.698271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.715969] RIP: 0033:0x457579 [ 254.724161] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:37:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="fdbcd152621f3855e51e18bc21c66e29e16214cc0f44e142d359d3996395b61093b4535b286eb0c79b6baa8c1114fa9609b2d9c498c3475611513cc57367f8867a827cdc985e55cf35271377fd772620f49033e7a5a2fd8cce5f54dd52ec6ce37ca98f6d5431", 0x66, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1000000000000b, &(0x7f0000534000), &(0x7f0000000040)=0x4) 04:37:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffffffffffff1a4d, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) r0 = semget$private(0x0, 0x3, 0x60) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000000)=0x1) r1 = syz_init_net_socket$llc(0x1a, 0x80200000000002, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) times(&(0x7f00000000c0)) sendto$llc(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, &(0x7f000000c2c0)=[{&(0x7f000000bf00)=""/139, 0x8b}, {&(0x7f000000bfc0)=""/220, 0xdc}, {&(0x7f000000c0c0)=""/93, 0x5d}, {&(0x7f000000c140)=""/193, 0xc1}, {&(0x7f000000c240)=""/115, 0x73}], 0x5, &(0x7f000000c340)=""/106, 0x6a, 0xffffffff}, 0x6}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f000000c500)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x5, 0x0, 0x0, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x5a}], 0x1, &(0x7f000000c740)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c800)=""/210, 0xd2}, {&(0x7f000000c900)=""/92, 0x5c}, {&(0x7f000000c980)=""/82, 0x52}], 0x3, &(0x7f000000ca40)=""/40, 0x28}, 0x6}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f000000cd00)=[{&(0x7f000000cb00)=""/255, 0xff}, {&(0x7f000000cc00)}, {&(0x7f000000cc40)=""/180, 0xb4}], 0x3, &(0x7f000000cd40)=""/5, 0x5, 0x2}, 0xffffffff}], 0x5, 0x2000, &(0x7f000000cec0)={0x0, 0x1c9c380}) [ 254.724170] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 254.882868] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 254.890124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 254.897392] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 254.904653] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 254.911925] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 254.919736] Task in /syz1 killed as a result of limit of /syz1 04:37:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001880)={'filter\x00', 0x6d, "75a9d5963ca2e28470421af522fbb14791c3daeead9939ea4e5282b80b5c7eb1ca7049a2769a59f730afa158dd6005672f865a962ef614484a6e452e9da57ebf634776564132676fcb14cfcfb8556e20421bab570fec9bfbbf2569d6d59c33f5f85e2bbaabe55d45a6d0986ca5"}, &(0x7f0000001600)=0x91) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000017c0)}], 0x1}], 0x1, 0x8000) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/36, 0x7}) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000001680)=@expire={0x140, 0x18, 0x0, 0x0, 0x0, {{{@in6=@remote, @in6=@loopback}, {@in=@remote}, @in=@loopback, {}, {}, {0x87}}}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4c885}, 0x0) [ 254.963187] memory: usage 204800kB, limit 204800kB, failcnt 306 [ 255.024002] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 255.048228] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 255.068605] Memory cgroup stats for /syz1: cache:0KB rss:196172KB rss_huge:165888KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:49588KB active_anon:2308KB inactive_file:0KB active_file:0KB unevictable:144484KB [ 255.110358] Memory cgroup out of memory: Kill process 7650 (syz-executor1) score 248 or sacrifice child [ 255.137514] Killed process 7650 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:37:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x1) fcntl$dupfd(r0, 0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000003) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xe, 0x4, 0x4, 0x7}, 0x2c) r4 = memfd_create(&(0x7f0000000140)=')\x00', 0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818218e5f0800000073bd54acb478382745eccce49dad15b6000048c76484ebd251473411ee95b6f6b505b31d85c395c37c5fc5460ae6367242992439a79722c5623331d3de4bea37779ca5aa8932b8d06e7e2e72f8675ee4f426b3b6c1dcf9ab088ff1548d4050ed46fea425f5643f220560d26fb46d7a02df56e91f98795dca750066dadc7b5d293fb2581e781f1ef9d4e0f795acb954a18d3eee3f7a65f175feba0339b9304511605904718ea7c6c28d9950e89377136e27ffcd649dffcfc4dbcd6e28ae238fa8842b16e0588f6b8194093243c7dd62f7cfabbd216e77558d7532859c1bb2"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r6}) setsockopt$inet6_int(r5, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x2b1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x890c, &(0x7f0000000340)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x30c, 0x310, 0x184, 0xe003, 0x33c, 0x0, 0x0, 0xf4, 0x15, 0x8]}, 0x75, r7}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@local, @empty, @loopback, 0x52, 0x0, 0x9, 0x0, 0x0, 0x1c0270, r6}) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000300)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r9, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x78e0, 0x8, 0xffffffffffffff7a, 0x1000}, 0x8) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r3, &(0x7f0000000000), &(0x7f000089b000)}, 0x1ec) 04:37:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x800) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x40, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000240)={0x1, 0x7, 0x8000, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0xfffffff0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000280)={0x1, 0x14, [0x9, 0x7fff, 0x5, 0x4, 0x4]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000002c0)=0x400) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000003c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702f73797a30fe", 0x1ff) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 04:37:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0xaaaaaaaaaaaab18, 0x0, &(0x7f00000001c0), 0x226) pipe(&(0x7f0000000340)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x0) 04:37:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6200e3ffffff004b6d30b30000000138", 0x102}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x701443, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7fff, 0x30, 0x5, 0x40e}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xe0, 0x90}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={r4, 0x0, 0x7fff, 0x100, 0x5, 0x2, 0x1ff, 0x20, {r5, @in6={{0xa, 0x4e23, 0xfffffffffffffffa, @remote, 0xcf9b}}, 0xa8, 0x3, 0x6, 0x1ff, 0x3}}, &(0x7f0000000340)=0xb0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000140)=0xa3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="03003e00000000000800010004000000"], 0x1}}, 0x0) close(r0) memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) 04:37:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000300)={{0x3f, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0x3, 'none\x00', 0x21, 0x7, 0x43}, {@broadcast, 0x4e24, 0x0, 0x2, 0x6, 0xc0ff}}, 0x44) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000b7acdd2585732678672eabc78618634ddf050117282157c701ddd504e2f94c2b30c37ea5e9cf20830e30ec84fc92bf3761d4b6b3024b74cc725829cb7372df8a36d7119805c4271e001de2aa362ea835e690fc3c75f0ee63c178b25f2372d34602b3d35950724ed6067bd700bc014d77269852d61f9c988591d61361c08a87efd84f3caf13fc6a6358955bfc468bdce3a9994465d8338531e5309df09100186fe03ea5700ee031677ea6c62165a2aee71ccd3ba631e19f4ae18e9766b985ab106e8ab6063d7a6731031904f06e3e77c5dbaddd7ce5a4da578fcabfd59c79c0103700f7826263bf"], &(0x7f0000000080)=0xd) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r3, 0x6d, "f9e9b7e66bbf135f315d21826df756a9ff2d57be4cb9e61f8e423706631aaf94ecd2227e8518f1addc694897b805fca19f490f50e582025693bfc6bf26248677aa1355eaa463ffcde6a00c1952afe738b6ab1be84b98dd1233e2bcc017b2221c5fd6301aa7a576d3a5847ff4a6"}, &(0x7f00000001c0)=0x75) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="508b82000000000001000080000000000600000000f5ffffffffffffff00000000000000000000000000000000000000"]) write$FUSE_LSEEK(r4, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x1000200000}}, 0x18) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 04:37:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="07d32aaaea52e34c1faf2da08d63f29cfd5024b3b3857dece0f900dafc04cfe6ff48fcf6db350c4cb9"], 0x1) fallocate(r1, 0x200000000000, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x0, 0x8001) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x2) 04:37:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000002980)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3ff, 0x1) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'syzkaller1\x00'}) [ 255.851272] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 255.893314] syz-executor1 cpuset=syz1 mems_allowed=0 [ 255.901599] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 255.911347] CPU: 1 PID: 9017 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 255.918651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.928004] Call Trace: [ 255.930609] dump_stack+0x1c4/0x2b4 [ 255.934249] ? dump_stack_print_info.cold.2+0x52/0x52 [ 255.939480] ? mark_held_locks+0x130/0x130 [ 255.943766] ? mark_held_locks+0x130/0x130 [ 255.948022] dump_header+0x27b/0xf72 [ 255.951748] ? debug_smp_processor_id+0x1c/0x20 [ 255.956428] ? check_preemption_disabled+0x48/0x200 [ 255.961454] ? pagefault_out_of_memory+0x197/0x197 [ 255.966399] ? debug_smp_processor_id+0x1c/0x20 [ 255.971070] ? perf_trace_lock+0x14d/0x7a0 [ 255.975306] ? perf_trace_lock_acquire+0x15b/0x800 [ 255.980242] ? perf_trace_lock_acquire+0x15b/0x800 [ 255.985180] ? zap_class+0x640/0x640 [ 255.988894] ? perf_trace_lock+0x7a0/0x7a0 [ 255.993131] ? debug_smp_processor_id+0x1c/0x20 [ 255.997809] ? perf_trace_lock+0x14d/0x7a0 [ 256.002050] ? perf_trace_lock_acquire+0x15b/0x800 [ 256.007002] ? zap_class+0x640/0x640 [ 256.010716] ? perf_trace_lock+0x7a0/0x7a0 [ 256.014988] ? task_will_free_mem+0x239/0xb30 [ 256.019488] ? zap_class+0x640/0x640 [ 256.023218] ? zap_class+0x640/0x640 [ 256.023240] ? ___ratelimit+0x36f/0x655 [ 256.027770] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 256.030934] ? lock_downgrade+0x900/0x900 [ 256.030954] ? trace_hardirqs_on+0xbd/0x310 [ 256.030966] ? kasan_check_read+0x11/0x20 [ 256.030979] ? ___ratelimit+0x36f/0x655 [ 256.030992] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 256.031007] ? trace_hardirqs_on+0x310/0x310 [ 256.031025] ? lock_downgrade+0x900/0x900 [ 256.069118] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 256.074275] ? ___ratelimit+0xaa/0x655 [ 256.078149] ? idr_get_free+0xec0/0xec0 [ 256.082111] ? kasan_check_write+0x14/0x20 [ 256.086329] ? do_raw_spin_lock+0xc1/0x200 [ 256.090564] oom_kill_process.cold.27+0x10/0x903 [ 256.095312] ? kasan_check_write+0x14/0x20 [ 256.099558] ? do_raw_spin_lock+0xc1/0x200 [ 256.103775] ? oom_evaluate_task+0x540/0x540 [ 256.108184] ? cgroup_procs_next+0x70/0x70 [ 256.112412] ? _raw_spin_unlock_irq+0x60/0x80 [ 256.116888] ? oom_badness+0xaa0/0xaa0 [ 256.120766] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 256.125521] ? mem_cgroup_iter_break+0x30/0x30 [ 256.130090] ? cgroup_file_notify+0x226/0x2f0 [ 256.134568] out_of_memory+0xa84/0x1430 [ 256.138527] ? kasan_check_read+0x11/0x20 [ 256.142659] ? oom_killer_disable+0x3a0/0x3a0 [ 256.147138] ? kasan_check_write+0x14/0x20 [ 256.151360] ? do_raw_spin_lock+0xc1/0x200 [ 256.155617] mem_cgroup_out_of_memory+0x15e/0x210 [ 256.160486] ? memcg_memory_event+0x40/0x40 [ 256.164792] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 256.169536] ? page_counter_try_charge+0x1c1/0x220 [ 256.174450] try_charge+0xc43/0x1690 [ 256.178156] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.183261] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 256.189315] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 256.194142] ? lock_downgrade+0x900/0x900 [ 256.198279] ? lock_release+0x970/0x970 [ 256.202240] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 256.208018] ? kasan_check_read+0x11/0x20 [ 256.212165] ? do_raw_spin_unlock+0xa7/0x2f0 [ 256.216569] ? zap_class+0x640/0x640 [ 256.220293] ? get_mem_cgroup_from_mm+0x206/0x440 [ 256.225129] ? mem_cgroup_can_attach+0x580/0x580 [ 256.229897] ? __might_sleep+0x95/0x190 [ 256.233858] mem_cgroup_try_charge+0x5ea/0xe10 [ 256.238471] ? lock_downgrade+0x900/0x900 [ 256.242617] ? mem_cgroup_protected+0xa60/0xa60 [ 256.247287] ? __handle_mm_fault+0x2c32/0x53e0 [ 256.251886] ? pmd_val+0x88/0x100 [ 256.255336] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 256.260892] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 256.265811] __handle_mm_fault+0x273a/0x53e0 [ 256.270220] ? zap_class+0x640/0x640 [ 256.273924] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 256.278752] ? __dump_page.cold.2+0x179/0x179 [ 256.283239] ? zap_class+0x640/0x640 [ 256.286940] ? handle_mm_fault+0x42a/0xc70 [ 256.291176] ? lock_downgrade+0x900/0x900 [ 256.295324] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 256.301126] ? retint_kernel+0x2d/0x2d [ 256.305044] ? __get_user_pages+0x806/0x1b30 [ 256.309434] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 256.314868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.320396] ? check_preemption_disabled+0x48/0x200 [ 256.325405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.330927] handle_mm_fault+0x54f/0xc70 [ 256.334971] ? __handle_mm_fault+0x53e0/0x53e0 [ 256.339535] ? find_vma+0x34/0x190 [ 256.343058] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 256.348076] __get_user_pages+0x806/0x1b30 [ 256.352312] ? follow_page_mask+0x1fb0/0x1fb0 [ 256.356808] ? zap_class+0x640/0x640 [ 256.360524] ? perf_trace_lock+0x7a0/0x7a0 [ 256.364745] ? lock_acquire+0x1ed/0x520 [ 256.368720] ? __mm_populate+0x31a/0x4d0 [ 256.372782] ? lock_release+0x970/0x970 [ 256.376789] ? arch_local_save_flags+0x40/0x40 [ 256.381367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.386903] populate_vma_page_range+0x2db/0x3d0 [ 256.391650] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 256.396583] ? find_vma+0x34/0x190 [ 256.400119] __mm_populate+0x286/0x4d0 [ 256.404026] ? populate_vma_page_range+0x3d0/0x3d0 [ 256.408967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.414485] ? ns_capable_common+0x13f/0x170 [ 256.418876] __x64_sys_mlockall+0x45b/0x630 [ 256.423207] ? __ia32_sys_munlock+0x160/0x160 [ 256.428239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.433777] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.439140] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 256.444593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.450135] do_syscall_64+0x1b9/0x820 [ 256.454019] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 256.459386] ? syscall_return_slowpath+0x5e0/0x5e0 [ 256.464315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.469174] ? trace_hardirqs_on_caller+0x310/0x310 [ 256.474188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 256.479207] ? prepare_exit_to_usermode+0x291/0x3b0 [ 256.484225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.489078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.494259] RIP: 0033:0x457579 [ 256.497451] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.516346] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 256.524074] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 256.531337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 256.538600] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 04:37:28 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)=0x78, 0x4) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000940)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000600), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f00000005c0)=0xe8) syz_mount_image$hfs(&(0x7f00000002c0)='hfs\x00', &(0x7f0000000340)='./file0\x00', 0x6, 0x6, &(0x7f00000007c0)=[{&(0x7f0000000380)="b5489edd8cdc5aedccaab1a6b72ecce36a236a98346cebbea70dc1d9c5144b0ff5062f3e517b3aa9feff4864e55266146e6ddc73e8fdca477b2b083b08985f30d1c2162a1287e7991cafd0202996d50f87434dc3caea36e7b30f166f0fb9eed0b81f4c023f67487f4f8e5ac3357490cb1aae92bc359fc6b787fec6ae7efab9fdf4ca08df8d1d0e8e2a7cf36425bc48aa674b19dfbb1ed97c86c202389e1a58d1fb0e5477bef84d4eed928a31e764ba145038b41e0eccdbb878ab2ea099585fd47baab8d576d84ac73116f7bb", 0xcc}, {&(0x7f0000000480)="27184856f48c21a12245150681a24ef04620d22e5161bf0e1cd5d7b2692585d2d1349ee4ecdbc5475989a162cc9ab8ce8f31b4f1643e1379c255ac3742ee0ba85efa05ca725da9551e424faf3dfd3faa171e67541cd4f3743b99d54b4c07786993fd557e35f5cfd3ba11d3afaa012307651316f10eef94aefc910d4ccaf9a96df938d323cecc1d7d2fcd89f2c78d9b7c27ef513070f2d8d2df47523c9cd62bfe545d5d2f6fb51b6de8022c", 0xab, 0x7}, {&(0x7f0000000640)="473461c386916e1f4b0a0462bfb81df3e0380a8bf15418eb5e3d10202a5902c82cab51401fb11f8ee941a1099c8d32384e708b6c01b402574f25d34b0f28c807d4aa4039c051f5d46567f93f6aa6d5cc95228815242dd3d2be60c6caa8d72752adb24bbb1e8edbdacb2f863eb35363e75e5236258c6af86fb824d21953255f35273be23dff78fbdf068e42c59a92ca93019af0ad3a0a54f761f8f1b32295eadad8956bade8e6d7bcf88fd625ebbab6449940098bae36e4515524c3503b79929e21843adb20c62d9fe339741c999e28071891c55798c659133fd901129786", 0xde, 0xfff}, {&(0x7f0000000540), 0x0, 0x1}, {&(0x7f0000000580)="b093db0fd77db4b197f4926232a205694fcf98072d6ffd80523a6941504ea1564a60a88eaf8dcbc19a067f7bdbc679e9caa4db", 0x33, 0x800}, {&(0x7f0000000740)="c4536dee24edff145e60578ec0d97dbafac1559fcc9a80cdbf19c7c5ea77e81a4082decc5d68ce8b313f006fd0ef8e635cc3474933f3da234c050989538f1a69c711e38793462c2a380dbd572df5339c2a94932a125b34ad3fc9b0bd515c2acd740acd71342c10dfb38d6ba01253", 0x6e, 0xffff}], 0x8000, &(0x7f0000000b00)={[{@session={'session', 0x3d, 0x9}}, {@creator={'creator', 0x3d, "ad3331cc"}}, {@file_umask={'file_umask', 0x3d, 0xdf}}, {@gid={'gid', 0x3d, r2}}, {@creator={'creator', 0x3d, "03bf4948"}}, {@file_umask={'file_umask', 0x3d, 0x100000001}}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@subj_user={'subj_user', 0x3d, 'ppp0+,'}}, {@uid_eq={'uid', 0x3d, r3}}]}) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) r4 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000280)) getegid() perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9, 0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0xed59, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0xb54, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1038, 0x0, 0x4, 0x7, 0x3, 0x4, 0x85c}, 0x0, 0x3, 0xffffffffffffffff, 0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 04:37:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x100101400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffff, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x30) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1000, 0x40) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0xfffffffffffffecd) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x0, 0x9, 0x8, {0x0, 0x989680}}) dup2(r0, r1) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') [ 256.545865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 256.553129] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 256.564203] Task in /syz1 killed as a result of limit of /syz1 [ 256.572145] memory: usage 204800kB, limit 204800kB, failcnt 326 [ 256.578713] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.592808] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 256.602436] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 256.609994] Memory cgroup stats for /syz1: cache:0KB rss:196028KB rss_huge:163840KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:63928KB active_anon:2304KB inactive_file:0KB active_file:0KB unevictable:129944KB [ 256.633050] hfs: file_umask requires a value 04:37:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000040)=@l2={0x1f, 0x2, {0x1f, 0x4, 0x3, 0x100000001, 0xfffffffffffffffe, 0x4}, 0xa0, 0xa0c1}, 0x80) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) [ 256.641981] Memory cgroup out of memory: Kill process 7717 (syz-executor1) score 248 or sacrifice child [ 256.654864] hfs: unable to parse mount options [ 256.663710] Killed process 7717 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:37:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffff, 0x1) fcntl$dupfd(r0, 0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000000003) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xe, 0x4, 0x4, 0x7}, 0x2c) r4 = memfd_create(&(0x7f0000000140)=')\x00', 0x3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818218e5f0800000073bd54acb478382745eccce49dad15b6000048c76484ebd251473411ee95b6f6b505b31d85c395c37c5fc5460ae6367242992439a79722c5623331d3de4bea37779ca5aa8932b8d06e7e2e72f8675ee4f426b3b6c1dcf9ab088ff1548d4050ed46fea425f5643f220560d26fb46d7a02df56e91f98795dca750066dadc7b5d293fb2581e781f1ef9d4e0f795acb954a18d3eee3f7a65f175feba0339b9304511605904718ea7c6c28d9950e89377136e27ffcd649dffcfc4dbcd6e28ae238fa8842b16e0588f6b8194093243c7dd62f7cfabbd216e77558d7532859c1bb2"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r6}) setsockopt$inet6_int(r5, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x2b1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x890c, &(0x7f0000000340)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x30c, 0x310, 0x184, 0xe003, 0x33c, 0x0, 0x0, 0xf4, 0x15, 0x8]}, 0x75, r7}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@local, @empty, @loopback, 0x52, 0x0, 0x9, 0x0, 0x0, 0x1c0270, r6}) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000300)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r9, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x78e0, 0x8, 0xffffffffffffff7a, 0x1000}, 0x8) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r3, &(0x7f0000000000), &(0x7f000089b000)}, 0x1ec) [ 256.692083] oom_reaper: reaped process 7717 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 256.715959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:37:29 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="236570726f636b657972696e756d6574302067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e65726963290020619a0990ad56540bafbfd079b3aed3730f3779e8049a6a700a267414a949fd70cef207e4018ab354c663c7f2810570554dcabf793ecf83a2a16252a88b1eae85dd555074d5c78b6b366732591094"], 0x88) r3 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000000), &(0x7f0000000100)=0x2) bind$alg(r3, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) accept$alg(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001f80)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000400)=""/55, 0x37}], 0x3, &(0x7f0000000540)=""/221, 0xdd}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f00000004c0)=""/5, 0x5}], 0x2, &(0x7f0000000900)=""/52, 0x34}, 0x7f}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000cc0)}], 0x1, &(0x7f0000000dc0)=""/80, 0x50}, 0x9}, {{&(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000001800)=""/237, 0xed}], 0x2, &(0x7f0000001900)=""/1, 0x1, 0x4}, 0x20}, {{&(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d40)=""/134, 0x86}], 0x1, &(0x7f0000001e80)=""/250, 0xfa}, 0x6}], 0x5, 0x0, &(0x7f0000002140)={0x0, 0x989680}) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 04:37:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x99c, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x12]}, 0x2c) clock_getres(0x3, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0xa000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, {0x2, 0x1, 0x0, 0x1, 0x2}}) 04:37:29 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x3, 0x8001, 0x6, 0x336a, 0x81, 0x8, 0x3}, 0x1c) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_targets\x00') sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000005440)='IPVS\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) connect(r1, &(0x7f00000001c0)=@nl=@unspec, 0x80) 04:37:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) 04:37:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r5 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000540)="c4c140161666b833000f00d80fc79d04000000440f20c03505000000440f22c00f01c9c4e27913ccb9800000c00f3235000400000f3066b86e000f00d066b8e4008ee80fc7ab42430000", 0x4a}], 0x1, 0x0, &(0x7f0000000280), 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)="fc7e8c5ffb1027fae06fb2f38bdb10888837b367d566c4527c8f78402a11aa61882b95357c613c92dc4afcb6454872755dd42ea2e773629b856cea1a71f9781d802593ca65680512b5d17f65c0f9f701e31a616c9d8c15dcf322e1fbbb12d460273cdeb4e37bd8bc152304ac2b081dbf13464c20bbf91f25c747169d54349b97e0f4967db2bab820c858aa3442cd4aec323d43132e98b97b32c7fb96d283b60f0954cdc4a8"}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280)=0x800080, 0x4) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x103) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000680)=0x40, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840)='/dev/hwrng\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000880)={0x3, 0x81}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x20, 0x73a9}) r4 = socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000004c0)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f00000006c0)='net/llc\x00') mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000740)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0x5000003e, 0x2, 0x36}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r4, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'lo\x00'}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200029bd7000fbdbdf2510000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) 04:37:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200800, 0x0) getpeername$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x1c) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)) sync_file_range(r0, 0x0, 0x40000000000000, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff9c}) r2 = socket$inet(0x10, 0x3, 0xc) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)={0x0, @speck128, 0x0, "bb9733b75767391f"}) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)=':*cpusetmime_type\x00'], &(0x7f0000000000)) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000180)={0x6}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x10}, 0x10) sendmsg(r2, &(0x7f0000000200)={0x0, 0x3cd, &(0x7f0000009ff0), 0x0, 0x0, 0xffffffffffffff3b, 0x4}, 0x0) 04:37:29 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x420000, 0x1d9) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0xff, 0xd7f, 0x7fff, 0x1, 0x0, 0x4, 0x0, 0x8, 0x3, 0x1ff, 0x12, 0x1, 0x0, 0x5, 0x400, 0x10001, 0x1e, 0xff, 0x25, 0x1000, 0xf3, 0x1, 0x4, 0x1, 0x75e9, 0x5, 0x200, 0x67, 0x5, 0x3907, 0x8, 0x2, 0x2, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x7a, 0x0, @perf_config_ext={0x3}, 0x8, 0x0, 0x7, 0x1, 0x1, 0x3, 0x8}, r0, 0x1, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) [ 257.437831] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 04:37:29 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x100000000000011, 0x80002, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000004c0)=""/235) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) lseek(0xffffffffffffffff, 0x0, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) inotify_init() sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 257.517805] syz-executor1 cpuset=syz1 mems_allowed=0 [ 257.544251] CPU: 0 PID: 9080 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 257.551551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.560898] Call Trace: [ 257.563500] dump_stack+0x1c4/0x2b4 [ 257.567150] ? dump_stack_print_info.cold.2+0x52/0x52 [ 257.572377] ? mark_held_locks+0x130/0x130 [ 257.576633] ? mark_held_locks+0x130/0x130 [ 257.580888] dump_header+0x27b/0xf72 [ 257.584611] ? debug_smp_processor_id+0x1c/0x20 [ 257.589324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.594910] ? pagefault_out_of_memory+0x197/0x197 [ 257.599850] ? debug_smp_processor_id+0x1c/0x20 [ 257.604531] ? perf_trace_lock_acquire+0x15b/0x800 [ 257.609469] ? perf_trace_lock_acquire+0x15b/0x800 [ 257.614435] ? perf_trace_lock+0x7a0/0x7a0 [ 257.618686] ? perf_trace_lock+0x7a0/0x7a0 [ 257.622936] ? debug_smp_processor_id+0x1c/0x20 [ 257.627614] ? perf_trace_lock_acquire+0x15b/0x800 [ 257.632548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.638096] ? perf_trace_lock+0x7a0/0x7a0 [ 257.642345] ? task_will_free_mem+0x239/0xb30 [ 257.646868] ? ___ratelimit+0x36f/0x655 [ 257.650868] ? lock_downgrade+0x900/0x900 [ 257.655047] ? trace_hardirqs_on+0xbd/0x310 [ 257.659373] ? kasan_check_read+0x11/0x20 [ 257.663543] ? ___ratelimit+0x36f/0x655 [ 257.667529] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 257.672990] ? trace_hardirqs_on+0x310/0x310 [ 257.677419] ? lock_downgrade+0x900/0x900 [ 257.681583] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 257.686697] ? ___ratelimit+0xaa/0x655 [ 257.690602] ? idr_get_free+0xec0/0xec0 [ 257.694589] ? kasan_check_write+0x14/0x20 [ 257.698837] ? do_raw_spin_lock+0xc1/0x200 [ 257.703087] oom_kill_process.cold.27+0x10/0x903 [ 257.707853] ? kasan_check_write+0x14/0x20 [ 257.712105] ? do_raw_spin_lock+0xc1/0x200 [ 257.716355] ? oom_evaluate_task+0x540/0x540 [ 257.720801] ? cgroup_procs_next+0x70/0x70 [ 257.725046] ? _raw_spin_unlock_irq+0x60/0x80 [ 257.729557] ? oom_badness+0xaa0/0xaa0 [ 257.733475] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 257.738239] ? mem_cgroup_iter_break+0x30/0x30 [ 257.742845] ? cgroup_file_notify+0x226/0x2f0 [ 257.747368] out_of_memory+0xa84/0x1430 [ 257.751358] ? kasan_check_read+0x11/0x20 [ 257.755529] ? oom_killer_disable+0x3a0/0x3a0 [ 257.760068] ? kasan_check_write+0x14/0x20 [ 257.764312] ? do_raw_spin_lock+0xc1/0x200 [ 257.768566] mem_cgroup_out_of_memory+0x15e/0x210 [ 257.773427] ? memcg_memory_event+0x40/0x40 [ 257.777756] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 257.782543] ? page_counter_try_charge+0x1c1/0x220 [ 257.787483] try_charge+0xc43/0x1690 [ 257.791207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.796334] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 257.802421] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 257.807270] ? lock_downgrade+0x900/0x900 [ 257.811430] ? lock_release+0x970/0x970 [ 257.815451] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 257.821247] ? kasan_check_read+0x11/0x20 [ 257.825409] ? do_raw_spin_unlock+0xa7/0x2f0 [ 257.829824] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 257.834421] ? get_mem_cgroup_from_mm+0x206/0x440 [ 257.839266] ? mem_cgroup_can_attach+0x580/0x580 [ 257.844069] ? __might_sleep+0x95/0x190 [ 257.848080] mem_cgroup_try_charge+0x5ea/0xe10 [ 257.852672] ? lock_downgrade+0x900/0x900 [ 257.856824] ? mem_cgroup_protected+0xa60/0xa60 [ 257.861493] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 257.866514] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 257.871549] ? __handle_mm_fault+0x2c32/0x53e0 [ 257.876136] ? pmd_val+0x88/0x100 [ 257.879607] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 257.885152] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 257.890094] __handle_mm_fault+0x273a/0x53e0 [ 257.894537] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 257.899403] ? __dump_page.cold.2+0x179/0x179 [ 257.903918] ? follow_page_mask+0x18d/0x1fb0 [ 257.908338] ? handle_mm_fault+0x42a/0xc70 [ 257.912573] ? lock_downgrade+0x900/0x900 [ 257.916732] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 257.922549] ? retint_kernel+0x2d/0x2d [ 257.926453] ? __get_user_pages+0x806/0x1b30 [ 257.930868] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 257.936324] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.941883] ? check_preemption_disabled+0x48/0x200 [ 257.946920] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.952488] handle_mm_fault+0x54f/0xc70 [ 257.956575] ? __handle_mm_fault+0x53e0/0x53e0 [ 257.961167] ? __get_user_pages+0x8ba/0x1b30 [ 257.965588] __get_user_pages+0x806/0x1b30 [ 257.969839] ? follow_page_mask+0x1fb0/0x1fb0 [ 257.974350] ? perf_trace_lock+0x7a0/0x7a0 [ 257.978608] ? lock_acquire+0x1ed/0x520 [ 257.982592] ? __mm_populate+0x31a/0x4d0 [ 257.986669] ? lock_release+0x970/0x970 [ 257.990669] ? arch_local_save_flags+0x40/0x40 [ 257.995254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.000825] populate_vma_page_range+0x2db/0x3d0 [ 258.005594] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 258.010531] ? find_vma+0x34/0x190 [ 258.014077] __mm_populate+0x286/0x4d0 [ 258.017977] ? populate_vma_page_range+0x3d0/0x3d0 [ 258.022925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.028467] ? ns_capable_common+0x13f/0x170 [ 258.032884] __x64_sys_mlockall+0x45b/0x630 [ 258.037242] ? __ia32_sys_munlock+0x160/0x160 [ 258.041740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.047296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.052668] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 258.058135] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.063700] do_syscall_64+0x1b9/0x820 [ 258.067588] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 258.072971] ? syscall_return_slowpath+0x5e0/0x5e0 [ 258.077928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.082774] ? trace_hardirqs_on_caller+0x310/0x310 [ 258.087797] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 258.092815] ? prepare_exit_to_usermode+0x291/0x3b0 [ 258.097868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.102716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.107906] RIP: 0033:0x457579 [ 258.111099] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.130000] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 258.130017] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 258.130026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 258.130035] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.130043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 258.130052] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 258.186188] Task in /syz1 killed as a result of limit of /syz1 04:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x10000000000, 0x0, 0x8000000000, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17bbbd03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb5e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f00000006c0)=',\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x50000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) pipe2(&(0x7f00000000c0), 0x0) 04:37:30 executing program 0: r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x2, &(0x7f0000000100)=[0x40, 0xfffffffffffffcde], &(0x7f0000000140)=[0x8, 0x3, 0x9, 0x25, 0x7f, 0xffffffffffffffff, 0x3], 0x22, 0x7, 0x5, &(0x7f0000000180)=[0x2, 0xfffffffffffffff9, 0x80000000, 0xa9, 0x4, 0x7, 0x7a], &(0x7f00000001c0)=[0x6, 0x2800000, 0x1, 0x3, 0x4, 0xff, 0x4, 0xa531]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x80000001, 0x4000000000401}, {0x61}, {0x6}]}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40180, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000080)=0x27d6) socket$inet(0x2, 0x800, 0x400) [ 258.198195] memory: usage 204800kB, limit 204800kB, failcnt 345 [ 258.229814] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 258.281514] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 04:37:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000002ac0)="153f6234488dd25d766070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) [ 258.318574] Memory cgroup stats for /syz1: cache:0KB rss:195764KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:72124KB active_anon:2300KB inactive_file:0KB active_file:0KB unevictable:121516KB [ 258.384796] Memory cgroup out of memory: Kill process 7817 (syz-executor1) score 248 or sacrifice child [ 258.398163] Killed process 7817 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:37:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='-1'], 0x2) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000240)={0x0, 0x39d6, 0x400, &(0x7f0000000200)=0x10000}) fcntl$getown(r2, 0x9) [ 258.465255] oom_reaper: reaped process 7817 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000180), 0x2b0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/mixer\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x7}, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000140)=0x8b) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000000200000e, 0x13, r4, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 04:37:30 executing program 0: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) accept4$unix(r0, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000700), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000a80)='cgroup\x00') exit(0x0) sendfile(r1, r2, &(0x7f0000000100), 0x7ff) 04:37:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x79, 0x30, 0x7, 0x2}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xd5, "33367d1e32eff47adb1d2745981e26aacd9bc53fab7164bccfc28acd5b73b2f0bafb3f4445f596eae15aec8b58ae2a35bcddce97fe61ab783d64a3fb6cc70662b18cb066347c926c633cf2f9103c431a0380630f54e57de89e618b452d7b8020b708f4d661a492bd0fc6bc0114f8c9222d4fb196ca7cc9ddd0e801b1b0c58c2c8e4a1914d9c91092f1986563940bd83506301afde6383dc9f895aa64926e7afa239031da31e330b955303385c6e50861353a8ff84fed05f64433300d68c24f129237230b8ce7cb8061f44ec177e8419ba111488481"}, &(0x7f00000001c0)=0xdd) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="030000002f64155aff444ea16a3975cff0193e4f035ebea61fd66f19878ce493846084ddd5ad3c1e693da3a0cbcb28f8c4a37e798fb3cb2b98cddc01ffe38abddb30b8cfa0b3d988ba709d7365079947eb7a100679c653b1dd0872a803d6993b2431a2acfe6c9b959907acc85d2bf9ae685526c945159b90908fd4bb59fc9c23e4ef52ba9510e9a42adfcd610e68defca039b60c5573ab46bbd2a17e0f8d507eb29e3d09bde496431c9a7c7a653090cb0000000000000000000000000000000000000000940d477dcfe57b9b231734a5abcb3d436ce6705de91be13e4d6ace2213ee0d8c5b70743a6b04023d051eaead6b51c1ba015f2258b32091f7b937a22701e6d6f549e71d3012db58b0433d4944badefde0dd9eb5528f1de11b68bd2f0d166aae478e8bab12036473add89b7200710327e833547018db"]}) close(0xffffffffffffffff) [ 259.737843] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 259.749279] syz-executor1 cpuset=syz1 mems_allowed=0 [ 259.754677] CPU: 0 PID: 9080 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 259.761960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.771344] Call Trace: [ 259.773959] dump_stack+0x1c4/0x2b4 [ 259.777622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 259.782841] dump_header+0x27b/0xf72 [ 259.786562] ? debug_smp_processor_id+0x1c/0x20 [ 259.791233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.796769] ? pagefault_out_of_memory+0x197/0x197 [ 259.801698] ? debug_smp_processor_id+0x1c/0x20 [ 259.806366] ? perf_trace_lock_acquire+0x15b/0x800 [ 259.811298] ? perf_trace_lock_acquire+0x15b/0x800 [ 259.816232] ? perf_trace_lock+0x7a0/0x7a0 [ 259.820465] ? perf_trace_lock+0x7a0/0x7a0 [ 259.824735] ? debug_smp_processor_id+0x1c/0x20 [ 259.829410] ? perf_trace_lock_acquire+0x15b/0x800 [ 259.834341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.839883] ? perf_trace_lock+0x7a0/0x7a0 [ 259.844122] ? task_will_free_mem+0x239/0xb30 [ 259.848678] ? retint_kernel+0x2d/0x2d [ 259.852570] ? trace_hardirqs_on_caller+0xc0/0x310 [ 259.857503] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.862268] ? ___ratelimit+0x36f/0x655 [ 259.866292] ? lock_downgrade+0x900/0x900 [ 259.870447] ? trace_hardirqs_on+0xbd/0x310 [ 259.874771] ? kasan_check_read+0x11/0x20 [ 259.878937] ? ___ratelimit+0x36f/0x655 [ 259.882917] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 259.888413] ? trace_hardirqs_on+0x310/0x310 [ 259.892868] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 259.897969] ? ___ratelimit+0xaa/0x655 [ 259.901858] ? idr_get_free+0xec0/0xec0 [ 259.905828] ? kasan_check_write+0x14/0x20 [ 259.910079] ? do_raw_spin_lock+0xc1/0x200 [ 259.914326] oom_kill_process.cold.27+0x10/0x903 [ 259.919095] ? trace_hardirqs_on+0xb4/0x310 [ 259.923437] ? _raw_spin_unlock_irq+0x56/0x80 [ 259.927955] ? oom_evaluate_task+0x540/0x540 [ 259.932406] ? trace_hardirqs_on_caller+0xc0/0x310 [ 259.937343] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.942099] ? trace_hardirqs_off+0x310/0x310 [ 259.946592] ? _raw_spin_unlock_irq+0x56/0x80 [ 259.951091] ? _raw_spin_unlock_irq+0x60/0x80 [ 259.955602] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.960395] ? retint_kernel+0x2d/0x2d [ 259.964295] ? out_of_memory+0xa40/0x1430 [ 259.968450] out_of_memory+0xa84/0x1430 [ 259.972431] ? kasan_check_read+0x11/0x20 [ 259.976581] ? oom_killer_disable+0x3a0/0x3a0 [ 259.981085] ? kasan_check_write+0x14/0x20 [ 259.985328] ? do_raw_spin_lock+0xc1/0x200 [ 259.989575] mem_cgroup_out_of_memory+0x15e/0x210 [ 259.994425] ? memcg_memory_event+0x40/0x40 [ 259.998754] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 260.003520] ? page_counter_try_charge+0x1c1/0x220 [ 260.008459] try_charge+0xc43/0x1690 [ 260.012184] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.017301] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 260.023371] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 260.028236] ? lock_downgrade+0x900/0x900 [ 260.032422] ? lock_release+0x970/0x970 [ 260.036418] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 260.042215] ? perf_trace_lock+0x7a0/0x7a0 [ 260.046452] ? mark_held_locks+0x130/0x130 [ 260.050705] ? get_mem_cgroup_from_mm+0x206/0x440 [ 260.055569] ? mem_cgroup_can_attach+0x580/0x580 [ 260.060332] ? check_preemption_disabled+0x48/0x200 [ 260.065367] ? __might_sleep+0x95/0x190 [ 260.069359] mem_cgroup_try_charge+0x5ea/0xe10 [ 260.073962] ? mem_cgroup_protected+0xa60/0xa60 [ 260.078651] ? retint_kernel+0x2d/0x2d [ 260.082559] ? trace_hardirqs_on_caller+0xc0/0x310 [ 260.087490] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.092254] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.097016] ? trace_hardirqs_off+0x310/0x310 [ 260.101524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.106289] ? retint_kernel+0x2d/0x2d [ 260.110204] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 260.115175] wp_page_copy+0x46c/0x14f0 [ 260.119145] ? follow_pfn+0x2e0/0x2e0 [ 260.122955] ? do_wp_page+0x76c/0x1390 [ 260.126861] ? lock_downgrade+0x900/0x900 [ 260.131028] ? kasan_check_write+0x14/0x20 [ 260.135265] ? kasan_check_read+0x11/0x20 [ 260.139439] ? do_raw_spin_unlock+0xa7/0x2f0 [ 260.143850] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 260.148432] ? __pte_alloc_kernel+0x220/0x220 [ 260.152939] do_wp_page+0x774/0x1390 [ 260.152958] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 260.161346] ? lock_release+0x970/0x970 [ 260.165317] ? pud_val+0x64/0x100 [ 260.168783] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 260.173541] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.179098] ? kasan_check_write+0x14/0x20 [ 260.183373] ? do_raw_spin_lock+0xc1/0x200 [ 260.187643] __handle_mm_fault+0x2c60/0x53e0 [ 260.192064] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 260.196925] ? __dump_page.cold.2+0x179/0x179 [ 260.201439] ? write_comp_data+0x19/0x70 [ 260.205486] ? follow_page_mask+0x18d/0x1fb0 [ 260.209892] ? handle_mm_fault+0x42a/0xc70 [ 260.214108] ? lock_downgrade+0x900/0x900 [ 260.218277] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 260.224074] ? retint_kernel+0x2d/0x2d [ 260.227955] ? __get_user_pages+0x806/0x1b30 [ 260.232351] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 260.237785] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.243304] ? check_preemption_disabled+0x48/0x200 [ 260.248331] handle_mm_fault+0x54f/0xc70 [ 260.252377] ? __handle_mm_fault+0x53e0/0x53e0 [ 260.256962] __get_user_pages+0x806/0x1b30 [ 260.261195] ? follow_page_mask+0x1fb0/0x1fb0 [ 260.265688] ? lock_acquire+0x1ed/0x520 [ 260.269643] ? __mm_populate+0x31a/0x4d0 [ 260.273739] ? retint_kernel+0x2d/0x2d [ 260.277610] ? trace_hardirqs_on_caller+0xc0/0x310 [ 260.282534] ? retint_kernel+0x2d/0x2d [ 260.286411] ? trace_hardirqs_on_caller+0xc0/0x310 [ 260.291330] ? trace_hardirqs_off+0x310/0x310 [ 260.295810] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.300562] ? trace_hardirqs_off+0x310/0x310 [ 260.305069] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.309811] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.314552] populate_vma_page_range+0x2db/0x3d0 [ 260.319291] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 260.324203] ? __mm_populate+0x14a/0x4d0 [ 260.328248] __mm_populate+0x286/0x4d0 [ 260.332123] ? populate_vma_page_range+0x3d0/0x3d0 [ 260.337042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.342582] ? ns_capable_common+0x13f/0x170 [ 260.346978] __x64_sys_mlockall+0x45b/0x630 [ 260.351288] ? __ia32_sys_munlock+0x160/0x160 [ 260.355770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.361295] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.366645] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 260.372086] ? do_futex+0x26d0/0x26d0 [ 260.375912] ? do_syscall_64+0x179/0x820 [ 260.379978] do_syscall_64+0x1b9/0x820 [ 260.383861] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 260.389220] ? syscall_return_slowpath+0x5e0/0x5e0 [ 260.394276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.399111] ? trace_hardirqs_on_caller+0x310/0x310 [ 260.404106] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.409158] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.414172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.419016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.424198] RIP: 0033:0x457579 [ 260.427374] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.446266] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 260.453973] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 260.461238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 260.468488] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.475747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 260.483036] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 260.493892] Task in /syz1 killed as a result of limit of /syz1 [ 260.501212] memory: usage 204712kB, limit 204800kB, failcnt 381 [ 260.507428] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 260.514710] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 260.526888] Memory cgroup stats for /syz1: cache:0KB rss:182960KB rss_huge:149504KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:70444KB active_anon:2280KB inactive_file:0KB active_file:0KB unevictable:110232KB [ 260.549227] Memory cgroup out of memory: Kill process 9078 (syz-executor1) score 344 or sacrifice child [ 260.559235] Killed process 9080 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:52256kB, shmem-rss:0kB [ 260.570905] oom_reaper: reaped process 9080 (syz-executor1), now anon-rss:18076kB, file-rss:52248kB, shmem-rss:0kB 04:37:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r5 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000001c0)={0x7, 0x3, 0x0, [{0x2, 0x8, 0x7fffffff, 0x44c, 0x5d2, 0x4, 0x1}, {0x0, 0xac, 0x4, 0xaa7b, 0x8001, 0x7, 0x8000}, {0x7f, 0x6, 0x100000001, 0xf5, 0x7, 0x80, 0x8}]}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$int_out(r0, 0x90004520, &(0x7f0000000040)) 04:37:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x3, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c2134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa684020000", 0x0, &(0x7f0000000200)) chroot(&(0x7f00000003c0)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="2e650f983df3cf0f01751a6a000f320fae29670f01ca0f01dfbaf80c66b8114eeb8266efbafc0cec0f01c8", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) 04:37:33 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000002680)=""/71, 0x47}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f00000000c0)=""/23, 0x17}], 0x7, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, 0x0) clone(0x1000002102002003, 0x0, 0xfffffffffffffffe, &(0x7f0000002700), 0xffffffffffffffff) getpid() r1 = syz_open_dev$mouse(&(0x7f00000015c0)='/dev/input/mouse#\x00', 0x3, 0x200080) read$FUSE(r1, &(0x7f0000001600), 0x1000) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001580)={0x28, 0x2, 0x0, {0x0, 0x5, 0xffff}}, 0x28) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000002600)={0x0, r1}) recvfrom(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff7f, 0x0, &(0x7f0000000140)=@in={0x2, 0x0, @multicast2}, 0xb8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000001500)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000001540), &(0x7f0000002640)=0x280) 04:37:33 executing program 5: r0 = socket$inet(0x10, 0x3, 0x9) socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x10000, 0x1000}) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000de0107031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e280000001119ffff19ae2664287164180de82c48b460b8230100000000030000005a80d18be34c8546c8243929db2406b20cd389d01cc0bd1a7a6b750e97d5593f054708198d809f0b50d8d13420917ef7e190d34ed350dec2e67fb663", 0x4c}], 0x1, 0x0, 0xffffff82}, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) 04:37:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001000000d661c80d8b9548d1"], 0x18}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xff, 0xffffffff, 0x20}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x7fff}, 0x8) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 04:37:33 executing program 2: clone(0x0, &(0x7f0000659ffe), &(0x7f00003c6ffc), &(0x7f0000a4a000), &(0x7f00007c4000)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) fchdir(r0) clone(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000080)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000180)) wait4(0x0, &(0x7f0000000100), 0x40000002, 0x0) 04:37:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7da122b891bfc4e2f00000000000000", 0x10) r2 = accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58) sendmmsg$alg(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c40)="cf592ff1794dd04b665f46c40efc6736fb68aefa0c0c544cfd1901ba51488a96c1", 0x21}], 0x1}], 0x1, 0x0) read(r2, &(0x7f0000000bc0)=""/93, 0xfffffe0a) r3 = getpid() getpgid(r3) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000080)={'bcsf0\x00', 0x3}) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) 04:37:33 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000140)=[{r1, 0x4000}, {r0}, {r0, 0x40300}], 0x3, 0x3) 04:37:33 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)="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", 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000300), 0x12) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x140, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x22c00, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x1f, 0x0, r0}) syz_read_part_table(0x0, 0x1, &(0x7f0000001200)=[{&(0x7f0000000180)}]) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x400) ioctl$KDSETLED(r5, 0x4b32, 0x3) 04:37:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x1) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000013c0)="f3af", 0x2}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x9885, 0x0, 0x0, 0xa48d, 0x8]}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:37:33 executing program 5: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) [ 261.321657] audit: type=1326 audit(1539146253.364:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9221 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0xffff0000 [ 261.752755] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 261.763963] syz-executor1 cpuset=syz1 mems_allowed=0 [ 261.769454] CPU: 1 PID: 9183 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 261.776722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.786060] Call Trace: [ 261.788694] dump_stack+0x1c4/0x2b4 [ 261.792326] ? dump_stack_print_info.cold.2+0x52/0x52 [ 261.797503] ? mark_held_locks+0x130/0x130 [ 261.801721] ? mark_held_locks+0x130/0x130 [ 261.805958] dump_header+0x27b/0xf72 [ 261.809672] ? debug_smp_processor_id+0x1c/0x20 [ 261.814354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.819943] ? pagefault_out_of_memory+0x197/0x197 [ 261.824884] ? debug_smp_processor_id+0x1c/0x20 [ 261.829544] ? perf_trace_lock_acquire+0x15b/0x800 [ 261.834459] ? trace_hardirqs_off+0x310/0x310 [ 261.838957] ? perf_trace_lock+0x7a0/0x7a0 [ 261.843201] ? debug_smp_processor_id+0x1c/0x20 [ 261.847882] ? perf_trace_lock_acquire+0x15b/0x800 [ 261.852831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.858369] ? retint_kernel+0x2d/0x2d [ 261.862266] ? trace_hardirqs_on_caller+0xc0/0x310 [ 261.867199] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 261.871972] ? trace_hardirqs_off+0x310/0x310 [ 261.876489] ? task_will_free_mem+0x239/0xb30 [ 261.880995] ? ___ratelimit+0x36f/0x655 [ 261.884998] ? lock_downgrade+0x900/0x900 [ 261.889201] ? trace_hardirqs_on+0xbd/0x310 [ 261.893522] ? kasan_check_read+0x11/0x20 [ 261.897667] ? ___ratelimit+0x36f/0x655 [ 261.901648] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 261.907101] ? trace_hardirqs_on+0x310/0x310 [ 261.911512] ? lock_downgrade+0x900/0x900 [ 261.915667] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 261.920784] ? ___ratelimit+0xaa/0x655 [ 261.924693] ? idr_get_free+0xec0/0xec0 [ 261.928675] ? kasan_check_write+0x14/0x20 [ 261.932925] ? do_raw_spin_lock+0xc1/0x200 [ 261.937176] oom_kill_process.cold.27+0x10/0x903 [ 261.941950] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 261.946714] ? oom_evaluate_task+0x540/0x540 [ 261.951125] ? oom_badness+0xaa0/0xaa0 [ 261.955037] ? mem_cgroup_scan_tasks+0x141/0x1e0 [ 261.959815] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 261.964589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 261.969351] ? mem_cgroup_iter_break+0x30/0x30 [ 261.973943] ? out_of_memory+0xc4d/0x1430 [ 261.978112] out_of_memory+0xa84/0x1430 [ 261.982122] ? kasan_check_read+0x11/0x20 [ 261.986295] ? oom_killer_disable+0x3a0/0x3a0 [ 261.990799] ? kasan_check_write+0x14/0x20 [ 261.995041] ? do_raw_spin_lock+0xc1/0x200 [ 261.999288] mem_cgroup_out_of_memory+0x15e/0x210 [ 262.004133] ? memcg_memory_event+0x40/0x40 [ 262.008477] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 262.013257] ? page_counter_try_charge+0x1c1/0x220 [ 262.018219] try_charge+0xc43/0x1690 [ 262.021937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 262.027056] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 262.033139] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 262.037994] ? lock_downgrade+0x900/0x900 [ 262.042163] ? retint_kernel+0x2d/0x2d [ 262.046060] ? trace_hardirqs_on_caller+0xc0/0x310 [ 262.050993] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.055750] ? trace_hardirqs_off+0x310/0x310 [ 262.060246] ? mark_held_locks+0x130/0x130 [ 262.064488] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.069248] ? retint_kernel+0x2d/0x2d [ 262.073145] ? try_charge+0x19/0x1690 [ 262.076955] mem_cgroup_try_charge+0x5ea/0xe10 [ 262.081565] ? mem_cgroup_protected+0xa60/0xa60 [ 262.086236] ? retint_kernel+0x2d/0x2d [ 262.090128] ? trace_hardirqs_on_caller+0xc0/0x310 [ 262.095062] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.099822] ? trace_hardirqs_off+0x310/0x310 [ 262.104326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.109088] ? retint_kernel+0x2d/0x2d [ 262.112986] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 262.117920] wp_page_copy+0x46c/0x14f0 [ 262.121809] ? kasan_check_write+0x14/0x20 [ 262.126046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.131597] ? follow_pfn+0x2e0/0x2e0 [ 262.135409] ? do_wp_page+0x76c/0x1390 [ 262.139300] ? lock_downgrade+0x900/0x900 [ 262.143449] ? kasan_check_write+0x14/0x20 [ 262.147688] ? kasan_check_read+0x11/0x20 [ 262.151840] ? do_raw_spin_unlock+0xa7/0x2f0 [ 262.156256] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 262.160855] do_wp_page+0x774/0x1390 [ 262.164582] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 262.169262] ? lock_release+0x970/0x970 [ 262.173243] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.178785] ? kasan_check_write+0x14/0x20 [ 262.183028] ? do_raw_spin_lock+0xc1/0x200 [ 262.187274] __handle_mm_fault+0x2c60/0x53e0 [ 262.191709] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 262.196554] ? __dump_page.cold.2+0x179/0x179 [ 262.201060] ? follow_page_mask+0x18d/0x1fb0 [ 262.205513] ? handle_mm_fault+0x42a/0xc70 [ 262.209764] ? lock_downgrade+0x900/0x900 [ 262.213921] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 262.219751] ? __get_user_pages+0x806/0x1b30 [ 262.224181] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 262.229636] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.235183] ? check_preemption_disabled+0x48/0x200 [ 262.240208] handle_mm_fault+0x54f/0xc70 [ 262.244270] ? __handle_mm_fault+0x53e0/0x53e0 [ 262.248855] ? __get_user_pages+0x1282/0x1b30 [ 262.253356] __get_user_pages+0x806/0x1b30 [ 262.257604] ? follow_page_mask+0x1fb0/0x1fb0 [ 262.262106] ? perf_trace_lock+0x7a0/0x7a0 [ 262.266338] ? lock_acquire+0x1ed/0x520 [ 262.270313] ? __mm_populate+0x31a/0x4d0 [ 262.274377] ? retint_kernel+0x2d/0x2d [ 262.278276] ? trace_hardirqs_on_caller+0xc0/0x310 [ 262.283211] ? lock_release+0x970/0x970 [ 262.287192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.291955] ? trace_hardirqs_off+0x310/0x310 [ 262.296457] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.301243] ? trace_hardirqs_off+0x310/0x310 [ 262.305748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 262.310514] populate_vma_page_range+0x2db/0x3d0 [ 262.315276] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 262.320221] ? __mm_populate+0x2d2/0x4d0 [ 262.324286] __mm_populate+0x286/0x4d0 [ 262.328207] ? populate_vma_page_range+0x3d0/0x3d0 [ 262.333162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.338706] ? ns_capable_common+0x13f/0x170 [ 262.343119] __x64_sys_mlockall+0x45b/0x630 [ 262.347447] ? __ia32_sys_munlock+0x160/0x160 [ 262.351952] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.357343] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 262.362800] ? do_syscall_64+0x290/0x820 [ 262.366870] ? write_comp_data+0x1b/0x70 [ 262.370939] do_syscall_64+0x1b9/0x820 [ 262.374839] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 262.380234] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.385176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.390563] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.395590] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.400613] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.405635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.410505] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.415695] RIP: 0033:0x457579 [ 262.418897] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.437804] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 262.445523] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 262.452809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.460082] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.467355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 262.474624] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 262.482746] Task in /syz1 killed as a result of limit of /syz1 [ 262.488998] memory: usage 204800kB, limit 204800kB, failcnt 403 [ 262.495202] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 262.502113] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 262.508476] Memory cgroup stats for /syz1: cache:0KB rss:195536KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:119460KB [ 262.529965] audit: type=1326 audit(1539146254.554:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9221 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0xffff0000 [ 262.551624] Memory cgroup out of memory: Kill process 9180 (syz-executor1) score 340 or sacrifice child [ 262.561508] Killed process 9234 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 262.577256] oom_reaper: reaped process 9234 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(0xffffffffffffffff, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:34 executing program 0: eventfd(0x5) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d6, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 04:37:34 executing program 3: r0 = epoll_create1(0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6, 0xfffffffffffffffd, 0x1db, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010af5687ad82", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000040)=0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="000226bd7000fcdbdf2504000000600003000800030001000000080007004e2100001400020065727370616e300000000000000000000800080007000000080005007f00000108000500e0000002080003000200000008000500ac1414aa08000300010000000800010002000000080005000000000008000500ea6e00003c00020008000300040000000800060000010000080008000300000008000b000a00000008000500fbffffff08000b000a000000080008007007000020000100140003000000000000000000000000000000000108000100000000002000030008000500ac1414131400020076657468315f746f5f7465616d0000004c00030014000600fe8000000000000000000000000000aa14000600ff02000000000000000000000000000108000500941414aa08000500ffffffff080004002000000008000300020000000800040000800000"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x10) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000001c0)='9p\x00', 0x8000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$can_raw(0x1d, 0x3, 0x1) 04:37:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) fcntl$setpipe(r1, 0x407, 0x3) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x246e21e56541d90a, 0x0, 0x0, 0xfffffffffffffee0) 04:37:34 executing program 4: r0 = socket$inet6(0xa, 0x20800a2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000440)=""/246) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7f8}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000100)=0xf0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x8001, 0x7, 0x0, 0x80, 0x7f, 0x0, 0x20, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000000680)="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") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000200), &(0x7f0000000300)=0xfffffffffffffd14) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000}, "706f72743100000000000000000000000000000a972db50000000000000000000000000000000000000000000000000000000000ffffffffffffffff00", 0x20, 0x100000, 0x5, 0x0, 0x5, 0xf6b8, 0xffffffffffffffff, 0x0, 0x3}) sysfs$1(0x1, &(0x7f0000000180)=',\x00') ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) 04:37:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1000, 0x200000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ashmem\x00', 0x40, 0x0) 04:37:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000080)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x20) r1 = getpgrp(0xffffffffffffffff) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) kcmp(r1, r2, 0x7, r0, r0) [ 262.680821] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:37:34 executing program 5: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x2) close(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) signalfd4(r0, &(0x7f00000000c0)={0x4}, 0xffffffffffffff65, 0x800) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="f9bb91cd7d615600000000000006b0de90", @ANYBLOB="c79be56437fb359b77e2c0618872cb4995a23279c6fbda72fc7151c709ef3ad40d36e75c6e629ebf47f07547227e6156ed3b0eff1171eaa10d005cf07401267162aad9123c87aa85a5ce94d21775022bd24adbc4461a66200379342445c8ac1e49fa6df91bd3abbd7daef9b62bf8a4b164312b808ea169b171e629eeaf98d173193978bb", @ANYRESHEX=r0], @ANYRESHEX=r1, @ANYBLOB=',\x00']) 04:37:34 executing program 4: io_setup(0x2000000000008001, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0xffffffffffff118a, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={r1, r2+30000000}, &(0x7f0000000180)={&(0x7f0000000140)={0x8}, 0x8}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = inotify_init() ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 04:37:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f00000000c0)="2220759980164e71355bf350de05200a947304399beffe6d51d4a8bf707c53054ada5299a274e25c4dd359b6d50c164ac2866d70eb835d459f71a53c55ab28484821cbd73b033a8bdabd874432e99d806ab59d69d41e24a37e0582e16a388f9d0c8935e946e01da9b3d55f6fbe329dfcfce892a086c31410cb2078e847486d29b91c22250960bd72031a08f4db7a5b256566a704da314441df9de524f6dbd831d29e8e160017401eac61d77d7ae66d2c25758d915ed86155c6dba3261c94c83f92f152b7cd88708f0eda96a3f2742457aef28680d54b", 0xd6) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000002c0)={0x4, 0x1}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) mkdirat$cgroup(r3, &(0x7f00000001c0)='syz1\x00', 0x1ff) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) 04:37:34 executing program 5: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x167) sendfile(r0, r0, &(0x7f0000000080), 0x10001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000006c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r4 = socket$nl_generic(0xa, 0x5, 0x84) msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/104) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)=ANY=[]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) dup2(r2, r2) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={r5, @loopback, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000200)=0x1000) readv(r6, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/4096, 0x1002}], 0x1) syncfs(0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @local}, &(0x7f00000001c0)=0xc) fcntl$notify(r4, 0x402, 0x4) 04:37:35 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f0000000400), 0x23) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x8000, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x6202, 0x0) ioctl$KDENABIO(r1, 0x4b36) [ 263.592414] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 263.603763] syz-executor1 cpuset=syz1 mems_allowed=0 [ 263.609484] CPU: 1 PID: 9258 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 263.616766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.626114] Call Trace: [ 263.628715] dump_stack+0x1c4/0x2b4 [ 263.632357] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.637581] ? mark_held_locks+0x130/0x130 [ 263.641829] ? mark_held_locks+0x130/0x130 [ 263.646075] dump_header+0x27b/0xf72 [ 263.649807] ? debug_smp_processor_id+0x1c/0x20 [ 263.654491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.660042] ? pagefault_out_of_memory+0x197/0x197 [ 263.664984] ? debug_smp_processor_id+0x1c/0x20 [ 263.669676] ? perf_trace_lock_acquire+0x15b/0x800 [ 263.674617] ? perf_trace_lock_acquire+0x15b/0x800 [ 263.679559] ? perf_trace_lock+0x7a0/0x7a0 [ 263.683825] ? perf_trace_lock+0x7a0/0x7a0 [ 263.688079] ? debug_smp_processor_id+0x1c/0x20 [ 263.692755] ? perf_trace_lock_acquire+0x15b/0x800 [ 263.697708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.703270] ? perf_trace_lock+0x7a0/0x7a0 [ 263.707514] ? retint_kernel+0x2d/0x2d [ 263.711421] ? trace_hardirqs_on_caller+0xc0/0x310 [ 263.716358] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.721127] ? trace_hardirqs_off+0x310/0x310 [ 263.725653] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.730451] ? retint_kernel+0x2d/0x2d [ 263.734381] ? trace_hardirqs_on+0xb4/0x310 [ 263.738728] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 263.738745] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 263.738762] ? ___ratelimit+0xaa/0x655 [ 263.738780] ? idr_get_free+0xec0/0xec0 [ 263.738794] ? kasan_check_write+0x14/0x20 [ 263.738810] ? do_raw_spin_lock+0xc1/0x200 [ 263.738831] oom_kill_process.cold.27+0x10/0x903 [ 263.738850] ? trace_hardirqs_on+0xb4/0x310 [ 263.738865] ? _raw_spin_unlock_irq+0x56/0x80 [ 263.738883] ? oom_evaluate_task+0x540/0x540 [ 263.738903] ? cgroup_procs_next+0x70/0x70 [ 263.738920] ? _raw_spin_unlock_irq+0x60/0x80 [ 263.738935] ? oom_badness+0xaa0/0xaa0 [ 263.738953] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 263.738968] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.738985] ? mem_cgroup_iter_break+0x30/0x30 [ 263.739010] ? out_of_memory+0xbbb/0x1430 [ 263.739027] out_of_memory+0xa84/0x1430 [ 263.739043] ? kasan_check_read+0x11/0x20 [ 263.739060] ? oom_killer_disable+0x3a0/0x3a0 [ 263.739074] ? kasan_check_write+0x14/0x20 [ 263.739090] ? do_raw_spin_lock+0xc1/0x200 [ 263.739113] mem_cgroup_out_of_memory+0x15e/0x210 [ 263.739128] ? memcg_memory_event+0x40/0x40 [ 263.739142] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 263.739165] ? page_counter_try_charge+0x1c1/0x220 [ 263.739197] try_charge+0xc43/0x1690 [ 263.739221] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 263.739235] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 263.739251] ? lock_downgrade+0x900/0x900 [ 263.739267] ? lock_release+0x970/0x970 04:37:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r3, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r4, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) setresuid(0x0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000140)={r4, &(0x7f00000000c0)=""/119}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) setresgid(r2, r2, r2) 04:37:36 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x101, 0x101000) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) connect$rds(r1, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00b5f3d06999fba6a0a490e8ffffffffffffff000d2115"], 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 04:37:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21}}, 0x2, 0x9}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r2, 0x10000}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x1ff, 0x200, 0x6, 0x95, 0x7ff, 0x80000001, 0x0, 0x9, 0x6b, 0xc54d, 0x5, 0x1ff, 0x76, 0x0, 0x9]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r3, 0x9, 0x6661, 0x815, 0x1, 0x6, 0xdc1, 0xff, {r4, @in6={{0xa, 0x4e21, 0x0, @local, 0x5}}, 0x3, 0x9, 0x80000001, 0x7fff, 0x101}}, &(0x7f0000000340)=0xb0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) 04:37:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={0xffffffffffffff9c, 0x28, &(0x7f0000001440)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000014c0)={r2}, 0xc) getpgid(0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000180)=""/124, 0x7c}], 0x2, &(0x7f0000002840)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/172, 0xac}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f00000025c0)=""/91, 0x5b}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000002740)=""/232, 0xe8}], 0x7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') set_robust_list(&(0x7f00000028c0)={&(0x7f0000002900)={&(0x7f0000001400)}}, 0x18) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002940), &(0x7f0000002980)=0xc) sendfile(r1, r3, &(0x7f00000002c0)=0xc00, 0x10000000000443) sendmsg$can_bcm(r1, &(0x7f0000002c40)={&(0x7f0000002b00), 0x10, &(0x7f0000002c00)={&(0x7f0000002b80)={0x6, 0x0, 0xfffffffffffffe00, {}, {0x77359400}, {0x0, 0x2, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x9, 0x8}, 0x0, 0x1, 0x0, 0x0, "0511ae3f403807b93edf09eff24170c0402aa1805c447abc3413190df074e41895e3c927dbad42e36fb8658878cfe77b17e9f04bfbb670178ba1d9688aa5a74c"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000300)={0x1, 0x2, 0x7f, 0x65a6}) [ 263.739287] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 263.739316] ? get_mem_cgroup_from_mm+0x206/0x440 [ 263.739333] ? mem_cgroup_can_attach+0x580/0x580 [ 263.739359] ? __might_sleep+0x95/0x190 [ 263.739378] mem_cgroup_try_charge+0x5ea/0xe10 [ 263.739419] ? reuse_swap_page+0x403/0x1520 [ 263.739440] ? mem_cgroup_protected+0xa60/0xa60 [ 263.739456] ? swp_swapcount+0x530/0x530 [ 263.739472] ? pagevec_lru_move_fn+0x259/0x350 [ 263.739494] ? trace_hardirqs_on+0xbd/0x310 [ 263.739506] ? kasan_check_read+0x11/0x20 [ 263.739519] ? pagevec_lru_move_fn+0x259/0x350 [ 263.739557] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 263.739579] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 263.739598] wp_page_copy+0x46c/0x14f0 [ 263.739610] ? kasan_check_write+0x14/0x20 [ 263.739626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.739648] ? follow_pfn+0x2e0/0x2e0 [ 263.739667] ? do_wp_page+0x76c/0x1390 [ 263.739683] ? lock_downgrade+0x900/0x900 [ 263.739698] ? kasan_check_write+0x14/0x20 [ 263.739714] ? kasan_check_read+0x11/0x20 [ 263.739730] ? do_raw_spin_unlock+0xa7/0x2f0 [ 263.739747] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 263.739763] ? __pte_alloc_kernel+0x220/0x220 [ 263.739787] do_wp_page+0x774/0x1390 [ 263.739808] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 263.739828] ? lock_release+0x970/0x970 [ 263.739862] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.739878] ? kasan_check_write+0x14/0x20 [ 263.739893] ? do_raw_spin_lock+0xc1/0x200 [ 263.739914] __handle_mm_fault+0x2c60/0x53e0 [ 263.739936] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 263.739950] ? __dump_page.cold.2+0x179/0x179 [ 263.739980] ? follow_page_mask+0x92a/0x1fb0 [ 263.740000] ? follow_page_mask+0x18d/0x1fb0 [ 263.740032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.740052] ? retint_kernel+0x2d/0x2d [ 263.740074] ? handle_mm_fault+0x4ce/0xc70 [ 263.740095] handle_mm_fault+0x54f/0xc70 [ 263.740114] ? __handle_mm_fault+0x53e0/0x53e0 [ 263.740131] ? __get_user_pages+0x135e/0x1b30 [ 263.740151] __get_user_pages+0x806/0x1b30 [ 263.740184] ? follow_page_mask+0x1fb0/0x1fb0 [ 263.740205] ? perf_trace_lock+0x7a0/0x7a0 [ 263.740225] ? lock_acquire+0x1ed/0x520 [ 263.740239] ? __mm_populate+0x31a/0x4d0 [ 263.740255] ? retint_kernel+0x2d/0x2d [ 263.740270] ? trace_hardirqs_on_caller+0xc0/0x310 [ 263.740284] ? lock_release+0x970/0x970 [ 263.740299] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.740315] ? trace_hardirqs_off+0x310/0x310 [ 263.740329] ? trace_hardirqs_on_caller+0xc0/0x310 [ 263.740346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.740368] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.740388] populate_vma_page_range+0x2db/0x3d0 [ 263.740418] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 263.740441] __mm_populate+0x286/0x4d0 [ 263.740462] ? populate_vma_page_range+0x3d0/0x3d0 [ 263.740481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.740497] ? ns_capable_common+0x13f/0x170 [ 263.740514] __x64_sys_mlockall+0x45b/0x630 [ 263.740528] ? __ia32_sys_munlock+0x160/0x160 [ 263.740545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.740560] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.740576] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 263.740591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.740615] do_syscall_64+0x1b9/0x820 [ 263.740630] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 263.740647] ? syscall_return_slowpath+0x5e0/0x5e0 [ 263.740676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.740692] ? trace_hardirqs_on_caller+0x310/0x310 [ 263.740708] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 263.740725] ? prepare_exit_to_usermode+0x291/0x3b0 [ 263.740744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.740765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.740776] RIP: 0033:0x457579 [ 263.740791] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.740799] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 263.740815] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 263.740824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 263.740833] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 04:37:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x220000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 04:37:36 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4b2ae6ecf7e4b755d7bcce5bf1727543e2f50d4e1a0dbf44a310aaae9b8c7394f437e3408286410178bb42f355a302af08d4391ee93a2162172005021057"]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000600)=r0) 04:37:36 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x3c, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3, 0x8000, 0x8, 0x8, 0x6, 0x401, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x6, 0x63e, 0x7ff, 0x5, 0xfffffffffffffc00}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r1, 0x200}, &(0x7f0000000240)=0x8) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x1000, 0x2}, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r2, 0x36, "1d1269d9dae4cc4fea8994c0927c14459f6643fbf937c12be476e17dcd1df3e8e496c5dcd9f6673977fb340938166c68c42df4a48a41"}, &(0x7f00000002c0)=0x3e) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000340), 0x800) 04:37:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000180)={0x1, 0x6, 0x56a, 0x8c, '\x00', 0x3}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc0189436, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 04:37:36 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0xffff, 0xc, [0x5, 0x8, 0x100000001]}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0xfffffffffffffe21, &(0x7f0000000340), 0x1000000000000282, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000010000800000000000000000995c090bac7e4813327d8fdd67c79254ae12d5a28da3b62f6dad845f04b19c9afacccf1ad86c00000000000000000000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410001, 0x1) [ 263.740842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 263.740851] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 263.750552] Task in /syz1 killed as a result of limit of /syz1 [ 263.750713] memory: usage 204800kB, limit 204800kB, failcnt 422 [ 263.750774] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 263.750812] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 04:37:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40040, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0xa, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x4, 0x8a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x50, 0x230298596a74b8e6, 'syzkaller1\x00', 'ip6gretap0\x00', 'bcsh0\x00', 'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0x0, 0x0, 0x8053c809022c159d], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x70, 0x118, 0x150}, [@common=@nflog={'nflog\x00', 0x50, {{0x19a, 0x101, 0x3, 0x0, 0x0, "37283688363d04cf25869549188385c8d016b0b9eae8ae5cb49e27b03cc8c9d33cc67e994a731d2885dff8940310852d63ae601f5ecfa7651e7553534c8f945c"}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}}, {{{0xf, 0x5, 0x6006, 'tunl0\x00', 'eql\x00', 'gretap0\x00', 'tunl0\x00', @dev={[], 0x1f}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @random="bb769dc36da2", [0x0, 0xff, 0xff, 0xff, 0xff], 0x108, 0x188, 0x1b8, [@physdev={'physdev\x00', 0x70, {{'bond_slave_1\x00', {}, 'veth1_to_team\x00', {}, 0x11, 0x10}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"acf569bf9388aefcc06426facdded9e2efa5c45974161c4dcc5b772d19f7"}}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x17, 0x12, 0xeafe, 'sit0\x00', 'team_slave_1\x00', 'bridge_slave_0\x00', 'veth0_to_bond\x00', @empty, [0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x198, 0x198, 0x210, [@comment={'comment\x00', 0x100}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x3f, 0x7, 0x0, 0x0, "0d81f145c13eef63750771fe5f074dd823562eba01c7541d10b7b0f1b7a865e8fd3099997777b3f9a7e6e6c51f10ee70750b845ec21c2b355d0e2eb878054b9f"}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x5, 0x0, 0x88ff, 'bridge_slave_1\x00', 'ip6_vti0\x00', 'erspan0\x00', 'syzkaller1\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0x2d0, 0x300}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80800, 'unconfined\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:sshd_key_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xffffffff}}}}]}]}, 0x920) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000080607031dfffd946fa283000c200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 263.750864] Memory cgroup stats for /syz1: cache:0KB rss:195308KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:119264KB [ 263.751489] Memory cgroup out of memory: Kill process 9257 (syz-executor1) score 344 or sacrifice child [ 263.751980] Killed process 9284 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 263.759684] oom_reaper: reaped process 9284 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x100000000003) bind$netlink(r0, &(0x7f0000514ff4), 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc) 04:37:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r3, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r4, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) mmap$binder(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 04:37:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0xff, @mcast2, 0x10000}}, 0x6, 0x693a, 0x1, "9b25c53a6f0be53063c057903f2267478c7a9ba880cad7f0dae4d4e53476ecd7dbd30e772e3e2a4a4cc552255dff02bd278d86caf29a3f7c3356310da68f782db034900a1c25960c10cbbe907e01b80b"}, 0xd8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2b161344, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)="696f2eab0e0ea5", 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x10000000000000ea) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000300)={0x2, 0x1, 0xad4, 0x4, 0x1, 0x7fffffff}) io_setup(0x3ff, &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000000c0)={r7}) io_submit(r6, 0x0, &(0x7f00000002c0)) 04:37:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r1, r2, r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000003c00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 04:37:36 executing program 2: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x18) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40084503, &(0x7f0000000040)={0x2, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, "8c9e1194c26cb64c290548fd762de8b198361677a72b6f8bf6f2ef2f84110e91"}) 04:37:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7, 0x1, [0x603628d4]}, &(0x7f0000000140)=0xa) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x800}, 0x8) getegid() setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x2400, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000000000b, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x4004550c, &(0x7f0000000080)) 04:37:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r3, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r4, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r6 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:37 executing program 3: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x10000) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000100), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) write$P9_RLERRORu(r0, &(0x7f0000000180)={0x33, 0x7, 0x0, {{0x26, '*bdeveth1-](vmnet1lovboxnet1ppp1@em0,\\'}, 0x2}}, 0x33) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/163, &(0x7f0000000280)=0xa3) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 04:37:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03]}) 04:37:37 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="630000007d020000005c00080009000000081e00000005000000000000000000004005000000a1000000010000001300000008002773656c696e7578000017002d2465746830706f7369785f61636c5f616363657373270a006d696d655f7479706525"], 0x63) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x5}, 0xb) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xffffffffffffffff, 0x9, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000003, 0x1) 04:37:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) syz_open_dev$sndtimer(&(0x7f00000007c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x4, 0x105082) prctl$setfpexc(0xc, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r3 = getpgrp(r2) tgkill(r3, 0x0, 0x3) r4 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000002c0)={[{0x25, 0x4, 0x0, 0x5, 0x1, 0x0, 0x7, 0x9, 0xffff, 0x0, 0x8, 0x8, 0x1}, {0x4, 0xffffffffffffbfe9, 0x0, 0x1f, 0xffffffffffffffc1, 0x202, 0x8, 0x6, 0x7, 0x0, 0x80000001, 0x0, 0xdb05}, {0x8, 0x2, 0x5, 0x0, 0x6, 0x9, 0x0, 0x9, 0x3ff, 0x8000, 0x2, 0x0, 0x7ff}], 0x10001}) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) syz_open_dev$ndb(&(0x7f0000000800)='/dev/nbd#\x00', 0x0, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000380)={0x7fffffff, 0xffff}) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000002) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000280)={0xd63c000000000, 0x0, 0x1, 0x4, 0x6}) 04:37:37 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffffffffffff}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xffe0) [ 265.975697] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 265.986824] syz-executor1 cpuset=syz1 mems_allowed=0 [ 265.992371] CPU: 1 PID: 9380 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 265.999658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.009036] Call Trace: [ 266.011635] dump_stack+0x1c4/0x2b4 [ 266.015272] ? dump_stack_print_info.cold.2+0x52/0x52 [ 266.020473] ? mark_held_locks+0x130/0x130 [ 266.024716] ? mark_held_locks+0x130/0x130 [ 266.028965] dump_header+0x27b/0xf72 [ 266.032692] ? debug_smp_processor_id+0x1c/0x20 [ 266.037385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.042941] ? pagefault_out_of_memory+0x197/0x197 [ 266.047899] ? debug_smp_processor_id+0x1c/0x20 [ 266.052580] ? perf_trace_lock_acquire+0x15b/0x800 [ 266.057531] ? perf_trace_lock_acquire+0x15b/0x800 [ 266.062474] ? perf_trace_lock+0x7a0/0x7a0 [ 266.066716] ? perf_trace_lock+0x7a0/0x7a0 [ 266.070977] ? debug_smp_processor_id+0x1c/0x20 [ 266.075657] ? perf_trace_lock_acquire+0x15b/0x800 [ 266.080599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.086147] ? perf_trace_lock+0x7a0/0x7a0 [ 266.090414] ? trace_hardirqs_off+0x310/0x310 [ 266.094926] ? task_will_free_mem+0x239/0xb30 [ 266.099446] ? ___ratelimit+0x36f/0x655 [ 266.103434] ? lock_downgrade+0x900/0x900 [ 266.107610] ? trace_hardirqs_on+0xbd/0x310 [ 266.111950] ? kasan_check_read+0x11/0x20 [ 266.116118] ? ___ratelimit+0x36f/0x655 [ 266.120102] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 266.125560] ? trace_hardirqs_on+0x310/0x310 [ 266.129975] ? lock_downgrade+0x900/0x900 [ 266.134128] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 266.139232] ? ___ratelimit+0xaa/0x655 [ 266.143127] ? idr_get_free+0xec0/0xec0 [ 266.147103] ? kasan_check_write+0x14/0x20 [ 266.151344] ? do_raw_spin_lock+0xc1/0x200 [ 266.155583] oom_kill_process.cold.27+0x10/0x903 [ 266.160368] ? kasan_check_write+0x14/0x20 [ 266.164657] ? do_raw_spin_lock+0xc1/0x200 [ 266.168914] ? oom_evaluate_task+0x540/0x540 [ 266.173342] ? cgroup_procs_next+0x70/0x70 [ 266.177584] ? _raw_spin_unlock_irq+0x60/0x80 [ 266.182088] ? oom_badness+0xaa0/0xaa0 [ 266.186012] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 266.190790] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 266.195553] ? mem_cgroup_iter_break+0x30/0x30 [ 266.200152] ? out_of_memory+0xca/0x1430 [ 266.204225] out_of_memory+0xa84/0x1430 [ 266.208208] ? kasan_check_read+0x11/0x20 [ 266.212367] ? oom_killer_disable+0x3a0/0x3a0 [ 266.216873] ? kasan_check_write+0x14/0x20 [ 266.221117] ? do_raw_spin_lock+0xc1/0x200 [ 266.225369] mem_cgroup_out_of_memory+0x15e/0x210 [ 266.230225] ? memcg_memory_event+0x40/0x40 [ 266.234563] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 266.239331] ? page_counter_try_charge+0x1c1/0x220 [ 266.244266] try_charge+0xc43/0x1690 [ 266.248009] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.253124] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 266.259188] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 266.264033] ? lock_downgrade+0x900/0x900 [ 266.268191] ? lock_release+0x970/0x970 [ 266.272183] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 266.277983] ? trace_hardirqs_on_caller+0xc0/0x310 [ 266.282920] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 266.287675] ? mark_held_locks+0x130/0x130 [ 266.291916] ? get_mem_cgroup_from_mm+0x206/0x440 [ 266.296763] ? mem_cgroup_can_attach+0x580/0x580 [ 266.301515] ? retint_kernel+0x2d/0x2d [ 266.305421] mem_cgroup_try_charge+0x5ea/0xe10 [ 266.310007] ? mem_cgroup_protected+0xa60/0xa60 [ 266.314683] ? swp_swapcount+0x530/0x530 [ 266.318782] ? pagevec_lru_move_fn+0x259/0x350 [ 266.323416] ? trace_hardirqs_on+0xbd/0x310 [ 266.327775] ? kasan_check_read+0x11/0x20 [ 266.331943] ? pagevec_lru_move_fn+0x259/0x350 [ 266.336580] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 266.342127] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 266.347098] wp_page_copy+0x46c/0x14f0 [ 266.351034] ? kasan_check_write+0x14/0x20 [ 266.355274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.360829] ? follow_pfn+0x2e0/0x2e0 [ 266.364646] ? do_wp_page+0x76c/0x1390 [ 266.368544] ? lock_downgrade+0x900/0x900 [ 266.372700] ? kasan_check_write+0x14/0x20 [ 266.376947] ? kasan_check_read+0x11/0x20 [ 266.381104] ? do_raw_spin_unlock+0xa7/0x2f0 [ 266.385539] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 266.390635] ? __pte_alloc_kernel+0x220/0x220 [ 266.395144] do_wp_page+0x774/0x1390 [ 266.398875] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 266.403572] ? lock_release+0x970/0x970 [ 266.407565] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 266.413107] ? kasan_check_write+0x14/0x20 [ 266.417356] ? do_raw_spin_lock+0xc1/0x200 [ 266.421626] __handle_mm_fault+0x2c60/0x53e0 [ 266.426061] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 266.430935] ? __dump_page.cold.2+0x179/0x179 [ 266.435441] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 266.440206] ? follow_page_mask+0x18d/0x1fb0 [ 266.444645] ? handle_mm_fault+0x42a/0xc70 [ 266.448882] ? lock_downgrade+0x900/0x900 [ 266.453049] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 266.458862] ? retint_kernel+0x2d/0x2d [ 266.462765] ? __get_user_pages+0x806/0x1b30 [ 266.467181] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 266.472643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 266.478184] ? check_preemption_disabled+0x48/0x200 [ 266.483207] handle_mm_fault+0x54f/0xc70 [ 266.487269] ? __handle_mm_fault+0x53e0/0x53e0 [ 266.491864] ? __get_user_pages+0x55f/0x1b30 [ 266.496275] __get_user_pages+0x806/0x1b30 [ 266.500534] ? follow_page_mask+0x1fb0/0x1fb0 [ 266.505058] ? retint_kernel+0x2d/0x2d [ 266.508945] ? trace_hardirqs_on_caller+0xc0/0x310 [ 266.513890] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 266.518658] ? trace_hardirqs_off+0x310/0x310 [ 266.523150] ? lock_release+0x970/0x970 [ 266.527127] ? arch_local_save_flags+0x40/0x40 [ 266.531709] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 266.536479] populate_vma_page_range+0x2db/0x3d0 [ 266.541241] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 266.546169] ? find_vma+0x34/0x190 [ 266.549716] __mm_populate+0x286/0x4d0 [ 266.553653] ? populate_vma_page_range+0x3d0/0x3d0 [ 266.558596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.564132] ? ns_capable_common+0x13f/0x170 [ 266.568538] __x64_sys_mlockall+0x45b/0x630 [ 266.572856] ? __ia32_sys_munlock+0x160/0x160 [ 266.577366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 266.582916] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.588282] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 266.593733] ? do_futex+0x26d0/0x26d0 [ 266.597533] ? do_syscall_64+0x179/0x820 [ 266.601604] do_syscall_64+0x1b9/0x820 [ 266.605505] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 266.610867] ? syscall_return_slowpath+0x5e0/0x5e0 [ 266.615791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.620661] ? trace_hardirqs_on_caller+0x310/0x310 [ 266.625707] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 266.630720] ? prepare_exit_to_usermode+0x291/0x3b0 [ 266.635736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.640585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 266.645767] RIP: 0033:0x457579 [ 266.648956] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 266.667897] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 266.675629] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 266.682917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 266.690195] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 266.697454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 266.704722] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 266.714837] Task in /syz1 killed as a result of limit of /syz1 [ 266.721013] memory: usage 204740kB, limit 204800kB, failcnt 456 [ 266.727129] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 266.734004] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 266.740226] Memory cgroup stats for /syz1: cache:0KB rss:195044KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:119024KB [ 266.762016] Memory cgroup out of memory: Kill process 9378 (syz-executor1) score 344 or sacrifice child [ 266.771662] Killed process 9416 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 266.786744] oom_reaper: reaped process 9416 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:38 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) symlink(&(0x7f0000004000)='./file0\x00', &(0x7f0000000180)='./control\x00') rename(&(0x7f00000000c0)='./control\x00', &(0x7f0000000080)='./control\x00') 04:37:38 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r1, 0x4}, &(0x7f0000000300)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000040)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000140)='./file0/file0\x00', r2}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0/file0\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:37:38 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) unshare(0x24040000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) write$P9_RLERRORu(r1, &(0x7f00000001c0)={0x11, 0x7, 0x1, {{0x4, 'bbr\x00'}, 0x5}}, 0x11) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000100), 0xacdbf90f7b4ecd63, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @ipv4={[0x6453af3d52000000, 0x20eb7d0a70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0100], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1c) creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = gettid() ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{0x5, 0xffffffff}, 'port1\x00', 0x81, 0x20000, 0x80000001, 0x4, 0xff, 0x2, 0x1, 0x0, 0x3}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x3f) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000140)={r6, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000280)=0x84) r7 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 04:37:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4400, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x2, 0x7f, 0x46e9, 0x0, 0x4, 0x9, 0x7, 0x3d9a, 0x9c, 0x1, 0x3, 0xdd2, 0x0, 0x3, 0x5, 0x0, 0xfe65, 0x6, 0x82}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000000000000000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000680)={{}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, 0xffffffffffffffff}) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getuid() getgroups(0x4, &(0x7f0000000600)=[0xee00, 0xffffffffffffffff, 0xee01, 0xee00]) stat(&(0x7f0000000640)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = geteuid() lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000c40)=0xe8) getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="00060000000000000400000000000000000000000000000003000000000000000500000000000000ffffffffffffffff040000003f0000000300000000000000010000800000000002000000000000000700000000000000b300000000000000e0ffffffffffffff4e05000001000000010000001403000004000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="04000000af00000000000000020000000000000004000000000000000a000000010000002f6465762f6e756c6c00000000000000000000000000000001000000000000000300000000000000040000000000000003000000ff0000000600000000000000090000000000000003000000000000000600000000000000a905000000000000070000000000000025a100000000010001000100020c000007000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="09000000ffffffff000000000400000000000000010000000000000001000000018000002b000000000000000200000000000000030000000000000004000000000000001f00000000000000090000000200000005000000000000000604000000000000ff00000058e088ae399e76c60000000000000000000000000100000001000000f90e0000020000005c520000ff7f000006000000721e6c7f89efb9caaea8e22f6d28895de7073c7668d7c59bde6977f91400ee457b4a0aacde1253bd9260d1406ca182828412f13924fa0a3155cc121874af8522275b0c6156", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000004000000000000000000000000000000004000000000000000000000000000000030000000000000000000000000000000600000000000000080000000000000005000000060000000200000000000000730a0000000000000000000000000000bd0e0000000000000000000000000000000000000000000005000000ff0700009a00000007000000ff000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="01010000e004000000000000050000000000000003000000000000000d000000000400002d2f766d6e6574315e25656d300000000100000000000000010000000000000007000000000000000000008000000000080000007f0000000100000000000000c3e6000000000000ba000000000000000500000000000000040000000000000000100000000000004000000007000000020000000300000005000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="03000000018000000000000001000000000000000000010000000000430000004cc8000047504c2e6e6f646576253a7b6c6f2d62646576f82f7bb26e6f646576707070316367726f7570776c616e30766d6e6574306d696d655f7479706576626f786e657430100000000000000000000000000000000000000000000100000000000000199c00000000000009000000020000000100000000000000000000800000000004000000000000000400000000000000030000000000000080000000000000000900000006000000010000000300000055990000", @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0180000007000000000000000300000000000000370000000000000000000000000000000200000000000000010000000000000004000000000000000300000000000000910000000000000002000000000000002605000000000000800000000000000000000000000000009c00000000000000030000000000000080000000080000000800000000040000ff030000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0500000000000000000000000500000000000000010000000000000008000000810000002375736572252ccb00000000000000000000000000000000ff7f0000000000000000400000000000ffffffff010000000400000000000000040000000000000007000000000000000300000000000000010400000000000000800000000000000800000081000000ffffff7f0100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="f7ffffff06000000000000000600000000000000010001000000000009000000090000002f6465762f6b766d0000000000000000060000000000000001000000000000000200000000000000020000000000000001000000090000000100000000000000de00000000000000d607000000000000000000000000c841010000000000000009000000000000000500000005000000f7ffffffe600000005000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="0400000009000000000000000500000000000000080000000000000009000000a420ffff2f6465762f6b766d0000000000000000"], 0x600) 04:37:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x4, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, 0xffffffffffffffe5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000280), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000800ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a000000000000009c0da41249096e152c50619ca436658b9cc28d3e3e597deabba8c6825a27c7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000000140)=0xc8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x280301, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f00000001c0)=""/23) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000200)={0x7fff, 0x8, 0x9}) 04:37:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x200000006) recvmsg(r0, &(0x7f0000000200)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001480)=""/120, 0x78}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@get={0x1, &(0x7f0000000240)=""/118, 0xbc34}) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x28000) getdents(r1, &(0x7f0000000100)=""/146, 0x92) 04:37:38 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e24, @broadcast}}) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000002c0)) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffffe) keyctl$clear(0x7, r2) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000004000000600", 0xc7, 0x80003}) lseek(r3, 0x0, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f00000013c0)="2279560985318d4637c6928615e8dc890a07fc659a1ced2cd642d0c0ccb130a8474e513ed9485f2e6e4d1d840b2edf54bc7afaa6c1c2a7be1bcb38e76413617140977f81e7adef5e54024d6ae98c304636bffcaeda887813358fcd7981d297714178e5e753ad1192c50c478ad1cb5a79d3c156cbb3de5e6d5a35a7cf5b29bcd7fe169f0aca60b4b0d3494c19170e15") close(r1) [ 266.914252] *** Guest State *** [ 266.923728] CR0: actual=0xffffffff9fffffff, shadow=0xffffffffffffffff, gh_mask=fffffffffffffff7 [ 266.933695] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 266.947580] CR3 = 0x0000000000000000 [ 266.952252] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 04:37:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x3, &(0x7f0000000480)=[{&(0x7f0000000240)="8bef5266bd5094c438152591e10aeb332c87012083b58d2102e9f75e7f80c994599147caf1ce4e90463c50b238fb63e184079e520fcb3a73b70e8f47bc9b92a7febfb18239906cefcd1661c50c4f9a0da5604a75ab", 0x55, 0x8}, {&(0x7f00000002c0)="b5b6028ab6f9486dcd21480d3cd278286c103d7657d1661ced0648c6de5ad6c1c91b971a68c4dd9efd09d5efd215fd5801c87b1c44b3dc26600720dca45cd81cc86b35671f4e4da225bd1e7e5d08a902fe1ec55b1699e35a331662cca073da8bef7802379e565ecae4ec15876a61c11d0ce5954bb4bd9d5b89da6b8dfe5f8ac51c0a289c3785aec6eff524600dd4aab0f5b8d74a47920a534493b0a620b84e8701ef0adbe7822b8b", 0xa8, 0x4}, {&(0x7f0000000380)="041da69dc3708d76249f26375aae99338d7921bde5c64c29c3f5716098040682d83611067ead1aa839c50edaef9845bb3c736a306befa4a854924e0b13a5678558c01f0be83855a6a25e598f765edcae4b3686810a2acffa672f6ea68f7f2f8659ac7ea4ba6372fe6de2291679e5ffecfaf17adc66748f8d1bdeddbe57d59605bb411ce030f0d45c839bb8cd06d9c885c2e2ec56b742d422a5ed35eea1348082e84cb7a4b38be5763bae9d83f1b31388cc955efccf169255a8535d982ac4c8506a9b956c3fd79cc198cf8e3797d5166cc6eba1d247535184b28a437175296b711ac12d25d5164da757a4542d37be5979", 0xf0, 0x20}], 0x800, &(0x7f00000005c0)={[{@umask={'umask', 0x3d, 0x8}}, {@session={'session', 0x3d, 0x4}}], [{@uid_gt={'uid>', r0}}]}) syz_mount_image$f2fs(&(0x7f0000000640)='f2fs\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7cb2e9acbea566e0726963742ceea1666c7573685f6d657267ce1dd133bb3536ed"]) [ 266.971076] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 266.980765] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 267.006597] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 04:37:39 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0xffffffffffffffff, 0x70) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x401, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x73, 0xf000}) 04:37:39 executing program 3: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)={0x0, 0x5, [@local, @remote, @broadcast, @broadcast, @local]}) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{&(0x7f0000000500)="4efb", 0x2}], 0x0, &(0x7f0000000000)=ANY=[]) syz_read_part_table(0x0, 0xaaaaaaaaaaaad3f, &(0x7f0000000240)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x10001}) [ 267.035520] hfs: unable to parse mount options [ 267.044391] DS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 267.056166] encrypted_key: master key parameter 'ï›oOÈTƒŸ‚"ïÊ+o$Nq§ëÇ%Q؃ßu7ç¥7]PàÌ9Sÿ1dµõ€£·X‡nò&QY¯”Ú¶ó6' is invalid [ 267.067906] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 267.076978] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 267.112260] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 267.128206] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 267.145166] f2fs_msg: 6 callbacks suppressed [ 267.145201] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 04:37:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235010000000f301c000f01cbb9800000c00f3235010000000f300f01c86736f36f0f01df0f2083ea0058000065000fc79b01000000", 0x3c}], 0x1, 0x0, &(0x7f0000000480)=[@flags], 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) r3 = accept$unix(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000140)=0x6e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000600)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000680)={0x10, 0x30, 0xfa00, {&(0x7f00000005c0), 0x2, {0xa, 0x4e24, 0x4, @local, 0x1}, r5}}, 0x38) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0xefff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000500), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)={r7}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x81, 0x402503) ioctl$RTC_AIE_OFF(r6, 0x7002) getsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @local}, &(0x7f0000000500)=0x8) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000000)) socket(0xb, 0x4, 0x80) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 267.172025] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.185591] GDTR: limit=0x00000000, base=0x0000000000000000 [ 267.198275] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 267.206495] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.238222] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 267.245836] IDTR: limit=0x00000000, base=0x0000000000000000 [ 267.268512] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.275709] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 267.286398] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.296583] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 267.299816] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 267.304078] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 267.310217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 267.318651] Interruptibility = 00000000 ActivityState = 00000000 [ 267.332929] *** Host State *** [ 267.336528] RIP = 0xffffffff81212b2e RSP = 0xffff880186e37350 [ 267.368156] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 267.387256] FSBase=00007f5cd7831700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 267.397752] hfs: unable to parse mount options [ 267.430301] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 267.442308] CR0=0000000080050033 CR3=00000001c4848000 CR4=00000000001426f0 [ 267.450002] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 267.456866] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 267.463345] *** Control State *** [ 267.466963] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 267.474141] EntryControls=0000d1ff ExitControls=002fefff [ 267.488397] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 267.502736] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 267.527150] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 267.560016] reason=80000021 qualification=0000000000000000 [ 267.589810] IDTVectoring: info=00000000 errcode=00000000 [ 267.612237] TSC Offset = 0xffffff6eeb0c68ee [ 267.628304] TPR Threshold = 0x00 [ 267.640067] EPT pointer = 0x00000001c601a01e [ 267.780793] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 267.792007] syz-executor1 cpuset=syz1 mems_allowed=0 [ 267.797349] CPU: 1 PID: 9446 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 267.804674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.814024] Call Trace: [ 267.816642] dump_stack+0x1c4/0x2b4 [ 267.820298] ? dump_stack_print_info.cold.2+0x52/0x52 [ 267.825509] ? mark_held_locks+0x130/0x130 [ 267.829752] ? mark_held_locks+0x130/0x130 [ 267.834022] dump_header+0x27b/0xf72 [ 267.837749] ? debug_smp_processor_id+0x1c/0x20 [ 267.842436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.847995] ? pagefault_out_of_memory+0x197/0x197 [ 267.852962] ? debug_smp_processor_id+0x1c/0x20 [ 267.857651] ? perf_trace_lock_acquire+0x15b/0x800 [ 267.862599] ? perf_trace_lock_acquire+0x15b/0x800 [ 267.867537] ? perf_trace_lock+0x7a0/0x7a0 [ 267.871773] ? perf_trace_lock+0x7a0/0x7a0 [ 267.876020] ? debug_smp_processor_id+0x1c/0x20 [ 267.880710] ? perf_trace_lock_acquire+0x15b/0x800 [ 267.885647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.889192] encrypted_key: master key parameter 'ï›oOÈTƒŸ‚"ïÊ+o$Nq§ëÇ%Q؃ßu7ç¥7]PàÌ9Sÿ1dµõ€£·X‡nò&QY¯”Ú¶ó6' is invalid [ 267.891210] ? perf_trace_lock+0x7a0/0x7a0 [ 267.891232] ? retint_kernel+0x2d/0x2d [ 267.910426] ? trace_hardirqs_on_caller+0xc0/0x310 [ 267.915367] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 267.920152] ? trace_hardirqs_off+0x310/0x310 [ 267.924670] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 267.929466] ? retint_kernel+0x2d/0x2d [ 267.933368] ? trace_hardirqs_on+0xb4/0x310 [ 267.937708] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 267.942821] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 267.947937] ? ___ratelimit+0xaa/0x655 [ 267.951834] ? idr_get_free+0xec0/0xec0 [ 267.955820] ? kasan_check_write+0x14/0x20 [ 267.960066] ? do_raw_spin_lock+0xc1/0x200 [ 267.964346] oom_kill_process.cold.27+0x10/0x903 [ 267.969131] ? trace_hardirqs_on+0xb4/0x310 [ 267.973470] ? _raw_spin_unlock_irq+0x56/0x80 [ 267.977979] ? oom_evaluate_task+0x540/0x540 [ 267.982446] ? cgroup_procs_next+0x70/0x70 [ 267.986704] ? _raw_spin_unlock_irq+0x56/0x80 [ 267.991223] ? _raw_spin_unlock_irq+0x60/0x80 [ 267.995734] ? oom_badness+0xaa0/0xaa0 [ 267.999635] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 268.004400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.009188] ? mem_cgroup_iter_break+0x30/0x30 [ 268.013786] ? oom_badness+0xaa0/0xaa0 [ 268.017685] out_of_memory+0xa84/0x1430 [ 268.021674] ? retint_kernel+0x2d/0x2d [ 268.025579] ? oom_killer_disable+0x3a0/0x3a0 [ 268.030093] ? trace_hardirqs_on+0xb4/0x310 [ 268.034459] ? _raw_spin_unlock_irqrestore+0xb4/0xd0 [ 268.034481] mem_cgroup_out_of_memory+0x15e/0x210 [ 268.034518] ? page_counter_try_charge+0xbb/0x220 [ 268.049279] ? memcg_memory_event+0x40/0x40 [ 268.053617] ? page_counter_try_charge+0x1c1/0x220 [ 268.053642] try_charge+0xc43/0x1690 [ 268.062283] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.067413] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 268.073478] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 268.078332] ? lock_downgrade+0x900/0x900 [ 268.082498] ? lock_release+0x970/0x970 [ 268.086498] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 268.092324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.097879] ? get_mem_cgroup_from_mm+0x206/0x440 [ 268.102744] ? mem_cgroup_can_attach+0x580/0x580 [ 268.107534] ? __might_sleep+0x95/0x190 [ 268.111532] mem_cgroup_try_charge+0x5ea/0xe10 [ 268.116157] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 268.121624] ? mem_cgroup_protected+0xa60/0xa60 [ 268.126305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.131869] ? retint_kernel+0x2d/0x2d [ 268.135768] ? trace_hardirqs_on_caller+0xc0/0x310 [ 268.140708] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.145474] ? trace_hardirqs_off+0x310/0x310 [ 268.149980] ? finish_task_switch+0x1b5/0x900 [ 268.154488] ? __switch_to_asm+0x34/0x70 [ 268.158568] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.163354] ? retint_kernel+0x2d/0x2d [ 268.167263] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 268.172208] wp_page_copy+0x46c/0x14f0 [ 268.172230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.180860] ? follow_pfn+0x2e0/0x2e0 [ 268.180880] ? do_wp_page+0x76c/0x1390 [ 268.180898] ? kasan_check_write+0x14/0x20 [ 268.180919] ? preempt_schedule+0x4d/0x60 [ 268.196979] ? preempt_schedule_common+0x1f/0xd0 [ 268.201745] ? preempt_schedule+0x4d/0x60 [ 268.201762] ? ___preempt_schedule+0x16/0x18 [ 268.201784] do_wp_page+0x774/0x1390 [ 268.201804] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 268.201824] ? lock_release+0x970/0x970 [ 268.210364] ? retint_kernel+0x2d/0x2d [ 268.210383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.210399] ? kasan_check_write+0x14/0x20 [ 268.210429] ? do_raw_spin_lock+0xc1/0x200 [ 268.240606] __handle_mm_fault+0x2c60/0x53e0 [ 268.240642] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 268.249859] ? trace_hardirqs_on_caller+0xc0/0x310 [ 268.249874] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.249893] ? trace_hardirqs_off+0x310/0x310 [ 268.264046] ? follow_page_mask+0x18d/0x1fb0 [ 268.268467] ? retint_kernel+0x2d/0x2d [ 268.272369] ? handle_mm_fault+0x42a/0xc70 [ 268.276619] ? lock_downgrade+0x900/0x900 [ 268.280774] ? handle_mm_fault+0x216/0xc70 [ 268.285027] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 268.290824] ? __get_user_pages+0x806/0x1b30 [ 268.295233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 268.300688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.306226] ? check_preemption_disabled+0x48/0x200 [ 268.311246] handle_mm_fault+0x54f/0xc70 [ 268.315309] ? __handle_mm_fault+0x53e0/0x53e0 [ 268.319893] ? __get_user_pages+0x7c2/0x1b30 [ 268.324305] __get_user_pages+0x806/0x1b30 [ 268.328545] ? follow_page_mask+0x1fb0/0x1fb0 [ 268.333056] ? perf_trace_lock+0x7a0/0x7a0 [ 268.337319] ? retint_kernel+0x2d/0x2d [ 268.341209] ? trace_hardirqs_on_caller+0xc0/0x310 [ 268.346142] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.350900] ? trace_hardirqs_off+0x310/0x310 [ 268.355395] ? __mm_populate+0x31a/0x4d0 [ 268.359467] ? retint_kernel+0x2d/0x2d [ 268.363371] ? trace_hardirqs_on_caller+0xc0/0x310 [ 268.368305] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.373092] ? trace_hardirqs_off+0x310/0x310 [ 268.377595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 268.382353] populate_vma_page_range+0x2db/0x3d0 [ 268.387112] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 268.392545] ? __mm_populate+0x182/0x4d0 [ 268.396626] __mm_populate+0x286/0x4d0 [ 268.400519] ? populate_vma_page_range+0x3d0/0x3d0 [ 268.405456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.410995] ? ns_capable_common+0x13f/0x170 [ 268.415413] __x64_sys_mlockall+0x45b/0x630 [ 268.419731] ? __ia32_sys_munlock+0x160/0x160 [ 268.424224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.429768] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.435136] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 268.440591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.446139] do_syscall_64+0x1b9/0x820 [ 268.450025] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 268.455384] ? syscall_return_slowpath+0x5e0/0x5e0 [ 268.460316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.465157] ? trace_hardirqs_on_caller+0x310/0x310 [ 268.470175] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 268.475203] ? prepare_exit_to_usermode+0x291/0x3b0 [ 268.480221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.485064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.490249] RIP: 0033:0x457579 [ 268.493440] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.512337] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 268.520068] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 268.527339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 268.534600] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 268.541877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 268.549161] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 268.559289] Task in /syz1 killed as a result of limit of /syz1 [ 268.565387] memory: usage 204768kB, limit 204800kB, failcnt 499 [ 268.575363] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 268.582328] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 268.588621] Memory cgroup stats for /syz1: cache:0KB rss:195184KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:118948KB [ 268.610102] Memory cgroup out of memory: Kill process 9443 (syz-executor1) score 344 or sacrifice child [ 268.619738] Killed process 9488 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:37:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000740)='/dev/snd/pcmC#D#p\x00', 0xffffffff80000001, 0x2000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000900)=0x0) fcntl$lock(r6, 0x7, &(0x7f0000000940)={0x0, 0x3, 0x7, 0x1, r7}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r6, &(0x7f0000000780)="3e44e7f3b70448b06fde49a09c595c3df171548ffcc3b547e7246d925962a35267a5f82f3efcff373feff3137a3665c46b22f5a2e8f1a450f16313a50a8abfa4c835e0b421f8b7bdb0b5939cd06e827aadee100285cd5db26ebcae269673a72a825b5712c75e2f6e7124be460a46b3c816e51e3c2ab0dce67655eb6a56d6fc4c93b70fc6daf6495a869a261305c509aadf3bf2674afba87265898417a813f81ff868d7be26c8a3ff1a1e3191f9535be02ede31778929beb0b64315a60a1feabc5af38c8478816fe40aa94b0fe385beaca9271981108cf3fcde1decccda64beb1ec2bbbc590", &(0x7f0000000880)=""/20}, 0x18) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000700), 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x2, r3}, {0x2, 0x0, r4}, {0x2, 0x2, r5}, {0x2, 0x0, r8}, {0x2, 0x6, r9}], {0x4, 0x4}, [{0x8, 0x3, r10}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x42) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::,0.nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) recvfrom$unix(r2, &(0x7f0000000980)=""/122, 0x7a, 0x42, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 04:37:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), 0x7}, 0x20) r1 = socket$kcm(0xa, 0x122000000003, 0x11) write(r0, &(0x7f0000000300)="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", 0x1000) r2 = dup2(r0, r0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000001300)) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035db86376862168fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x29}], 0x1}, 0x0) 04:37:40 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = memfd_create(&(0x7f0000000040)='bond0\x00', 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xf44}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @random="b89c2ecee91b"}, 0x10) 04:37:40 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='*e_1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x22d, 0x0, &(0x7f0000000080), 0x54, 0x0, &(0x7f0000000040)="ef26a2fed773e0be191f5f8f8d0600000000000000a50a68307b3e6721e98b29a7da5cbf64291ff455d97a945798b9a9550c133c4c7d7772fd83757e3091b68fe0fbcba19188c216027f73880cfd934dd0c48aa5"}) 04:37:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file0\x00', 0x80, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000820000000000000000000000000000000b00000001000000656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000000000000000000000001000000000000001c000000000000002b73797374656dcce675b5222d642850eac473753cfe80637075736574636772"], 0x90) [ 268.634731] oom_reaper: reaped process 9488 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000), 0x3ecb47233efb0569) 04:37:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) r1 = creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000280), 0x8) r2 = geteuid() syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000300)='./file0\x00', 0x400, 0x1, &(0x7f00000008c0)=[{&(0x7f0000000740)="c935022f2644d2a9bf52568991176c5c17fd3b8bac581799c1f662b8b0b3950741df6ea52458d8dfafcd911ea587995b7e591e6918607131ea2a755c24f91d99eb6e25f6bfc252e464661ffcd98ef342a82cf0e21b4cd3d7920aad741b43b6f6746ee212cf0220691a5677024f3b408981fd13b6ade2a48c2a56b8487edbad33c6898b0ae7267b1379e2f4c0b125738e4df66e614bedc9cc9182594eec1cc1829dd123662e64e0063e8c5cebee37d857adde87ff3508a423a2c8bbee1cc4c0e8876774d8475c1ba771dc8b3f627cbb9180c97391b7dd1364fe65ab9f75a6de3d", 0xe0}], 0x1082, &(0x7f0000000940)={[{@nodots='nodots'}, {@dots='dots'}, {@fat=@check_strict='check=strict'}, {@fat=@errors_continue='errors=continue'}, {@fat=@errors_remount='errors=remount-ro'}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@nodots='nodots'}, {@dots='dots'}], [{@euid_eq={'euid', 0x3d, r2}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@measure='measure'}, {@dont_measure='dont_measure'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef'}}]}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000500)=0x1) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000180)=0x9) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x84) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x10000200003) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000440)={{0xfffffffffffffffe, 0x2}, 'port0\x00', 0x22, 0x0, 0x7fffffff, 0x7, 0x0, 0x8001, 0x8c, 0x0, 0x0, 0x7f}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600), 0x0) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000540)={0x1, 0x0, [0x0]}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000340)={0x3f, @broadcast, 0x4e23, 0x3, 'wlc\x00', 0x30, 0x400, 0x7e}, 0x2c) mkdirat(r5, &(0x7f00000001c0)='.//ile0\x00', 0x0) renameat(r5, &(0x7f0000000240)='.//ile0\x00', r5, &(0x7f00000000c0)='./file0/f.le.\x00') [ 268.720129] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.721236] binder: 9514:9521 ioctl c018620b 20000000 returned -14 [ 268.735188] libceph: parse_ips bad ip '::,0.nullb' [ 268.747516] Dead loop on virtual device ip6_vti0, fix it urgently! [ 268.763214] binder: 9514:9528 ioctl c018620b 20000000 returned -14 04:37:40 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) select(0x40, &(0x7f00000003c0)={0x2, 0xfff, 0x9, 0x0, 0x60, 0x9, 0x100, 0x4}, &(0x7f0000000400)={0x80000001, 0x1, 0x9, 0x4, 0xff, 0xffff, 0x7fff, 0x3}, &(0x7f0000000440)={0x4, 0x0, 0xb6fa, 0x5023, 0x80000001, 0x7ff, 0x9, 0x10001}, &(0x7f0000000500)) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x90) read$FUSE(r0, &(0x7f00000030c0), 0x1000) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x3fd, 0xe0000) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000340)={@broadcast, @dev}, &(0x7f0000000380)=0x8) read$FUSE(r0, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000480)) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60, 0x0, 0x1, {{0x6, 0x1, 0xb32, 0x7, 0x0, 0x0, 0x1}}}, 0x60) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x100000000) 04:37:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x3, 0x20}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x3bf, &(0x7f0000000180)}, 0x27) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x440000, 0x3) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000001c0)={0x5, 0x6, 0x9, 0x800}) 04:37:40 executing program 4: mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f00005ae000/0xe000)=nil, 0xe000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x7, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x1f, 0x7, 0x8000}, 0x4) pkey_mprotect(&(0x7f00004f0000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x5}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x1}, 0x8) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64\x00', &(0x7f0000000240)='fdinfo/3\x00', 0x9, 0x3) 04:37:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) fcntl$getflags(r0, 0xb) shutdown(r0, 0x1) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x3, 0x70, 0x1, 0x0, 0x1, 0x3, 0x0, 0x8000, 0x0, 0x1, 0x7e21, 0x3, 0xffffffffffff9f05, 0x8, 0x8, 0x3, 0x4, 0xe2e, 0x3, 0x4, 0x1, 0x11, 0x0, 0x0, 0xf7e3, 0x5, 0x1, 0x2, 0x17a, 0x4, 0x200, 0x7f, 0x5, 0x6, 0x80000000, 0x40, 0x5, 0xff, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0xe}, 0x200, 0x55, 0x6, 0x7, 0x37cdf78, 0x3, 0x9744}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000140)=0x68) r3 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=0x0) fcntl$setownex(r2, 0xf, &(0x7f00000003c0)={0x0, r4}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000340)={r3}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000200)=0xc) setsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f00000001c0)=0x4, 0x4) [ 269.303650] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 269.314643] syz-executor1 cpuset=syz1 mems_allowed=0 [ 269.320161] CPU: 0 PID: 9526 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 269.327454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.336797] Call Trace: [ 269.339386] dump_stack+0x1c4/0x2b4 [ 269.343037] ? dump_stack_print_info.cold.2+0x52/0x52 [ 269.348225] ? mark_held_locks+0x130/0x130 [ 269.352442] ? mark_held_locks+0x130/0x130 [ 269.356676] dump_header+0x27b/0xf72 [ 269.360394] ? debug_smp_processor_id+0x1c/0x20 [ 269.365054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.370577] ? pagefault_out_of_memory+0x197/0x197 [ 269.375524] ? debug_smp_processor_id+0x1c/0x20 [ 269.380186] ? perf_trace_lock_acquire+0x15b/0x800 [ 269.385097] ? perf_trace_lock_acquire+0x15b/0x800 [ 269.390024] ? perf_trace_lock+0x7a0/0x7a0 [ 269.394261] ? perf_trace_lock+0x7a0/0x7a0 [ 269.398492] ? debug_smp_processor_id+0x1c/0x20 [ 269.403150] ? perf_trace_lock_acquire+0x15b/0x800 [ 269.408098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.413635] ? perf_trace_lock+0x7a0/0x7a0 [ 269.417872] ? task_will_free_mem+0x239/0xb30 [ 269.422368] ? retint_kernel+0x2d/0x2d [ 269.426261] ? trace_hardirqs_on_caller+0xc0/0x310 [ 269.431179] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.435929] ? ___ratelimit+0x36f/0x655 [ 269.439942] ? lock_downgrade+0x900/0x900 [ 269.444121] ? trace_hardirqs_on+0xbd/0x310 [ 269.448452] ? kasan_check_read+0x11/0x20 [ 269.452597] ? ___ratelimit+0x36f/0x655 [ 269.456565] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 269.462006] ? trace_hardirqs_on+0x310/0x310 [ 269.466443] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 269.471544] ? ___ratelimit+0xaa/0x655 [ 269.475464] ? idr_get_free+0xec0/0xec0 [ 269.479435] ? kasan_check_write+0x14/0x20 [ 269.483669] ? do_raw_spin_lock+0xc1/0x200 [ 269.487932] oom_kill_process.cold.27+0x10/0x903 [ 269.492689] ? trace_hardirqs_on+0xb4/0x310 [ 269.497007] ? _raw_spin_unlock_irq+0x56/0x80 [ 269.501504] ? oom_evaluate_task+0x540/0x540 [ 269.505916] ? cgroup_procs_next+0x70/0x70 [ 269.510137] ? _raw_spin_unlock_irq+0x60/0x80 [ 269.514616] ? oom_badness+0xaa0/0xaa0 [ 269.518494] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 269.523245] ? mem_cgroup_iter_break+0x30/0x30 [ 269.527807] ? trace_hardirqs_on_caller+0xc0/0x310 [ 269.532723] out_of_memory+0xa84/0x1430 [ 269.536688] ? retint_kernel+0x2d/0x2d [ 269.540574] ? oom_killer_disable+0x3a0/0x3a0 [ 269.545066] ? trace_hardirqs_on+0xb4/0x310 [ 269.549640] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 269.554828] mem_cgroup_out_of_memory+0x15e/0x210 [ 269.559674] ? memcg_memory_event+0x40/0x40 [ 269.563998] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 269.568759] ? page_counter_try_charge+0x1c1/0x220 [ 269.573695] try_charge+0xc43/0x1690 [ 269.577417] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 269.582524] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 269.588580] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 269.593425] ? lock_downgrade+0x900/0x900 [ 269.597572] ? lock_release+0x970/0x970 [ 269.601546] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 269.607379] ? get_mem_cgroup_from_mm+0x206/0x440 [ 269.612231] ? mem_cgroup_can_attach+0x580/0x580 [ 269.616995] ? check_preemption_disabled+0x48/0x200 [ 269.622044] ? __might_sleep+0x95/0x190 [ 269.626017] mem_cgroup_try_charge+0x5ea/0xe10 [ 269.630603] ? mem_cgroup_protected+0xa60/0xa60 [ 269.635268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.640037] ? trace_hardirqs_off+0x310/0x310 [ 269.644535] ? swp_swapcount+0x530/0x530 [ 269.648613] ? retint_kernel+0x2d/0x2d [ 269.652527] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 269.657455] wp_page_copy+0x46c/0x14f0 [ 269.661344] ? kasan_check_write+0x14/0x20 [ 269.665576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.671110] ? follow_pfn+0x2e0/0x2e0 [ 269.674911] ? do_wp_page+0x76c/0x1390 [ 269.678807] ? lock_downgrade+0x900/0x900 [ 269.682963] ? kasan_check_write+0x14/0x20 [ 269.687191] ? kasan_check_read+0x11/0x20 [ 269.691336] ? do_raw_spin_unlock+0xa7/0x2f0 [ 269.695743] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 269.700327] do_wp_page+0x774/0x1390 [ 269.704071] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 269.708743] ? lock_release+0x970/0x970 [ 269.712711] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.717466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.723002] ? kasan_check_write+0x14/0x20 [ 269.727231] ? do_raw_spin_lock+0xc1/0x200 [ 269.731465] __handle_mm_fault+0x2c60/0x53e0 [ 269.735876] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 269.740721] ? __dump_page.cold.2+0x179/0x179 [ 269.745218] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.749976] ? follow_page_mask+0x18d/0x1fb0 [ 269.754391] ? handle_mm_fault+0x42a/0xc70 [ 269.758664] ? lock_downgrade+0x900/0x900 [ 269.762814] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 269.768608] ? retint_kernel+0x2d/0x2d [ 269.772496] ? __get_user_pages+0x806/0x1b30 [ 269.776961] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 269.782443] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.787982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.793517] ? sync_mm_rss+0x9a/0x1c0 [ 269.797320] handle_mm_fault+0x54f/0xc70 [ 269.801379] ? __handle_mm_fault+0x53e0/0x53e0 [ 269.805973] __get_user_pages+0x806/0x1b30 [ 269.810218] ? follow_page_mask+0x1fb0/0x1fb0 [ 269.814718] ? retint_kernel+0x2d/0x2d [ 269.818602] ? retint_kernel+0x2d/0x2d [ 269.822492] ? trace_hardirqs_on_caller+0xc0/0x310 [ 269.827441] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.832229] ? trace_hardirqs_off+0x310/0x310 [ 269.836722] ? lock_acquire+0x268/0x520 [ 269.840694] ? retint_kernel+0x2d/0x2d [ 269.844611] ? trace_hardirqs_on_caller+0xc0/0x310 [ 269.849543] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.854298] ? trace_hardirqs_off+0x310/0x310 [ 269.858842] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 269.863617] populate_vma_page_range+0x2db/0x3d0 [ 269.868394] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 269.873347] ? populate_vma_page_range+0x24/0x3d0 [ 269.878190] __mm_populate+0x286/0x4d0 [ 269.882100] ? populate_vma_page_range+0x3d0/0x3d0 [ 269.887027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.892563] ? ns_capable_common+0x13f/0x170 [ 269.896974] __x64_sys_mlockall+0x45b/0x630 [ 269.901295] ? __ia32_sys_munlock+0x160/0x160 [ 269.905794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.911345] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.916717] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 269.922165] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.927732] do_syscall_64+0x1b9/0x820 [ 269.931617] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 269.936978] ? syscall_return_slowpath+0x5e0/0x5e0 [ 269.941910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.946755] ? trace_hardirqs_on_caller+0x310/0x310 [ 269.951772] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 269.956790] ? prepare_exit_to_usermode+0x291/0x3b0 [ 269.961824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.966673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.971868] RIP: 0033:0x457579 [ 269.975076] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.993988] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 270.001724] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 270.008989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 270.016256] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.023518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 270.030782] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 270.041205] Task in /syz1 killed as a result of limit of /syz1 [ 270.047337] memory: usage 204800kB, limit 204800kB, failcnt 535 [ 270.056619] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 270.063964] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 270.070373] Memory cgroup stats for /syz1: cache:0KB rss:195128KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:118968KB [ 270.092172] Memory cgroup out of memory: Kill process 9525 (syz-executor1) score 344 or sacrifice child [ 270.102057] Killed process 9566 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 270.128265] oom_reaper: reaped process 9566 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:42 executing program 2: socket(0x1e, 0x400000000000004, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), 0x29b) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0xd, 0x0, {{0x2, 0x0, 0x6}, 0x606}}, 0x18) write(r1, &(0x7f0000000340), 0x10000014c) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x64}, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c9c380}) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x200000, 0x0) 04:37:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x40080, &(0x7f00000006c0)=ANY=[@ANYBLOB]) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x1a000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000580)={0x7fffffff, 0xfffffffffffffffb, 0x8, 'queue1\x00', 0x1}) r2 = accept(r0, &(0x7f0000000280)=@xdp, &(0x7f0000000500)=0x80) bind$pptp(r2, &(0x7f0000000440)={0x18, 0x2, {0x1}}, 0x1e) fsetxattr$security_smack_entry(r2, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f0000000400)='#trusted\x00', 0x9, 0x1) sendto$inet(r2, &(0x7f0000000640)="067418edb95d519a0b4b7f0ecc6791eb5fefce894c7b71e13fec10e00122561414093c10f33f508a7668", 0x2a, 0x4040000, &(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10) getresgid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f00000000c0)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') ioctl$FIONREAD(r0, 0x541b, &(0x7f00000004c0)) 04:37:42 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1c3) socketpair(0x9, 0x6, 0xf6d, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000200)="bc63531b13f8a24739168511a2b4ed76876e7e6b1f40b061afc7a2f980f594e9fe19deacda4a1fffa63cced87b3cc1161ae757e7eaa6386642e52aab7cba2271fd530d39a1349a866aebeb4ea4f5de4935d62ef889b6fe0a58a8d59769e5e193ebf5a9e6c4b29c6571060c281e156a480bc963b4c6e19a5d892ce5632d603cc201007ae746caa7", 0x87) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB]) setresuid(r3, r3, r3) request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000001c0)='\\ wlan1\x00', 0xfffffffffffffffc) 04:37:42 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) dup3(r1, r1, 0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) close(r3) 04:37:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000240)={r2, 0x3d}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x100000000000000, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 04:37:42 executing program 3: getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000440)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00'}, &(0x7f00000002c0)=0x54) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000300)=""/224) ioctl$sock_SIOCETHTOOL(r1, 0x8970, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="3b00000000000000b71eef1d5756bc083f0148513ddbda7a3b4cae656ba004bcf926f8091748cc78443e0f2b1539a3"]}) 04:37:42 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040), 0x1c) sendmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000001340)}}, {{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12da391be1c9f79e44000000000000000000000000000000"], 0xf5}}], 0x2, 0x0) 04:37:42 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465f6be6f9cd9c62f73673000"], &(0x7f0000000540)='./file0\x00', &(0x7f0000000780)='ubifs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 04:37:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x40) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400204) syz_mount_image$gfs2(&(0x7f0000000740)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000780)={[{@acl='acl'}, {@ignore_local_fs='ignore_local_fs'}, {@localcaching='localcaching'}, {@noloccookie='noloccookie'}, {@nosuiddir='nosuiddir'}, {@discard='discard'}, {@barrier='barrier'}, {@quota='quota'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x3}}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@hash='hash'}, {@uid_eq={'uid'}}]}) 04:37:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x89b0, &(0x7f0000000040)={'team0\x00'}) close(r0) close(r2) [ 270.517333] gfs2: invalid mount option: fsmagic=0x0000000000000800 [ 270.533025] gfs2: can't parse mount arguments 04:37:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r3 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) [ 270.583920] gfs2: invalid mount option: fsmagic=0x0000000000000800 [ 270.602964] gfs2: can't parse mount arguments [ 270.953849] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 270.965107] syz-executor1 cpuset=syz1 mems_allowed=0 [ 270.970611] CPU: 1 PID: 9594 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 270.977908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.987262] Call Trace: [ 270.989861] dump_stack+0x1c4/0x2b4 [ 270.993501] ? dump_stack_print_info.cold.2+0x52/0x52 [ 270.998708] dump_header+0x27b/0xf72 [ 271.002449] ? debug_smp_processor_id+0x1c/0x20 [ 271.007135] ? check_preemption_disabled+0x48/0x200 [ 271.012159] ? pagefault_out_of_memory+0x197/0x197 [ 271.017105] ? debug_smp_processor_id+0x1c/0x20 [ 271.021778] ? perf_trace_lock+0x14d/0x7a0 [ 271.021800] ? perf_trace_lock_acquire+0x15b/0x800 [ 271.030952] ? perf_trace_lock_acquire+0x15b/0x800 [ 271.030971] ? zap_class+0x640/0x640 [ 271.030987] ? perf_trace_lock+0x7a0/0x7a0 [ 271.031007] ? debug_smp_processor_id+0x1c/0x20 [ 271.031027] ? perf_trace_lock+0x14d/0x7a0 [ 271.052777] ? perf_trace_lock_acquire+0x15b/0x800 [ 271.057717] ? zap_class+0x640/0x640 [ 271.061445] ? perf_trace_lock+0x7a0/0x7a0 [ 271.065685] ? task_will_free_mem+0x239/0xb30 [ 271.070178] ? zap_class+0x640/0x640 [ 271.073905] ? zap_class+0x640/0x640 [ 271.077628] ? ___ratelimit+0x36f/0x655 [ 271.081620] ? lock_downgrade+0x900/0x900 [ 271.085786] ? trace_hardirqs_on+0xbd/0x310 [ 271.090144] ? kasan_check_read+0x11/0x20 [ 271.094317] ? ___ratelimit+0x36f/0x655 [ 271.098289] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 271.103736] ? trace_hardirqs_on+0x310/0x310 [ 271.108159] ? lock_downgrade+0x900/0x900 [ 271.112316] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 271.117426] ? ___ratelimit+0xaa/0x655 [ 271.121318] ? idr_get_free+0xec0/0xec0 [ 271.125290] ? kasan_check_write+0x14/0x20 [ 271.129523] ? do_raw_spin_lock+0xc1/0x200 [ 271.133770] oom_kill_process.cold.27+0x10/0x903 [ 271.138527] ? trace_hardirqs_on+0xb4/0x310 [ 271.142850] ? _raw_spin_unlock_irq+0x56/0x80 [ 271.147348] ? oom_evaluate_task+0x540/0x540 [ 271.151761] ? cgroup_procs_next+0x70/0x70 [ 271.156015] ? _raw_spin_unlock_irq+0x60/0x80 [ 271.160512] ? oom_badness+0xaa0/0xaa0 [ 271.164405] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 271.169171] ? mem_cgroup_iter_break+0x30/0x30 [ 271.173785] ? cgroup_file_notify+0x226/0x2f0 [ 271.178282] out_of_memory+0xa84/0x1430 [ 271.182255] ? kasan_check_read+0x11/0x20 [ 271.186401] ? oom_killer_disable+0x3a0/0x3a0 [ 271.190908] ? kasan_check_write+0x14/0x20 [ 271.195140] ? do_raw_spin_lock+0xc1/0x200 [ 271.199385] mem_cgroup_out_of_memory+0x15e/0x210 [ 271.204245] ? memcg_memory_event+0x40/0x40 [ 271.208579] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 271.213373] ? page_counter_try_charge+0x1c1/0x220 [ 271.218300] try_charge+0xc43/0x1690 [ 271.222023] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.227131] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 271.233187] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 271.238060] ? lock_downgrade+0x900/0x900 [ 271.242225] ? lock_release+0x970/0x970 [ 271.246216] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 271.252011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.257715] ? zap_class+0x640/0x640 [ 271.261437] ? get_mem_cgroup_from_mm+0x206/0x440 [ 271.266282] ? mem_cgroup_can_attach+0x580/0x580 [ 271.271047] ? __might_sleep+0x95/0x190 [ 271.275035] mem_cgroup_try_charge+0x5ea/0xe10 [ 271.279617] ? mem_cgroup_protected+0xa60/0xa60 [ 271.284285] ? swp_swapcount+0x530/0x530 [ 271.288339] ? zap_class+0x640/0x640 [ 271.292071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.297651] ? check_preemption_disabled+0x48/0x200 [ 271.302697] ? debug_smp_processor_id+0x1c/0x20 [ 271.307365] ? perf_trace_lock+0x14d/0x7a0 [ 271.311598] ? zap_class+0x640/0x640 [ 271.315310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 271.320860] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 271.325795] wp_page_copy+0x46c/0x14f0 [ 271.329680] ? kasan_check_write+0x14/0x20 [ 271.333915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.339456] ? follow_pfn+0x2e0/0x2e0 [ 271.343251] ? zap_class+0x640/0x640 [ 271.346970] ? do_wp_page+0x76c/0x1390 [ 271.350868] ? lock_downgrade+0x900/0x900 [ 271.355014] ? kasan_check_write+0x14/0x20 [ 271.359251] ? kasan_check_read+0x11/0x20 [ 271.363400] ? do_raw_spin_unlock+0xa7/0x2f0 [ 271.367817] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 271.372400] ? __pte_alloc_kernel+0x220/0x220 [ 271.376909] do_wp_page+0x774/0x1390 [ 271.380646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 271.385335] ? lock_release+0x970/0x970 [ 271.389311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 271.394110] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.399651] ? kasan_check_write+0x14/0x20 [ 271.403886] ? do_raw_spin_lock+0xc1/0x200 [ 271.408137] __handle_mm_fault+0x2c60/0x53e0 [ 271.412576] ? zap_class+0x640/0x640 [ 271.416293] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 271.421134] ? __dump_page.cold.2+0x179/0x179 [ 271.425628] ? follow_page_mask+0x26a/0x1fb0 [ 271.430052] ? zap_class+0x640/0x640 [ 271.433766] ? handle_mm_fault+0x42a/0xc70 [ 271.438012] ? lock_downgrade+0x900/0x900 [ 271.442167] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 271.447989] ? __get_user_pages+0x806/0x1b30 [ 271.452422] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 271.457881] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.463425] ? check_preemption_disabled+0x48/0x200 [ 271.468451] handle_mm_fault+0x54f/0xc70 [ 271.472529] ? __handle_mm_fault+0x53e0/0x53e0 [ 271.477147] __get_user_pages+0x806/0x1b30 [ 271.481451] ? follow_page_mask+0x1fb0/0x1fb0 [ 271.485975] ? retint_kernel+0x2d/0x2d [ 271.489870] ? retint_kernel+0x2d/0x2d [ 271.493784] ? trace_hardirqs_on_caller+0xc0/0x310 [ 271.498710] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 271.503464] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 271.508232] ? trace_hardirqs_off+0x310/0x310 [ 271.512741] ? lock_acquire+0x1ed/0x520 [ 271.516720] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 271.521481] ? retint_kernel+0x2d/0x2d [ 271.525381] populate_vma_page_range+0x2db/0x3d0 [ 271.530144] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 271.535072] ? find_vma+0x34/0x190 [ 271.538614] __mm_populate+0x286/0x4d0 [ 271.542520] ? populate_vma_page_range+0x3d0/0x3d0 [ 271.547463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.553006] ? ns_capable_common+0x13f/0x170 [ 271.557433] __x64_sys_mlockall+0x45b/0x630 [ 271.561759] ? __ia32_sys_munlock+0x160/0x160 [ 271.566281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.571834] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.577206] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 271.582680] do_syscall_64+0x1b9/0x820 [ 271.586575] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 271.591942] ? syscall_return_slowpath+0x5e0/0x5e0 [ 271.596874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.601723] ? trace_hardirqs_on_caller+0x310/0x310 [ 271.606741] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 271.611758] ? prepare_exit_to_usermode+0x291/0x3b0 [ 271.616775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.621627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.626827] RIP: 0033:0x457579 [ 271.630021] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.648918] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 271.656626] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 271.663888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 271.671160] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 271.678462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 271.685728] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 271.748207] Task in /syz1 killed as a result of limit of /syz1 [ 271.754319] memory: usage 204740kB, limit 204800kB, failcnt 550 [ 271.760501] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 271.767325] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 271.773601] Memory cgroup stats for /syz1: cache:0KB rss:195164KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:118944KB [ 271.795504] Memory cgroup out of memory: Kill process 9593 (syz-executor1) score 344 or sacrifice child [ 271.805161] Killed process 9622 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 271.819278] oom_reaper: reaped process 9622 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:43 executing program 5: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x600000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0xfffffffeffffffff, 0x5, 0x10, &(0x7f0000ffc000/0x2000)=nil, 0x2}) 04:37:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000380)='./control\x00', 0x3) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/57) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="236e8fd8e8d2b3040c693a74ff7cbd8d8a8067af6cf05ffd573f2120"], 0xe) close(r0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}, 0x1e) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) close(0xffffffffffffffff) getresgid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000540)) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x2000, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize'}}], [{@smackfsdef={'smackfsdef', 0x3d, "2d0e5b73656c696e7578"}}, {@fsname={'fsname'}}, {@obj_type={'obj_type', 0x3d, 'proccgroup'}}]}}) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x80000000) setreuid(0x0, 0x0) 04:37:43 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8102, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @broadcast, [], @remote, [0xfffffffffffffffc], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8}, @connlabel={'connlabel\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2a8) 04:37:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r3 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) 04:37:43 executing program 4: syz_emit_ethernet(0x58, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x7, 0x6, 0x4a, 0x65, 0x9, 0x1, 0x7e, 0x0, @local, @rand_addr=0x3}, @igmp={0x0, 0xeb83, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, "92a7ecaa44c6f015b9419b931d95f897cdb6c9717ab91e62e3ee9c51b74b321c22c683f9419f0055450b4353c6de"}}}}}, &(0x7f0000000000)={0x0, 0xffffffffffffffff, [0x0, 0x93a]}) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x3}}, 0x18) 04:37:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x34000}, 0xffffffffffffff68, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1}}, 0x1000000000) 04:37:44 executing program 0: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() setpriority(0x0, r1, 0x10001) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200080, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x72363b5f, r1}) fstat(0xffffffffffffffff, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffd}) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000003c0)={0x10}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x7, &(0x7f0000000280)="23656d31232bf1bdaf07d78dc9a40785ba449db7008644ff1c3491aea54b408ae2a108a9fb4088f8e820c242af44bb491044b64911d3ea09f4ed543f02d764a7b754"}, 0xfffffffffffffeb9) 04:37:44 executing program 2: r0 = socket$packet(0x11, 0x40000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000480)=[{0x10000000000006, 0x0, 0x0, 0x5}]}, 0x10) r1 = socket$inet6(0xa, 0x80804, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x100000000, @mcast1}, 0x1c) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x200, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0xa0) mount$9p_virtio(&(0x7f00000001c0)='@mime_type:bdev\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=virtio,', {[], [{@euid_eq={'euid'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/dsp\x00'}}]}}) 04:37:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0x29}, 0x4) r0 = socket$inet(0x2, 0x805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x8000000) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1f, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000280)={0x7, {0x0, 0x1, 0x8, 0x2, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005000028feffff7a0af0fff8ffffff5fa4f0ff00000000b7060000000000012d400500000010005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0), 0x10, 0x0) io_setup(0x0, &(0x7f0000000140)) mlockall(0x2) exit(0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1b, 0x19, 0x1c, "e8e9af5b35f6853b674c2207b08594aaff5d43aa71523768f82cede3aa9bd1dd05b9e0d5b65a36c5ebbe589c8094a7f2fea08077815cabab80bce0d8889146f4", "38cbbb500e3310828bcbea55c85a4b55baeb54d05c6fead6f64e046bca63554d26d99193f3c6940086eb029e54512ffca12350e0e4e5ae2f1084186ee2a481e4", "61748b2059fcd7542d73d557925fbcd9f9d87d3b3f6b295c77850f5223c16973", [0x7f4, 0x400]}) clone(0x0, &(0x7f00000003c0)="1a8ac169a683226f2e080f06a8a9b42d800919528f16fc098856d6fb748727d936daaadb033809d91d5557254effa9439d7fd6cc3b723516ae823b4c5eb2f08176cf19bf6fb94d681ea6d999f7e1d89e11eceaf8de9568db8aece28041d4d9", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000480)='I') getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x8, 0x10001, 0x5fc, 0x7ff, 0x7}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000440)={r4}, &(0x7f00000006c0)=0x8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000005c0)=ANY=[@ANYBLOB="fffffff87f000001000000000600001044fca2f10800000020900b24aa745f5baed08c17e5cde254e809564e0a4060862bb4eacb882208b2e3f8fba3374488e60bca499686e31abd18e7e09fe3a475ca760a6a8403d699581242fb910962c4a1647164e7267110ef38da909e97ab80b9a61f1649376650b720af54a027ef3b02cce39993f4003faaf15bb797007973344dd393e014f9d265f2d1f100006d6746c9956838db9688a108cb125f1a7d83c41add936c26db5a3986f31be92f082fa59a8082cde349213d12b000"], 0x1) 04:37:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r3 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) 04:37:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2201, &(0x7f0000000200)) dup(r3) [ 272.226435] IPVS: ftp: loaded support on port[0] = 21 [ 272.604376] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 272.615768] syz-executor1 cpuset=syz1 mems_allowed=0 [ 272.622107] CPU: 0 PID: 9650 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 272.629388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.638743] Call Trace: [ 272.641352] dump_stack+0x1c4/0x2b4 [ 272.641374] ? dump_stack_print_info.cold.2+0x52/0x52 [ 272.650192] ? mark_held_locks+0x130/0x130 [ 272.650206] ? mark_held_locks+0x130/0x130 [ 272.650224] dump_header+0x27b/0xf72 [ 272.650251] ? debug_smp_processor_id+0x1c/0x20 [ 272.658705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.658722] ? pagefault_out_of_memory+0x197/0x197 [ 272.658739] ? debug_smp_processor_id+0x1c/0x20 [ 272.658757] ? perf_trace_lock_acquire+0x15b/0x800 [ 272.667121] ? perf_trace_lock_acquire+0x15b/0x800 [ 272.667146] ? perf_trace_lock+0x7a0/0x7a0 [ 272.677621] ? perf_trace_lock+0x7a0/0x7a0 [ 272.677640] ? debug_smp_processor_id+0x1c/0x20 [ 272.677657] ? perf_trace_lock_acquire+0x15b/0x800 [ 272.687233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.687249] ? perf_trace_lock+0x7a0/0x7a0 [ 272.687267] ? retint_kernel+0x2d/0x2d [ 272.696437] ? trace_hardirqs_on_caller+0xc0/0x310 [ 272.696454] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 272.696486] ? trace_hardirqs_off+0x310/0x310 [ 272.705364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 272.705383] ? retint_kernel+0x2d/0x2d [ 272.715824] ? trace_hardirqs_on+0xb4/0x310 [ 272.715853] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 272.715871] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 272.723990] ? ___ratelimit+0xaa/0x655 [ 272.724006] ? idr_get_free+0xec0/0xec0 [ 272.724023] ? kasan_check_write+0x14/0x20 [ 272.733709] ? do_raw_spin_lock+0xc1/0x200 [ 272.733745] oom_kill_process.cold.27+0x10/0x903 [ 272.743007] ? trace_hardirqs_on+0xb4/0x310 [ 272.743021] ? _raw_spin_unlock_irq+0x56/0x80 [ 272.743038] ? oom_evaluate_task+0x540/0x540 [ 272.782430] ? cgroup_procs_next+0x70/0x70 [ 272.782448] ? _raw_spin_unlock_irq+0x60/0x80 [ 272.782462] ? oom_badness+0xaa0/0xaa0 [ 272.782478] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 272.782495] ? mem_cgroup_iter_break+0x30/0x30 [ 272.791297] ? trace_hardirqs_on_caller+0xc0/0x310 [ 272.799924] out_of_memory+0xa84/0x1430 [ 272.799941] ? retint_kernel+0x2d/0x2d [ 272.799958] ? oom_killer_disable+0x3a0/0x3a0 [ 272.808327] ? trace_hardirqs_on+0xb4/0x310 [ 272.808342] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 272.808363] mem_cgroup_out_of_memory+0x15e/0x210 [ 272.808382] ? memcg_memory_event+0x40/0x40 [ 272.817700] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 272.817723] ? page_counter_try_charge+0x1c1/0x220 [ 272.826601] try_charge+0xc43/0x1690 [ 272.826625] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.835012] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 272.835030] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 272.844437] ? lock_downgrade+0x900/0x900 [ 272.844458] ? lock_release+0x970/0x970 [ 272.853610] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 272.853630] ? mark_held_locks+0x130/0x130 [ 272.863322] ? get_mem_cgroup_from_mm+0x206/0x440 [ 272.863355] ? mem_cgroup_can_attach+0x580/0x580 [ 272.872165] ? check_preemption_disabled+0x48/0x200 [ 272.872190] ? __might_sleep+0x95/0x190 [ 272.872209] mem_cgroup_try_charge+0x5ea/0xe10 [ 272.872231] ? mem_cgroup_protected+0xa60/0xa60 [ 272.883111] ? swp_swapcount+0x530/0x530 [ 272.883139] ? retint_kernel+0x2d/0x2d [ 272.891318] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 272.891340] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 272.933187] wp_page_copy+0x46c/0x14f0 [ 272.933215] ? kasan_check_write+0x14/0x20 [ 272.933235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.942665] ? follow_pfn+0x2e0/0x2e0 [ 272.942692] ? do_wp_page+0x76c/0x1390 [ 272.951484] ? lock_downgrade+0x900/0x900 [ 272.951500] ? kasan_check_write+0x14/0x20 [ 272.951514] ? kasan_check_read+0x11/0x20 [ 272.951531] ? do_raw_spin_unlock+0xa7/0x2f0 [ 272.951550] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 272.961297] ? __pte_alloc_kernel+0x220/0x220 [ 272.961317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 272.961337] do_wp_page+0x774/0x1390 [ 272.961359] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 272.969028] ? lock_release+0x970/0x970 [ 272.969063] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.969085] ? kasan_check_write+0x14/0x20 [ 272.977469] ? do_raw_spin_lock+0xc1/0x200 [ 272.977495] __handle_mm_fault+0x2c60/0x53e0 [ 272.986041] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 272.986060] ? __dump_page.cold.2+0x179/0x179 [ 272.995113] ? follow_page_pte+0x4f2/0x1a70 [ 272.995136] ? follow_page_mask+0x18d/0x1fb0 [ 273.003598] ? handle_mm_fault+0x42a/0xc70 [ 273.003616] ? lock_downgrade+0x900/0x900 [ 273.012249] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 273.012267] ? retint_kernel+0x2d/0x2d [ 273.022021] handle_mm_fault+0x54f/0xc70 [ 273.022040] ? __handle_mm_fault+0x53e0/0x53e0 [ 273.022070] __get_user_pages+0x806/0x1b30 [ 273.030704] ? follow_page_mask+0x1fb0/0x1fb0 [ 273.030731] ? retint_kernel+0x2d/0x2d [ 273.087993] ? trace_hardirqs_on_caller+0xc0/0x310 [ 273.092927] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 273.097708] ? retint_kernel+0x2d/0x2d [ 273.101602] ? trace_hardirqs_on_caller+0xc0/0x310 [ 273.106534] ? lock_release+0x970/0x970 [ 273.110509] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 273.115263] ? trace_hardirqs_off+0x310/0x310 [ 273.119766] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 273.124562] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 273.129324] populate_vma_page_range+0x2db/0x3d0 [ 273.134090] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 273.139058] ? __mm_populate+0x1ef/0x4d0 [ 273.143175] __mm_populate+0x286/0x4d0 [ 273.147069] ? populate_vma_page_range+0x3d0/0x3d0 [ 273.152022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.157566] ? ns_capable_common+0x13f/0x170 [ 273.161977] __x64_sys_mlockall+0x45b/0x630 [ 273.166302] ? __ia32_sys_munlock+0x160/0x160 [ 273.170818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.176355] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.181718] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 273.187170] ? do_syscall_64+0x157/0x820 [ 273.191234] do_syscall_64+0x1b9/0x820 [ 273.195126] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 273.200491] ? syscall_return_slowpath+0x5e0/0x5e0 [ 273.205446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.210292] ? trace_hardirqs_on_caller+0x310/0x310 [ 273.215312] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 273.220333] ? prepare_exit_to_usermode+0x291/0x3b0 [ 273.225356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.230205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.235389] RIP: 0033:0x457579 [ 273.238607] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.257732] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 273.265445] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 273.272708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 273.279975] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 273.287243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 273.294511] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 273.304567] Task in /syz1 killed as a result of limit of /syz1 [ 273.311026] memory: usage 204772kB, limit 204800kB, failcnt 608 [ 273.317103] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 273.317112] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 273.317117] Memory cgroup stats for /syz1: [ 273.339998] cache:0KB rss:195036KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:118904KB [ 273.358848] Memory cgroup out of memory: Kill process 9648 (syz-executor1) score 340 or sacrifice child [ 273.358906] Killed process 9685 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:37:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:45 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x29) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioperm(0x0, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2140, 0x0) 04:37:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xc00) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x2, 0xfffffffffffffffd, 0xfffffffffffffffb, {r2, r3+30000000}, 0x2, 0x72}) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005640)=[{0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f000000c040)=[{{&(0x7f0000003e00)=@hci, 0x80, &(0x7f000000bfc0)=[{&(0x7f0000009fc0)=""/4096, 0x1000}], 0x1, &(0x7f000000c000)=""/41, 0x29}}], 0x1, 0x0, &(0x7f000000c140)={0x77359400}) 04:37:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x742, 0x8, 0xffffffffffffff80, 0x3}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x4, 0x10031, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000cc0)={0x2, 0x0, @multicast2}, 0x20000cd0) 04:37:45 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1640c1, 0xc) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) [ 273.494329] QAT: Invalid ioctl [ 273.511408] QAT: Invalid ioctl [ 273.760041] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.766492] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.774009] device bridge_slave_0 entered promiscuous mode [ 273.810180] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.816598] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.823809] device bridge_slave_1 entered promiscuous mode [ 273.861085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.898359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 273.964284] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 273.975472] syz-executor1 cpuset=syz1 mems_allowed=0 [ 273.981815] CPU: 0 PID: 9735 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 273.989106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.989113] Call Trace: [ 273.989137] dump_stack+0x1c4/0x2b4 [ 273.989158] ? dump_stack_print_info.cold.2+0x52/0x52 [ 273.989176] ? mark_held_locks+0x130/0x130 [ 273.989189] ? mark_held_locks+0x130/0x130 [ 273.989208] dump_header+0x27b/0xf72 [ 273.989231] ? debug_smp_processor_id+0x1c/0x20 [ 273.989248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.989265] ? pagefault_out_of_memory+0x197/0x197 [ 273.989283] ? debug_smp_processor_id+0x1c/0x20 [ 273.989297] ? perf_trace_lock_acquire+0x15b/0x800 [ 273.989315] ? perf_trace_lock_acquire+0x15b/0x800 [ 274.001266] ? perf_trace_lock+0x7a0/0x7a0 [ 274.001299] ? perf_trace_lock+0x7a0/0x7a0 [ 274.010101] ? debug_smp_processor_id+0x1c/0x20 [ 274.010116] ? perf_trace_lock_acquire+0x15b/0x800 [ 274.010134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.010151] ? perf_trace_lock+0x7a0/0x7a0 [ 274.018629] ? retint_kernel+0x2d/0x2d [ 274.018646] ? trace_hardirqs_on_caller+0xc0/0x310 [ 274.018664] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.018682] ? trace_hardirqs_off+0x310/0x310 [ 274.027056] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.037501] ? retint_kernel+0x2d/0x2d [ 274.047074] ? trace_hardirqs_on+0xb4/0x310 [ 274.047094] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 274.056283] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 274.056306] ? ___ratelimit+0xaa/0x655 [ 274.065188] ? idr_get_free+0xec0/0xec0 [ 274.075643] ? kasan_check_write+0x14/0x20 [ 274.075659] ? do_raw_spin_lock+0xc1/0x200 [ 274.075678] oom_kill_process.cold.27+0x10/0x903 [ 274.083802] ? trace_hardirqs_on+0xb4/0x310 [ 274.083822] ? _raw_spin_unlock_irq+0x56/0x80 [ 274.093492] ? oom_evaluate_task+0x540/0x540 [ 274.133180] ? cgroup_procs_next+0x70/0x70 [ 274.137669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 274.142155] ? _raw_spin_unlock_irq+0x60/0x80 [ 274.142170] ? oom_badness+0xaa0/0xaa0 [ 274.142198] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 274.142215] ? mem_cgroup_iter_break+0x30/0x30 [ 274.142238] ? cgroup_file_notify+0x226/0x2f0 [ 274.180365] out_of_memory+0xa84/0x1430 [ 274.185178] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.189428] ? kasan_check_read+0x11/0x20 [ 274.189453] ? oom_killer_disable+0x3a0/0x3a0 [ 274.189466] ? kasan_check_write+0x14/0x20 [ 274.189480] ? do_raw_spin_lock+0xc1/0x200 [ 274.189502] mem_cgroup_out_of_memory+0x15e/0x210 [ 274.222863] ? memcg_memory_event+0x40/0x40 [ 274.227204] try_charge+0xc43/0x1690 [ 274.230934] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 274.236067] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 274.242129] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 274.246979] ? lock_downgrade+0x900/0x900 [ 274.251137] ? lock_release+0x970/0x970 [ 274.255134] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 274.260930] ? trace_hardirqs_on_caller+0xc0/0x310 [ 274.265846] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.270590] ? mark_held_locks+0x130/0x130 [ 274.274816] ? get_mem_cgroup_from_mm+0x206/0x440 [ 274.279646] ? mem_cgroup_can_attach+0x580/0x580 [ 274.284384] ? retint_kernel+0x2d/0x2d [ 274.288258] mem_cgroup_try_charge+0x5ea/0xe10 [ 274.292842] ? mem_cgroup_protected+0xa60/0xa60 [ 274.297500] ? swp_swapcount+0x530/0x530 [ 274.301551] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.306303] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 274.311827] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 274.316742] wp_page_copy+0x46c/0x14f0 [ 274.320625] ? kasan_check_write+0x14/0x20 [ 274.324846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.330371] ? follow_pfn+0x2e0/0x2e0 [ 274.334158] ? do_wp_page+0x76c/0x1390 [ 274.338079] ? lock_downgrade+0x900/0x900 [ 274.342230] ? kasan_check_write+0x14/0x20 [ 274.346467] ? kasan_check_read+0x11/0x20 [ 274.350623] ? do_raw_spin_unlock+0xa7/0x2f0 [ 274.355203] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 274.359792] ? __pte_alloc_kernel+0x220/0x220 [ 274.364312] ? retint_kernel+0x2d/0x2d [ 274.368208] do_wp_page+0x774/0x1390 [ 274.371931] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 274.376619] ? lock_release+0x970/0x970 [ 274.380592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.385360] ? trace_hardirqs_off+0x310/0x310 [ 274.389860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.395425] ? kasan_check_write+0x14/0x20 [ 274.399660] ? do_raw_spin_lock+0xc1/0x200 [ 274.403901] __handle_mm_fault+0x2c60/0x53e0 [ 274.408317] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 274.413155] ? __dump_page.cold.2+0x179/0x179 [ 274.417654] ? follow_page_mask+0x18d/0x1fb0 [ 274.422070] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.426828] ? retint_kernel+0x2d/0x2d [ 274.430733] handle_mm_fault+0x54f/0xc70 [ 274.434801] ? __handle_mm_fault+0x53e0/0x53e0 [ 274.439402] __get_user_pages+0x806/0x1b30 [ 274.443656] ? follow_page_mask+0x1fb0/0x1fb0 [ 274.448174] ? perf_trace_lock+0x7a0/0x7a0 [ 274.452438] ? lock_acquire+0x1ed/0x520 [ 274.456409] ? __mm_populate+0x31a/0x4d0 [ 274.460478] ? retint_kernel+0x2d/0x2d [ 274.464369] ? trace_hardirqs_on_caller+0xc0/0x310 [ 274.469300] ? lock_release+0x970/0x970 [ 274.473278] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.478034] ? trace_hardirqs_off+0x310/0x310 [ 274.482534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.487295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.492075] populate_vma_page_range+0x2db/0x3d0 [ 274.496849] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 274.501815] ? __get_user_pages+0x4f1/0x1b30 [ 274.506243] __mm_populate+0x286/0x4d0 [ 274.510166] ? populate_vma_page_range+0x3d0/0x3d0 [ 274.515127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.520663] ? ns_capable_common+0x13f/0x170 [ 274.525077] __x64_sys_mlockall+0x45b/0x630 [ 274.529397] ? __ia32_sys_munlock+0x160/0x160 [ 274.533904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.539448] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.544810] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 274.550269] do_syscall_64+0x1b9/0x820 [ 274.554162] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 274.559525] ? syscall_return_slowpath+0x5e0/0x5e0 [ 274.564455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.569316] ? trace_hardirqs_on_caller+0x310/0x310 [ 274.574330] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 274.579356] ? prepare_exit_to_usermode+0x291/0x3b0 [ 274.584379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.589245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.594438] RIP: 0033:0x457579 [ 274.597648] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.616584] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 274.624293] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 274.631556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 274.638852] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 274.646119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 274.653385] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 274.664278] Task in /syz1 killed as a result of limit of /syz1 [ 274.665872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 274.670826] memory: usage 204740kB, limit 204800kB, failcnt 647 [ 274.679000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.689368] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 274.697145] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 274.704680] Memory cgroup stats for /syz1: cache:0KB rss:194932KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:118880KB [ 274.726538] Memory cgroup out of memory: Kill process 9732 (syz-executor1) score 340 or sacrifice child [ 274.736546] Killed process 9755 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 274.752516] oom_reaper: reaped process 9755 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 274.846997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 274.854402] team0: Port device team_slave_0 added [ 274.877769] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 274.885048] team0: Port device team_slave_1 added [ 274.907026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.931231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.956063] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 274.963133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.971975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.991021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.998003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.006276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.209734] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.216066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.222713] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.229096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.236764] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 275.708250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.993474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.067720] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 276.143594] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.149759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.156639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.230854] 8021q: adding VLAN 0 to HW filter on device team0 04:37:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, r0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffe15) socket(0x8, 0x80005, 0x10000) 04:37:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/9, 0x9, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x14) mbind(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) mmap(&(0x7f0000c7b000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x0) sync_file_range(r1, 0x5, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 04:37:48 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x6c0000, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r2 = socket$inet6(0xa, 0x80003, 0x2c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000003740)="1bb6e2a674cc41e96fb2d732889138c2ee60a9042c461029ec4d496e55fba6015d08f690135abd7e1b1587c7e380e2cdca595c1e56b1635e6c3f4452d0fc84647fa6afd396794eae98f9b53151048a297d7342967496a01ea897592c9c1cd5faa71d619480fcd6688341f7b631dc0ca2ab25542bc28294faa3ef143b7bbec25610f60aa0f1ca4915111fe50c6ee18d4c71bdd469b2bef2d0653465a018c95edebc20cdd91d955ded39577099e011b882a1389ac990e3479db2f67154b4da2cf2ec5f20643afba767fd19861a63888d1a81646c9042f664d98d72254c94bfea2726fa6ac994a482080a8740282de5e80022e76904bc1f857b2fd041020ef3c5cf9f993c1ff73bfc56812f27796c39f31647fc2739b1e3deef088a423728183af747f99550b7c94489004fba6d0a5207d2943669fe7d5d8986e43a26d7598ef7a247441f1576547ade32191c04cc4efb6ce41d8999e136bc3aa0f2366f2d1c1b098c669e28692064fa5d61056bc04dba9b5019fa60c350e7e9025d6e1129242e37cd03472ccb214be37788fe1ecf3d209ffd1857fb01f653f202276c32bf73495a11521db00e6439adcd5593ee1f66bc9b0c78fd49da57625bf252629a2ae0dc5a08c6c41694917653a763d3dcc8740ad5b0ed08e08438a15b456d62f5da2f98bbf8b198abc5debcebc0b3995868510bb0eb5237d0f8f8224ce8d6238737a87f5f5d6255fcda93a288767b7b9a2a701b19fa19694b8f74ffbdb1fc81556a1abcd1acabba16381eb89ab8e3d1160e13d6ca3b172947ede0e1d9df26d156c073d94f3841113f46ca71b44615d7e15088239859317246786ce0fd0509a918dda7f91623c7c3fd6623202bec7724be0165de0a69356acb6f7a4a5047a6cf5a67664e17a446a90dbb80ce03ff892451920cf1f89129219dde2f80b723bbdbcf1a54a2a046acebee754fa4ecebb859be364a9dc7ce53e89246af82e14527822f0af46064b96d0d7d45b1c0e69dea099476378287805cf18699298c1a42bb9f4e9b8acb1bcbba8ef9abcd4db27b2a7ad1d6677c0a79cd1b4b69b7af211f2554b122c72fc7d1b92c556555e55ba4586f0399ef2a2198f72be6df2130547ee7d02f74566307781b7da34736dcfdd63816e5def8353d36183cfc0d9cf7460cdd2f66d5f93bfcc5a5e1bdeb70e9ec60204ffe3ba874fc37a245cd5ecb46a0858818e5d41658c33196516a8275c2622c2d831552d1be40124a0175e0451228b52fae4dd73c5d2503ff862294b3034a9f0114daad6e39e24d0d45276b4406b33e25617edf8aaf383db13f97f2580db2d040c0a71d15c186bdcf46cd25328a45de222886da5253292d6c7c51b3aaa9df434a93427cc490b17eb3ced0cd2d9bc2430bfb33b8a56f508bc789bda7e40c03a340d96f8cbc2ac83323b68fefffc050dae75d394520c28d5c967d2aafa2657d77b3137418de623c40cf0307acc7b1d8ae07f29ae4764a33e75c0dbf785674d7b851c498a47f2c13f581fc02dbe992216b392df11576b32defcec402dbc988b7faa53698b8e1a9274ffc75d9b50ebcd1c284a786a7bb08d15e8d9e20610154bc1c00224355ef2f53dc9ae1e0de8232745eae82ed2f0fa26aeccd613a9399dfcb0c8745bd60ae06993d2c467303768ce2707057d44e87be71245f4c8cf1ddf94dc81506b2060322086aaff7b804d35613bb7a599d4f162be44e81ccadf1455d76bc02e12aecb95cbd5e9737ebccfdfbf18613a4faa8cbdc34f828c189509c319a4c685c8d3fa99e007aad6468ec279b30bf7e10f4c32e5c70751e122cdf94ebac0933a59483e2e790e04429c3d93284aaa4f9e21d6879431ca94d4c49b86dad4ec2b79b68d1", 0x52d}], 0x1, &(0x7f0000000a80)}}], 0x1, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 04:37:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000985000), 0x0, &(0x7f0000164000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 04:37:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:48 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)="637075092609360a00ff00dc2edfbb6bad1bf3f65f7c53933e9415236291ecf212bbd0cd30a4daa8e16f2abd7d4556ba36aeee2834e48d1708a7b03447c238fb1994df114a450298506d0f2898ff055bd9ad7ca3c9597ef4f7f9469cf08348b512de4d80321fa68a891c") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10180, 0x0) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) 04:37:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2080c0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[{0x3, 0x80}, {0x4}, {0x3, 0x10001}, {0x2, 0x2}, {0xa, 0x8}, {0x4, 0xff}, {0x2, 0x3}], 0x7) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(0xffffffffffffffff, &(0x7f0000042f70), 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000002c0)=""/211, &(0x7f0000000180)=0xd3) syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59") bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0), 0x4) 04:37:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x3, 0x8}) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r4 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@local, @in6=@mcast1, 0x4e23, 0xfffffffeffffffff, 0x4e24, 0x1f, 0xa, 0x20, 0x80, 0x8c, r3, r4}, {0x4, 0x12, 0x8, 0x5, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7}, {0x2, 0x6c06, 0x7}, 0xfffffffffffffc00, 0x6e6bb5, 0x3, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d5, 0x7f}, 0xa, @in=@local, 0x3504, 0x0, 0x3, 0x7, 0x3, 0x100000000, 0x4}}, 0xe8) sendfile(r1, r2, 0x0, 0x7fffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in=@loopback}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f00000000c0)=0xe8) sendfile(r2, r2, &(0x7f0000000140)=0x8800, 0x8800000) 04:37:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000008000000013b487864efe41b46fd9da0000611860000000000031de8860d8b88f9073e516737197d49f0da8a60346e121ce7d5e0b4a91d5d0764d1bd6b829b6977475a7f290562a09208d9970639d9251154fc6d04872cafca6081fb000c3737e0e526d6db201a2d968f82f1d2acad8a4be020000001e4e98b59d22f047d8936eb95f86507feadc0bdb0d6b72703335c2c87ad32b982056a929d31a2c8ca407158297e271dedc0cb4da3f538273e988f21dd050f37da9c6baa4cb314c2164744964acecc7636d78f3e9b3b10bfe7c31e7cfdf83e0f6e108943281a63bc63da9ac72346dc0f943b0865ec926e919dc7279e5de1994ae975fc5104c3a7aa1382e4ae31473d5e61116e060a7f5565f02c9b2db5ade0ad36d61c88b3f6aa5d177a7a598"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffff3, &(0x7f00001a7f05)=""/251}, 0x14) 04:37:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x6, {0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)}}, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x4a, "7028f0a3d8f4dea6cc5a2045fb0f58238a8b0f553e68e2a596dca60ea748481bcbcbdadf366842c26ec612d251c67f530b8369228d36261423401813fcc5c43a0e7031145a77d9ae8963"}, &(0x7f0000000180)=0x6e) 04:37:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 277.549833] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 277.560991] syz-executor1 cpuset=syz1 mems_allowed=0 [ 277.566274] CPU: 0 PID: 9990 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 277.573545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.582893] Call Trace: [ 277.585509] dump_stack+0x1c4/0x2b4 [ 277.589158] ? dump_stack_print_info.cold.2+0x52/0x52 [ 277.594347] ? mark_held_locks+0x130/0x130 [ 277.598582] ? mark_held_locks+0x130/0x130 [ 277.602822] dump_header+0x27b/0xf72 [ 277.606585] ? debug_smp_processor_id+0x1c/0x20 [ 277.611260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.616809] ? pagefault_out_of_memory+0x197/0x197 [ 277.621749] ? debug_smp_processor_id+0x1c/0x20 [ 277.626426] ? perf_trace_lock_acquire+0x15b/0x800 [ 277.631355] ? perf_trace_lock_acquire+0x15b/0x800 [ 277.636289] ? perf_trace_lock+0x7a0/0x7a0 [ 277.640580] ? perf_trace_lock+0x7a0/0x7a0 [ 277.644826] ? debug_smp_processor_id+0x1c/0x20 [ 277.649497] ? perf_trace_lock_acquire+0x15b/0x800 [ 277.654456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 277.660021] ? perf_trace_lock+0x7a0/0x7a0 [ 277.664262] ? task_will_free_mem+0x239/0xb30 [ 277.668772] ? ___ratelimit+0x36f/0x655 [ 277.672758] ? lock_downgrade+0x900/0x900 [ 277.676934] ? trace_hardirqs_on+0xbd/0x310 [ 277.681261] ? kasan_check_read+0x11/0x20 [ 277.685415] ? ___ratelimit+0x36f/0x655 [ 277.689408] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 277.694883] ? trace_hardirqs_on+0x310/0x310 [ 277.699298] ? lock_downgrade+0x900/0x900 [ 277.703467] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 277.708582] ? ___ratelimit+0xaa/0x655 [ 277.712476] ? idr_get_free+0xec0/0xec0 [ 277.716455] ? kasan_check_write+0x14/0x20 [ 277.720712] ? do_raw_spin_lock+0xc1/0x200 [ 277.724956] oom_kill_process.cold.27+0x10/0x903 [ 277.729721] ? trace_hardirqs_on+0xb4/0x310 [ 277.734060] ? _raw_spin_unlock_irq+0x56/0x80 [ 277.738558] ? oom_evaluate_task+0x540/0x540 [ 277.742996] ? cgroup_procs_next+0x70/0x70 [ 277.747251] ? _raw_spin_unlock_irq+0x60/0x80 [ 277.751751] ? oom_badness+0xaa0/0xaa0 [ 277.755650] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 277.760415] ? mem_cgroup_iter_break+0x30/0x30 [ 277.765023] ? trace_hardirqs_on_caller+0xc0/0x310 [ 277.769973] out_of_memory+0xa84/0x1430 [ 277.773951] ? retint_kernel+0x2d/0x2d [ 277.777839] ? oom_killer_disable+0x3a0/0x3a0 [ 277.782342] ? trace_hardirqs_on+0xb4/0x310 [ 277.786686] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 277.791858] mem_cgroup_out_of_memory+0x15e/0x210 [ 277.796765] ? memcg_memory_event+0x40/0x40 [ 277.801122] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 277.805885] ? page_counter_try_charge+0x1c1/0x220 [ 277.810816] try_charge+0xc43/0x1690 [ 277.814536] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 277.819650] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 277.825715] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 277.830561] ? lock_downgrade+0x900/0x900 [ 277.834715] ? lock_release+0x970/0x970 [ 277.838706] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 277.844510] ? trace_hardirqs_off+0x310/0x310 [ 277.849006] ? mark_held_locks+0x130/0x130 [ 277.853285] ? get_mem_cgroup_from_mm+0x206/0x440 [ 277.858146] ? mem_cgroup_can_attach+0x580/0x580 [ 277.862899] ? retint_kernel+0x2d/0x2d [ 277.866815] ? __might_sleep+0x95/0x190 [ 277.870833] mem_cgroup_try_charge+0x5ea/0xe10 [ 277.875443] ? mem_cgroup_protected+0xa60/0xa60 [ 277.880137] ? trace_hardirqs_on_caller+0xc0/0x310 [ 277.885074] ? trace_hardirqs_on_caller+0xc0/0x310 [ 277.890023] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 277.894788] ? trace_hardirqs_off+0x310/0x310 [ 277.899295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 277.904058] ? retint_kernel+0x2d/0x2d [ 277.907960] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 277.912897] wp_page_copy+0x46c/0x14f0 [ 277.916809] ? retint_kernel+0x2d/0x2d [ 277.920739] ? follow_pfn+0x2e0/0x2e0 [ 277.924560] ? unlock_page+0x3b2/0x4c0 [ 277.928456] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 277.933302] ? do_wp_page+0x76c/0x1390 [ 277.937208] ? lock_downgrade+0x900/0x900 [ 277.941361] ? kasan_check_write+0x14/0x20 [ 277.945612] ? kasan_check_read+0x11/0x20 [ 277.949767] ? do_raw_spin_unlock+0xa7/0x2f0 [ 277.954177] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 277.958766] ? __pte_alloc_kernel+0x220/0x220 [ 277.963261] ? trace_hardirqs_on_caller+0xc0/0x310 [ 277.968198] do_wp_page+0x774/0x1390 [ 277.971921] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 277.976598] ? lock_release+0x970/0x970 [ 277.980579] ? __handle_mm_fault+0x1e6c/0x53e0 [ 277.985164] ? kasan_check_write+0x14/0x20 [ 277.989409] ? do_raw_spin_lock+0xc1/0x200 [ 277.993659] __handle_mm_fault+0x2c60/0x53e0 [ 277.998075] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 278.002923] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 278.007690] ? retint_kernel+0x2d/0x2d [ 278.011595] ? lock_release+0x4d2/0x970 [ 278.015575] ? handle_mm_fault+0x42a/0xc70 [ 278.019812] ? lock_downgrade+0x900/0x900 [ 278.023971] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 278.029773] ? __get_user_pages+0x806/0x1b30 [ 278.034186] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 278.039640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.045205] ? check_preemption_disabled+0x48/0x200 [ 278.050232] handle_mm_fault+0x54f/0xc70 [ 278.054298] ? __handle_mm_fault+0x53e0/0x53e0 [ 278.058882] ? __get_user_pages+0x8a0/0x1b30 [ 278.063304] ? audit_kill_trees+0x460/0x460 [ 278.067626] __get_user_pages+0x806/0x1b30 [ 278.071880] ? follow_page_mask+0x1fb0/0x1fb0 [ 278.076387] ? retint_kernel+0x2d/0x2d [ 278.080280] ? retint_kernel+0x2d/0x2d [ 278.084171] ? trace_hardirqs_on_caller+0xc0/0x310 [ 278.089137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 278.093910] ? trace_hardirqs_off+0x310/0x310 [ 278.098409] ? lock_acquire+0x268/0x520 [ 278.102398] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 278.107166] ? retint_kernel+0x2d/0x2d [ 278.111085] populate_vma_page_range+0x2db/0x3d0 [ 278.115878] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 278.120823] ? find_vma+0x34/0x190 [ 278.124382] __mm_populate+0x286/0x4d0 [ 278.128274] ? populate_vma_page_range+0x3d0/0x3d0 [ 278.133212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.138766] ? ns_capable_common+0x13f/0x170 [ 278.143220] __x64_sys_mlockall+0x45b/0x630 [ 278.147553] ? __ia32_sys_munlock+0x160/0x160 [ 278.152052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.157592] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.162961] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 278.168415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.173978] do_syscall_64+0x1b9/0x820 [ 278.177872] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 278.183243] ? syscall_return_slowpath+0x5e0/0x5e0 [ 278.188192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.193035] ? trace_hardirqs_on_caller+0x310/0x310 [ 278.198054] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 278.203074] ? prepare_exit_to_usermode+0x291/0x3b0 [ 278.208099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.212956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.218143] RIP: 0033:0x457579 [ 278.221342] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.240265] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 278.247978] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 278.255244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 278.262689] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.269962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 278.277230] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 278.287055] Task in /syz1 killed as a result of limit of /syz1 [ 278.293182] memory: usage 204740kB, limit 204800kB, failcnt 686 [ 278.299351] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 278.306174] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 278.312527] Memory cgroup stats for /syz1: cache:0KB rss:195296KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:73928KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:119084KB [ 278.334117] Memory cgroup out of memory: Kill process 9988 (syz-executor1) score 344 or sacrifice child 04:37:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f000000affc)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r2}) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0), 0x8) read$eventfd(r3, &(0x7f0000000000), 0x8) 04:37:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)=0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x2d}}, 0xd536, 0x11}, &(0x7f00000006c0)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000700)={0x73, 0xcc, 0x8006, 0x89c6, 0x3ff, 0x8, 0x4332, 0x80, r4}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$int_out(r5, 0x2, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r4, 0x9}, &(0x7f00000005c0)=0x8) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r7 = syz_open_dev$usb(&(0x7f0000000500)='/dev/bus/usb/00#/00#\x00', 0x80, 0x60082) r8 = openat$cgroup_ro(r7, &(0x7f0000000a40)='cpuacct.usage_sys\x00', 0x2761, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000600)={'vlan0\x00', 0xa001}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f00000003c0)=0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f0000000640)=""/33, &(0x7f0000000680)=0x21) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0xc0c0583b, &(0x7f0000000140)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @ipv4={[], [], @loopback}, @remote, 0x200, 0x81, 0x987, 0x500, 0x4, 0x1260302, r3}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f00000009c0)=ANY=[@ANYBLOB="66696c746556000000000000000004000000000000000200000500000000000071000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008be8ffffffffffffff0000000000000800000000000000000000000000000000000000000000000000"], 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={r9, 0x8000, 0x10, 0xa}, &(0x7f00000003c0)=0x18) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0x9411e6bd9b44e9b}, 0xde) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000580)=0x4) sendfile(r2, r0, 0x0, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000007c0)={r9, @in6={{0xa, 0x4e22, 0x80000000, @mcast2, 0x100}}, 0x7, 0x0, 0x2, 0x1a42, 0x8}, 0x98) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280)=0x20000000000, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x80000000, 0xfffffffffffffff7}, 0x14c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000000000000004]}, 0x5c) 04:37:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x48}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x82, 0x400000) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x7, 0xfffffffffffffe00, 0x8, 0x4, 0xb82, 0x2, 0x648, 0x24e0000000000, 0x7f, 0x10000, 0x9593}) 04:37:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x80, 0x0, 0x0, 0xf19, 0x0, 0xabe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{}]}) 04:37:50 executing program 0: [ 278.343881] Killed process 10034 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 278.359575] oom_reaper: reaped process 10034 (syz-executor1), now anon-rss:0kB, file-rss:32640kB, shmem-rss:0kB 04:37:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) prctl$setptracer(0x59616d61, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:50 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x2, @local}], 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x5) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@remote, 0xb, r1}) 04:37:50 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'bpq0\x00', r1}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@NDA_DST_IPV6={0x14}]}, 0xff3b}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 04:37:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x101000) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000780)={0x0, @rand_addr=0x6, 0x4e23, 0x4, 'none\x00', 0x4, 0x361, 0x34}, 0x2c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @local}}, 0x9e4b, 0x8, 0x1, 0x4, 0x80000000}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000600)={r1, 0x20, 0x56, 0xffff, 0xd2fb, 0x2, 0x1, 0x100, {r2, @in6={{0xa, 0x4e24, 0x0, @remote, 0x3}}, 0x3ff, 0x2, 0x8, 0x6391, 0x7fff}}, &(0x7f00000006c0)=0xb0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000740)=r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101a00, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) epoll_pwait(r5, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000000280)={0x1}, 0x8) unlink(&(0x7f0000000700)='./file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00', r4}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890c, &(0x7f0000000100)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x0, 0x800, 0x50, 0x6, 0x0, 0x2a, 0x0, 0x95, 0x740, 0x6d, 0x1, 0x1, 0x3f, 0x8, 0x8], 0xb6e3f323acf6b415, 0x200}) 04:37:50 executing program 0: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/13, &(0x7f0000000140)=0xd) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2a07b2f8e3a40500040000", 0xb) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="b71b9d32b7415fcdd3eb6f3f949682aebf188869c35385ca", 0x18}], 0x1, &(0x7f0000000740)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x140, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0x3}], 0x11, &(0x7f00000011c0)=""/157, 0xfffffecf}}], 0x4000000000000a7, 0x0, &(0x7f0000001380)={0x77359400}) 04:37:50 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x3e0) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', &(0x7f0000000100)=""/183, 0xb7}, 0x11c) [ 278.863882] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 278.880947] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 278.901674] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 04:37:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000280001000000000003000000"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x81, 0x7, 0x80000000, 0x9}, 0x10) bind(0xffffffffffffffff, &(0x7f0000000000)=@nfc, 0x80) [ 278.923924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 278.949579] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 278.965386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 278.992144] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.016991] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.048144] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.063342] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 279.067524] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.080365] syz-executor1 cpuset=syz1 mems_allowed=0 [ 279.092223] CPU: 0 PID: 10055 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 279.099595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.102940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.108944] Call Trace: [ 279.108969] dump_stack+0x1c4/0x2b4 [ 279.108990] ? dump_stack_print_info.cold.2+0x52/0x52 [ 279.109010] ? mark_held_locks+0x130/0x130 [ 279.127026] ? mark_held_locks+0x130/0x130 [ 279.127045] dump_header+0x27b/0xf72 [ 279.127068] ? debug_smp_processor_id+0x1c/0x20 [ 279.143876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.143894] ? pagefault_out_of_memory+0x197/0x197 [ 279.143916] ? debug_smp_processor_id+0x1c/0x20 [ 279.159019] ? perf_trace_lock_acquire+0x15b/0x800 [ 279.163953] ? perf_trace_lock_acquire+0x15b/0x800 [ 279.168893] ? perf_trace_lock+0x7a0/0x7a0 [ 279.173132] ? perf_trace_lock+0x7a0/0x7a0 [ 279.177381] ? debug_smp_processor_id+0x1c/0x20 [ 279.182061] ? perf_trace_lock_acquire+0x15b/0x800 [ 279.187013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.192558] ? retint_kernel+0x2d/0x2d [ 279.192575] ? trace_hardirqs_on_caller+0xc0/0x310 [ 279.192592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.192607] ? trace_hardirqs_off+0x310/0x310 [ 279.192625] ? task_will_free_mem+0x239/0xb30 [ 279.200816] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 279.201460] ? ___ratelimit+0x36f/0x655 [ 279.210703] ? lock_downgrade+0x900/0x900 [ 279.210723] ? trace_hardirqs_on+0xbd/0x310 [ 279.210751] ? kasan_check_read+0x11/0x20 [ 279.210785] ? ___ratelimit+0x36f/0x655 [ 279.224092] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 279.224110] ? trace_hardirqs_on+0x310/0x310 [ 279.224125] ? lock_downgrade+0x900/0x900 [ 279.224144] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 279.224163] ? ___ratelimit+0xaa/0x655 [ 279.232259] ? idr_get_free+0xec0/0xec0 [ 279.232273] ? kasan_check_write+0x14/0x20 [ 279.232287] ? do_raw_spin_lock+0xc1/0x200 [ 279.232306] oom_kill_process.cold.27+0x10/0x903 [ 279.240749] ? kasan_check_write+0x14/0x20 [ 279.240763] ? do_raw_spin_lock+0xc1/0x200 [ 279.240785] ? oom_evaluate_task+0x540/0x540 [ 279.250175] ? cgroup_procs_next+0x70/0x70 [ 279.250191] ? _raw_spin_unlock_irq+0x60/0x80 [ 279.250204] ? oom_badness+0xaa0/0xaa0 [ 279.250221] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 279.259045] ? mem_cgroup_iter_break+0x30/0x30 [ 279.259060] ? trace_hardirqs_on_caller+0xc0/0x310 [ 279.259087] out_of_memory+0xa84/0x1430 [ 279.259103] ? retint_kernel+0x2d/0x2d [ 279.268101] ? oom_killer_disable+0x3a0/0x3a0 [ 279.268119] ? trace_hardirqs_on+0xb4/0x310 [ 279.268133] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 279.268153] mem_cgroup_out_of_memory+0x15e/0x210 [ 279.268168] ? memcg_memory_event+0x40/0x40 [ 279.276353] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 279.276376] ? page_counter_try_charge+0x1c1/0x220 [ 279.276395] try_charge+0xc43/0x1690 [ 279.285364] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 279.285385] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 279.285402] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 279.293841] ? lock_downgrade+0x900/0x900 [ 279.293858] ? lock_release+0x970/0x970 [ 279.293876] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 279.293894] ? trace_hardirqs_on_caller+0xc0/0x310 [ 279.302512] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.302552] ? get_mem_cgroup_from_mm+0x206/0x440 [ 279.302569] ? mem_cgroup_can_attach+0x580/0x580 [ 279.310949] ? retint_kernel+0x2d/0x2d [ 279.310977] mem_cgroup_try_charge+0x5ea/0xe10 [ 279.310998] ? mem_cgroup_protected+0xa60/0xa60 [ 279.311016] ? swp_swapcount+0x530/0x530 [ 279.320354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.320381] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 279.320402] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 279.329289] wp_page_copy+0x46c/0x14f0 [ 279.329302] ? kasan_check_write+0x14/0x20 [ 279.329318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.329338] ? follow_pfn+0x2e0/0x2e0 [ 279.329356] ? do_wp_page+0x76c/0x1390 [ 279.337719] ? lock_downgrade+0x900/0x900 [ 279.337750] ? kasan_check_write+0x14/0x20 [ 279.337765] ? kasan_check_read+0x11/0x20 [ 279.337784] ? do_raw_spin_unlock+0xa7/0x2f0 [ 279.347205] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 279.347222] ? __pte_alloc_kernel+0x220/0x220 [ 279.347245] do_wp_page+0x774/0x1390 [ 279.347264] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 279.356420] ? lock_release+0x970/0x970 [ 279.356447] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.356463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.356483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.366150] ? kasan_check_write+0x14/0x20 [ 279.374958] ? do_raw_spin_lock+0xc1/0x200 [ 279.374981] __handle_mm_fault+0x2c60/0x53e0 [ 279.375006] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 279.385912] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.385932] ? retint_kernel+0x2d/0x2d [ 279.385955] ? lock_release+0x4d2/0x970 [ 279.394790] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.399843] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.399864] ? retint_kernel+0x2d/0x2d [ 279.399886] ? handle_mm_fault+0x4ce/0xc70 [ 279.399906] handle_mm_fault+0x54f/0xc70 [ 279.407141] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.409576] ? __handle_mm_fault+0x53e0/0x53e0 [ 279.409600] __get_user_pages+0x806/0x1b30 [ 279.409628] ? follow_page_mask+0x1fb0/0x1fb0 [ 279.417984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.419213] ? retint_kernel+0x2d/0x2d [ 279.419227] ? retint_kernel+0x2d/0x2d [ 279.419242] ? trace_hardirqs_on_caller+0xc0/0x310 [ 279.419256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.419275] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.426506] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.427743] ? trace_hardirqs_off+0x310/0x310 [ 279.427760] ? lock_acquire+0x1ed/0x520 [ 279.427779] ? retint_kernel+0x2d/0x2d [ 279.438115] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.441240] ? trace_hardirqs_on_caller+0xc0/0x310 [ 279.441257] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.441271] ? trace_hardirqs_off+0x310/0x310 [ 279.441288] ? retint_kernel+0x2d/0x2d [ 279.446915] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.451751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 279.451771] populate_vma_page_range+0x2db/0x3d0 [ 279.451789] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 279.451806] ? __mm_populate+0x2ad/0x4d0 [ 279.456155] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.459930] __mm_populate+0x286/0x4d0 [ 279.459952] ? populate_vma_page_range+0x3d0/0x3d0 [ 279.459970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.459990] ? ns_capable_common+0x13f/0x170 [ 279.466062] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.469311] __x64_sys_mlockall+0x45b/0x630 [ 279.469326] ? __ia32_sys_munlock+0x160/0x160 [ 279.469342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.469357] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.469377] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 279.473740] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.477406] do_syscall_64+0x1b9/0x820 [ 279.477421] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 279.477463] ? syscall_return_slowpath+0x5e0/0x5e0 [ 279.477483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.482133] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.485847] ? trace_hardirqs_on_caller+0x310/0x310 [ 279.485864] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 279.485883] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.490720] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.494848] ? prepare_exit_to_usermode+0x291/0x3b0 [ 279.494886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.494908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.499842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.503086] RIP: 0033:0x457579 [ 279.503104] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.503112] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 279.507896] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.511738] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 279.511746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 279.511754] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.511762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 279.511771] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 279.513525] Task in [ 279.519408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.522580] /syz1 [ 279.527140] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.531486] killed as a result of limit of [ 279.536746] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.540260] /syz1 [ 279.545468] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.554078] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.558275] memory: usage 204800kB, limit 204800kB, failcnt 705 [ 279.565484] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.570624] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 279.576190] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.578309] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 279.582650] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.589045] Memory cgroup stats for [ 279.593934] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.597878] /syz1 [ 279.602916] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.609883] : [ 279.613396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.616964] cache:0KB [ 279.622291] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.626940] rss:195160KB [ 279.632051] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.638744] rss_huge:161792KB [ 279.643311] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.647121] shmem:0KB [ 279.651320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.657813] mapped_file:0KB [ 279.663070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.667767] dirty:0KB [ 279.672550] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.676257] writeback:0KB [ 279.683266] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.687821] swap:0KB [ 279.692887] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.697751] inactive_anon:73928KB [ 279.702088] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.713299] active_anon:2288KB [ 279.718553] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.724840] inactive_file:0KB [ 279.727764] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.734745] active_file:0KB [ 279.739392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.743611] unevictable:119064KB [ 279.749530] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.760477] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.766957] Memory cgroup out of memory: Kill process 10054 (syz-executor1) score 344 or sacrifice child [ 279.771166] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771185] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771211] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771229] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771247] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771266] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771302] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771320] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771356] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.771410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 279.777179] Killed process 10066 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 280.278751] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.284084] oom_reaper: reaped process 10066 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 280.285575] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.302991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.310148] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.316961] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.324244] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.331457] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.338618] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.345400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.353689] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.360829] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.367660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.374910] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.382085] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.394943] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.403332] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.410735] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.424001] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.430885] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.437564] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.444340] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.451078] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.457749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.464611] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.471328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.477999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.484706] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.491408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.498142] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.504819] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.511552] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.518277] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.524955] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.531654] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.538417] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.545121] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.551811] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.558522] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.565179] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.571877] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.578572] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.585229] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.591934] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.598652] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.605321] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.612025] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.618758] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.625440] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.632162] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.638890] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.645563] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.652279] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.658989] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.665657] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.672371] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.679061] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.685718] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.692410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.699119] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.705776] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.712476] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.719166] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.725840] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.732545] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.739246] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.745926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.752632] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.759356] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.766006] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.772686] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.779402] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.786070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.792798] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.799548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.806232] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.812913] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.819612] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.826277] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.833176] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.839901] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.846573] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.853282] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.860002] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.866681] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.873436] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.880143] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.886825] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.893558] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.900272] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.906946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.914126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.920869] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.927546] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.934290] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.941007] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.947716] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.954456] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.961168] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.967839] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.974540] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.981258] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.987915] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 280.995383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.002114] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.008820] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.015492] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.022249] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.028983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.035645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.042379] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.049099] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.055755] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.062478] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.069357] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.076017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.082715] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.089438] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.096135] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.102878] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.109588] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.116256] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.122981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.129679] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.136343] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.143071] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.149946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.156604] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.163306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.169999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.176683] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.183384] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 281.192152] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.199158] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 281.208112] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.214827] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.222056] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.229155] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.235840] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.235864] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.249723] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.256400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.256419] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.256445] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.270650] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.283874] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.290970] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.297682] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.297701] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.297737] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.311638] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.324613] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.331330] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.338005] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.344725] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.351416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.358144] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.364811] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.371501] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.378213] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.384871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.391588] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.398278] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.404933] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.411624] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.418321] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.425000] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.431850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.438579] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.445250] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.451953] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.458713] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.465376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.472393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.479102] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.485803] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.492508] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.499233] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.505893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.512626] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.519334] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.526025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.532732] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.539450] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.546107] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.552845] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.559562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.566217] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.572922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.579656] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.586304] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.593000] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.599701] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.606352] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.613067] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.619757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.626406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.633678] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.640399] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.647082] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.653777] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.660503] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.667182] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.674032] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.680781] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.687463] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.694151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.700854] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.707515] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.714227] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.720923] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.727607] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.734288] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.740988] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.747652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.754330] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.761029] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.767680] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.774359] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.781071] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.787738] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.794442] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.801135] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.807783] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.814492] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.821182] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.827841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.834523] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.841224] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.848097] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.854769] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.861476] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.868194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.874880] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.881640] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.888347] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.895030] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.901754] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.908460] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.915117] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.921808] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.928511] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.935166] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.941859] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.948556] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.955213] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.961907] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.968637] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.975299] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.981997] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.988719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 281.995382] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.002075] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.008784] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.015454] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.022176] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.028883] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.035537] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.042235] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.048943] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.055601] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.062298] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.068987] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.075673] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.082362] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.089045] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.095700] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.102400] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.109116] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.115769] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.122464] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.129151] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.135800] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.142487] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.149169] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.155817] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.162502] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.169194] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.175851] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.182541] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.189270] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.195947] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.202661] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.209344] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.215993] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.222678] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.229386] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.236034] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.242718] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.249415] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.256076] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.262774] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.269693] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.276350] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.283056] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.289751] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.296404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.303133] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.309860] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.316518] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.323248] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.329956] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.336641] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.343372] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.350070] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.356727] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.363479] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.370182] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.376845] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.383560] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.390258] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.396916] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.403726] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 04:37:54 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 282.410415] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.417077] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.423796] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 282.432410] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 04:37:54 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0x7ff, 0x0, 0x0, 0x8}) pwritev(r0, &(0x7f0000000040), 0x0, 0x0) fchdir(r0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0x49, 0x29, 0x1, {0x100, [{{0x1, 0x0, 0x8}, 0xffffffff7fffffff, 0x7, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x9, 0x7cc, 0x7, './file0'}]}}, 0x49) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x7) pwritev(r0, &(0x7f0000002480)=[{&(0x7f00000000c0)='M', 0x1}], 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 04:37:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5432, &(0x7f0000000180)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 04:37:54 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x58) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) 04:37:54 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x9, @local, 0x1}}, 0xfe6, 0x101, 0x400, 0x9, 0xbd}, &(0x7f0000000240)=0x98) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) 04:37:54 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6fff", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x45b752c965bbd694) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="0b0000002901001f000080"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$P9_RLOCK(r2, &(0x7f00000000c0)={0x8}, 0x8) 04:37:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-net\x00', 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) prctl$seccomp(0x16, 0x1, &(0x7f0000000380)={0x6, &(0x7f0000000200)=[{0xffffffffffffffff, 0xd1, 0x8, 0x1}, {0xd4a, 0x1000, 0x1ff, 0x4}, {0x2, 0x7fff, 0x200, 0x1}, {0x40, 0xfffffffffffffff8, 0x401, 0xc}, {0xfffffffffffffe01, 0x5, 0xe3, 0x100000001}, {0xfffffffffffffffa, 0x5, 0x3f, 0x8}]}) [ 282.550392] 9pnet: Insufficient options for proto=fd [ 282.566395] 9pnet: Insufficient options for proto=fd 04:37:54 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='io\x00') socketpair$unix(0x1, 0x20000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000005f00)=@ipx, 0x80, &(0x7f0000005f80), 0x0, 0x0, 0xd}}], 0x1, 0x0, 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) sendfile(r0, r1, &(0x7f0000000100), 0x2007ff) 04:37:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000015ff8)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000180)={r4, 0x2}) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x3ff, &(0x7f0000000080)=0x4) setsockopt$sock_timeval(r0, 0x1, 0x19, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) [ 282.681454] audit: type=1326 audit(1539146274.714:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10124 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 04:37:54 executing program 4: write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000140)={'bond_slave_0\x00'}) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000e40)="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", 0x0) execveat(r1, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) getpgid(0x0) socketpair(0x0, 0x80000, 0x80000001, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCCBRK(r1, 0x5428) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6, 0xfffffffffffffecf}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r4, 0x40, 0x200d}, 0x8) r5 = socket$inet6(0xa, 0x3, 0x6) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) stat(&(0x7f0000000980)='./bus\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@loopback, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)) dup(r3) getuid() getgroups(0x4, &(0x7f0000000c80)=[r6, 0xee00, 0xffffffffffffffff, 0x0]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f0000000340)=0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000003c0), 0x0) 04:37:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) process_vm_writev(0x0, &(0x7f0000000380), 0x0, &(0x7f0000001900), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) lstat(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) getgid() getpgrp(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x2000, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000001000), 0x1000) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000340)={0x0, r2+10000000}, &(0x7f0000000380), 0x8) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 282.761394] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 04:37:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) process_vm_writev(0x0, &(0x7f0000000380), 0x0, &(0x7f0000001900), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) lstat(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) getgid() getpgrp(0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x2000, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000001000), 0x1000) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000340)={0x0, r2+10000000}, &(0x7f0000000380), 0x8) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 283.470814] audit: type=1326 audit(1539146275.514:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10124 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 04:37:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) prctl$setptracer(0x59616d61, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:55 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x1fe) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0xbbbd) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x0, r4}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0xffffffff, 0x1) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000001c0)) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000440)=0x70) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYBLOB="c67bf167e58ab9f156330b0fe4cb40973091db8817ede93f126297d0c290a3628d0d9064978b206a9f8531318427d3a51f000000c24d1e448acf0ae6e99a3425963e0e04b2444d93ea9c42f0d0636acfc29105007ff1b3110dd44418f37ee57e028c6540b1e63b9c66a03f8458a5de9f3f77df74cc41e161fcda4f53758bb95e4021f3b9e3d1f3f7190fa5e15b32a3376adf61f8cb841c8d8d1ff58cce1c2f65da"], &(0x7f00000002c0)=0x1) syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x6, 0x10280) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) socket$inet6(0xa, 0x803, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000200)={0xffffffff}, 0x4) 04:37:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x5, 0x5, 0xc53, 0xdc58, '\x00', 0x1cc7}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x6400) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000140)={0x0, 0x57}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), 0x4) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0xfffffffffffff380, 0x9, 0xcd3, 0x2, 0x100000000, 0x80}, 0x81}, 0xa) 04:37:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$ndb(&(0x7f0000000480)='/dev/nbd#\x00', 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='F:::'], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ceph\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') accept4$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @loopback}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1800020}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r2, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) getpid() ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000080)={0x6, 0x100000001}) 04:37:55 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000400)=0x0) r1 = syz_open_dev$usb(&(0x7f0000000540)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000680)={{0x9, 0x0, 0xffffffffffffffc8, 0x5, 'syz0\x00', 0x1f}, 0x4, 0x200, 0x40, r0, 0x6, 0x1000, 'syz1\x00', &(0x7f0000000580)=['/dev/snd/seq\x00', 'em0cpuset}eth0vmnet0(\x00', 'ppp0\x00', 'port0\x00', '\x00', '*)vmnet0\x00'], 0x38, [], [0x6, 0x2, 0xffffffffffffffff, 0x3]}) ptrace$peekuser(0x3, r0, 0x1) r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x80000) read(r2, &(0x7f0000000640)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) r3 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0x4}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r5, 0x7fffffff, 0x30}, &(0x7f0000000380)=0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000200)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0bc5351, &(0x7f0000000180)) mq_unlink(&(0x7f00000003c0)='\x00') getsockname(r4, &(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x80) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x0, @time}) ptrace$poke(0x5, r0, &(0x7f0000000500), 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 04:37:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x9, 0x400, 0x401, 0x800, 0x7, 0x1f, 0x100000001, 0x5, 0xfffffffffffffffd, 0x1000, 0x3ff, 0x5b38, 0x3}, {0x82e8, 0xd29f, 0x180000000000, 0x2, 0x6, 0x1, 0x101, 0xfffffffffffffff9, 0x6, 0x6, 0x1, 0x0, 0x2}, {0x400, 0x8, 0x9, 0xe00, 0x80000001, 0x401, 0x6, 0x0, 0x1, 0xf78, 0xff, 0x608, 0x2}], 0x101}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) setresuid(0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x1000002192c04) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532342c73713d3078303030303030303030303030303030342c73713d3078303030303030303030303030343862362c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030303030392c756e616d653d73797a2c70726976706f72742c616e616d653d657468302b73797374656d002c72713d3078303030303030303030303030303030382c63616368653d6d6d61702cd76f626a5f747970653d6b657972696e67002c6673636f6e746578743d73797361646d5f752c7375626a5f726f6c653d73797a2c00"]) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) setgroups(0x0, &(0x7f00000001c0)) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, r2) 04:37:55 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x1, 0xfffffffffffffffd) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) 04:37:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000000)={0x200, 0x0, &(0x7f0000000100)="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", &(0x7f00000002c0)="bb19fcd74673ba77a8e6b5d8237368f92c75f1cb412a7dc1e241229faaac9e599af86f0e28dd81d698c8856005a9134ceff37dc8cd139812d71024afd24a96764e63112599ef13245c81fbde4c10c49d1fff693e661cfd837395d08b0d44184ec017543b1d37687fe331ad91a40e2ad0a18f861e91000bb16673d67f360b91b358c40f5a2ac938df3e5177cedc957f626db79755bab9006a4f867f9091197caa", 0xfb, 0xa0}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x804e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x803, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000080), 0x7, 0x2) [ 283.901242] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 283.912860] syz-executor1 cpuset=syz1 mems_allowed=0 [ 283.918224] CPU: 0 PID: 10182 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 283.925595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.934953] Call Trace: [ 283.937562] dump_stack+0x1c4/0x2b4 [ 283.941201] ? dump_stack_print_info.cold.2+0x52/0x52 [ 283.946396] ? mark_held_locks+0x130/0x130 04:37:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000080), 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2e, 0xaff}, 0x14}}, 0x0) [ 283.950634] ? mark_held_locks+0x130/0x130 [ 283.954886] dump_header+0x27b/0xf72 [ 283.958616] ? debug_smp_processor_id+0x1c/0x20 [ 283.963298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.968851] ? pagefault_out_of_memory+0x197/0x197 [ 283.973796] ? debug_smp_processor_id+0x1c/0x20 [ 283.978472] ? perf_trace_lock_acquire+0x15b/0x800 [ 283.978486] ? perf_trace_lock_acquire+0x15b/0x800 [ 283.978504] ? perf_trace_lock+0x7a0/0x7a0 [ 283.978516] ? perf_trace_lock+0x7a0/0x7a0 [ 283.978534] ? debug_smp_processor_id+0x1c/0x20 [ 283.978548] ? perf_trace_lock_acquire+0x15b/0x800 [ 283.978564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.978583] ? perf_trace_lock+0x7a0/0x7a0 [ 284.016245] ? task_will_free_mem+0x239/0xb30 [ 284.020770] ? ___ratelimit+0x36f/0x655 [ 284.024750] ? lock_downgrade+0x900/0x900 [ 284.028911] ? trace_hardirqs_on+0xbd/0x310 [ 284.033238] ? kasan_check_read+0x11/0x20 [ 284.037394] ? ___ratelimit+0x36f/0x655 [ 284.041388] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 284.046843] ? trace_hardirqs_on+0x310/0x310 [ 284.051271] ? lock_downgrade+0x900/0x900 [ 284.055450] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 284.060559] ? ___ratelimit+0xaa/0x655 [ 284.064488] ? idr_get_free+0xec0/0xec0 [ 284.068474] ? kasan_check_write+0x14/0x20 [ 284.072720] ? do_raw_spin_lock+0xc1/0x200 [ 284.076978] oom_kill_process.cold.27+0x10/0x903 [ 284.081743] ? kasan_check_write+0x14/0x20 [ 284.085992] ? do_raw_spin_lock+0xc1/0x200 [ 284.090240] ? oom_evaluate_task+0x540/0x540 [ 284.094659] ? cgroup_procs_next+0x70/0x70 [ 284.098903] ? _raw_spin_unlock_irq+0x60/0x80 [ 284.103403] ? oom_badness+0xaa0/0xaa0 [ 284.107309] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 284.112070] ? mem_cgroup_iter_break+0x30/0x30 [ 284.116670] ? cgroup_file_notify+0x226/0x2f0 [ 284.121179] out_of_memory+0xa84/0x1430 [ 284.125160] ? kasan_check_read+0x11/0x20 [ 284.129314] ? oom_killer_disable+0x3a0/0x3a0 [ 284.133812] ? kasan_check_write+0x14/0x20 [ 284.138047] ? do_raw_spin_lock+0xc1/0x200 [ 284.142296] mem_cgroup_out_of_memory+0x15e/0x210 [ 284.147142] ? memcg_memory_event+0x40/0x40 [ 284.151472] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 284.156241] ? page_counter_try_charge+0x1c1/0x220 [ 284.161192] try_charge+0xc43/0x1690 [ 284.164960] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 284.170075] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 284.176138] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 284.180989] ? lock_downgrade+0x900/0x900 [ 284.185143] ? lock_release+0x970/0x970 [ 284.189155] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 284.194955] ? kasan_check_read+0x11/0x20 [ 284.199110] ? do_raw_spin_unlock+0xa7/0x2f0 [ 284.203520] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 284.208146] ? get_mem_cgroup_from_mm+0x206/0x440 [ 284.212995] ? mem_cgroup_can_attach+0x580/0x580 [ 284.217769] ? __might_sleep+0x95/0x190 [ 284.221754] mem_cgroup_try_charge+0x5ea/0xe10 [ 284.226343] ? lock_downgrade+0x900/0x900 [ 284.230497] ? mem_cgroup_protected+0xa60/0xa60 [ 284.235173] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 284.240227] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 284.245265] ? __handle_mm_fault+0x2c32/0x53e0 [ 284.249864] ? pmd_val+0x88/0x100 [ 284.253327] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 284.258875] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 284.263812] __handle_mm_fault+0x273a/0x53e0 [ 284.268231] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 284.273091] ? __dump_page.cold.2+0x179/0x179 [ 284.277590] ? follow_page_mask+0x237/0x1fb0 [ 284.282008] ? follow_page_mask+0x18d/0x1fb0 [ 284.286461] ? handle_mm_fault+0x42a/0xc70 [ 284.290736] ? lock_downgrade+0x900/0x900 [ 284.294897] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 284.300728] ? __get_user_pages+0x806/0x1b30 [ 284.305138] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 284.310601] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 284.316175] ? check_preemption_disabled+0x48/0x200 [ 284.321198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.326748] handle_mm_fault+0x54f/0xc70 [ 284.330817] ? __handle_mm_fault+0x53e0/0x53e0 [ 284.335398] ? find_vma+0x34/0x190 [ 284.338949] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 284.343978] __get_user_pages+0x806/0x1b30 [ 284.348225] ? follow_page_mask+0x1fb0/0x1fb0 [ 284.352749] ? perf_trace_lock+0x7a0/0x7a0 [ 284.357026] ? lock_acquire+0x1ed/0x520 [ 284.361021] ? __mm_populate+0x31a/0x4d0 [ 284.365085] ? lock_release+0x970/0x970 [ 284.369062] ? arch_local_save_flags+0x40/0x40 [ 284.373665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.379345] populate_vma_page_range+0x2db/0x3d0 [ 284.384107] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 284.389033] ? find_vma+0x34/0x190 [ 284.392576] __mm_populate+0x286/0x4d0 [ 284.396492] ? populate_vma_page_range+0x3d0/0x3d0 [ 284.401469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.407025] ? ns_capable_common+0x13f/0x170 [ 284.411448] __x64_sys_mlockall+0x45b/0x630 [ 284.415773] ? __ia32_sys_munlock+0x160/0x160 [ 284.420276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.425818] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.431189] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 284.436644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 284.442192] do_syscall_64+0x1b9/0x820 [ 284.446088] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 284.451470] ? syscall_return_slowpath+0x5e0/0x5e0 [ 284.456403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.461271] ? trace_hardirqs_on_caller+0x310/0x310 [ 284.466289] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 284.471312] ? prepare_exit_to_usermode+0x291/0x3b0 [ 284.476337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.481205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.486396] RIP: 0033:0x457579 [ 284.489597] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.508501] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 284.516235] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 284.523517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 284.530790] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 284.538059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 284.545340] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 284.572602] Task in /syz1 killed as a result of limit of /syz1 [ 284.585988] memory: usage 204792kB, limit 204800kB, failcnt 743 04:37:56 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x401000) r1 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000030000000f02bc18f4e10101fe00593bf4af7cda6c50df9d33ab7fb0afb4104f9a6c9043b66360eb1461ef44f52ea055db6bce9006cb956ee396f1d749b0188462f4e9c42751066b4dbbf078c250615dbdf7f23dcd378af204958e7a1bac6a1207be39e842350bbedbe89aca5a7312e718308a7e5c2916e53c9bfc6a0915b7b12c92c111434cc0c6ae964fc63005604bfca2f7504704ee26a9984dd3d3e9890cd5cfba5fa1689bb813b02e14359037905fb0f6d29b6e682f520f73ca9fa1192833adb"], &(0x7f0000000100)=0x8) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f0000000140)=""/4, 0x4}], 0x2, &(0x7f0000000340)=""/9, 0x9, 0x7}, 0x40000000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@local, 0x30, r3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x380, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000440)='syz1\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 284.613561] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 04:37:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x7f}, {}], 0x2) semop(0x0, &(0x7f00000001c0), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fffffff}], 0x1, &(0x7f00000000c0)={0x0, r3+10000000}) semop(r1, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 04:37:56 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4673000200faff3c46dc000000006e0100000000a4e24000000000000000f4010000000000f336f1aa00030038000100ffff0000d9ba05000070010000004000000000000000050000000000000001800000000000000100000000000000060000ec05000000000000800000000005402fc8e76d86f7afad21f1dfde89256d81fe0fe797a94935e51d088d8fa16dd8cbf0d6b2054d53e2c8b190c043c04c206c9657712327654e700dac1c8bc9905e26f80000003d47c9ad1d000000000000000000004d86a89ba98dde000000000000000000000000000000000000000000000000000000000000000000000000700c00000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000c099170ad72987c0ad12cec8cf55f7f7a4d07701493c46"], 0x13e) sendfile(r0, r0, &(0x7f0000000080), 0x10001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0)=0xf, 0xa198) [ 284.667797] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 284.693384] libceph: connect [f::]:6789 error -101 [ 284.710538] libceph: mon0 [f::]:6789 connect error [ 284.729712] Memory cgroup stats for /syz1: cache:0KB rss:195312KB rss_huge:161792KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:78272KB active_anon:2296KB inactive_file:0KB active_file:0KB unevictable:114840KB [ 284.773127] Memory cgroup out of memory: Kill process 7884 (syz-executor1) score 248 or sacrifice child [ 284.787886] Killed process 7884 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 284.805334] oom_reaper: reaped process 7884 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x38a7, 0x4, &(0x7f0000000540)=[{&(0x7f0000000300)="942bdbe8d26ea60b764d98a6f4f5c592a32e63f7a145002a485c4e59a73aadd7ef882f712fb94d10d85330a8224c61b6a88b4595ab0218f87005badfaceaf9199aa54de5f1e436cb994e42795a069f43546e85c03296f6df5c46ec7cb7600e057c002a8a9632a793a32ae17cc4f126b8d9ee552a0f8e796e72ad65b7fdc31da2fa26a44b0ff9b43aad2a239fa7b38b9eb0436a328e66cbd6511a33f78c58c0e456430d803671c4f7444d589f80c185a737debf8fbfc9fab480eeb905aa66350d58a110bb431d3ada5e1901660f8072d837652c2817011e27d266d9afb7a3b51ecb25", 0xe2, 0x82}, {&(0x7f00000001c0), 0x0, 0x6000000000000000}, {&(0x7f0000000400)="41c8828895944348a2e7f140c8591012c52c35af2e1af94d4f6a2fdacb7bf0a6e70b2fc29a78901c1f2d2612034e2755f85c45a5d1630102c5e84cddc99f5fa6ae9ca6684530ebfa3c63c7b7e1fe1cfc34517e3f07b6ba57f35d6aca7da9c931285ddc", 0x63, 0x1f}, {&(0x7f0000000480)="7840ffc6325d6b919a0f38ab262f57c7f8371ebc3ad4b23d72293ef5a4cee4fe9ffe4203570d59cab9b43a89df77d39c48df6be0af683a14eddd35f8d4b4d38830191629a5e4390d", 0x48, 0x1}], 0x44001, &(0x7f0000000200)={[{@nodiscard='nodiscard'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure='measure'}]}) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 04:37:57 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000003180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0xffffffffffffff8a) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000500)=0x80) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000640)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000400)={{0x7e, @dev, 0x4e21, 0x0, 'sh\x00', 0x10, 0x6000000000000, 0x34}, {@broadcast, 0x4e22, 0x2003, 0xfffffffffffff9d3, 0xfffffffffffffff8, 0x2}}, 0x44) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140), 0x3}, 0x20) [ 285.244573] IPVS: set_ctl: invalid protocol: 126 172.20.20.0:20001 [ 285.312826] IPVS: set_ctl: invalid protocol: 126 172.20.20.0:20001 [ 285.321382] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 285.332854] syz-executor1 cpuset=syz1 mems_allowed=0 [ 285.337999] CPU: 1 PID: 10240 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 285.345370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.354735] Call Trace: [ 285.357342] dump_stack+0x1c4/0x2b4 [ 285.360990] ? dump_stack_print_info.cold.2+0x52/0x52 [ 285.366199] ? mark_held_locks+0x130/0x130 [ 285.370457] ? mark_held_locks+0x130/0x130 [ 285.374700] dump_header+0x27b/0xf72 [ 285.378444] ? debug_smp_processor_id+0x1c/0x20 [ 285.383110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.388648] ? pagefault_out_of_memory+0x197/0x197 [ 285.393600] ? debug_smp_processor_id+0x1c/0x20 [ 285.398295] ? perf_trace_lock_acquire+0x15b/0x800 [ 285.403248] ? perf_trace_lock_acquire+0x15b/0x800 [ 285.408196] ? perf_trace_lock+0x7a0/0x7a0 [ 285.412465] ? perf_trace_lock+0x7a0/0x7a0 [ 285.416730] ? debug_smp_processor_id+0x1c/0x20 [ 285.421418] ? perf_trace_lock_acquire+0x15b/0x800 [ 285.426365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.431909] ? perf_trace_lock+0x7a0/0x7a0 [ 285.436160] ? task_will_free_mem+0x239/0xb30 [ 285.440675] ? ___ratelimit+0x36f/0x655 [ 285.444662] ? lock_downgrade+0x900/0x900 [ 285.448838] ? trace_hardirqs_on+0xbd/0x310 [ 285.453169] ? kasan_check_read+0x11/0x20 [ 285.457330] ? ___ratelimit+0x36f/0x655 [ 285.461296] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 285.466748] ? trace_hardirqs_on+0x310/0x310 [ 285.471166] ? lock_downgrade+0x900/0x900 [ 285.475334] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 285.480483] ? ___ratelimit+0xaa/0x655 [ 285.484382] ? idr_get_free+0xec0/0xec0 [ 285.488371] ? kasan_check_write+0x14/0x20 [ 285.492626] ? do_raw_spin_lock+0xc1/0x200 [ 285.496880] oom_kill_process.cold.27+0x10/0x903 [ 285.501655] ? kasan_check_write+0x14/0x20 [ 285.505907] ? do_raw_spin_lock+0xc1/0x200 [ 285.510165] ? oom_evaluate_task+0x540/0x540 [ 285.514595] ? cgroup_procs_next+0x70/0x70 [ 285.518825] ? _raw_spin_unlock_irq+0x60/0x80 [ 285.523336] ? oom_badness+0xaa0/0xaa0 [ 285.527253] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 285.532031] ? mem_cgroup_iter_break+0x30/0x30 [ 285.536639] ? cgroup_file_notify+0x226/0x2f0 [ 285.541147] out_of_memory+0xa84/0x1430 [ 285.545134] ? kasan_check_read+0x11/0x20 [ 285.549302] ? oom_killer_disable+0x3a0/0x3a0 [ 285.553798] ? kasan_check_write+0x14/0x20 [ 285.558043] ? do_raw_spin_lock+0xc1/0x200 [ 285.562315] mem_cgroup_out_of_memory+0x15e/0x210 [ 285.567186] ? memcg_memory_event+0x40/0x40 [ 285.571522] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 285.576288] ? page_counter_try_charge+0x1c1/0x220 [ 285.581255] try_charge+0xc43/0x1690 [ 285.584981] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 285.590104] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 285.596186] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 285.601099] ? lock_downgrade+0x900/0x900 [ 285.605271] ? lock_release+0x970/0x970 [ 285.609261] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 285.615072] ? kasan_check_read+0x11/0x20 [ 285.619232] ? do_raw_spin_unlock+0xa7/0x2f0 [ 285.623664] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 285.628241] ? get_mem_cgroup_from_mm+0x206/0x440 [ 285.633072] ? mem_cgroup_can_attach+0x580/0x580 [ 285.637820] ? __might_sleep+0x95/0x190 [ 285.641791] mem_cgroup_try_charge+0x5ea/0xe10 [ 285.646371] ? lock_downgrade+0x900/0x900 [ 285.650513] ? mem_cgroup_protected+0xa60/0xa60 [ 285.655183] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 285.660215] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 285.665239] ? __handle_mm_fault+0x2c32/0x53e0 [ 285.669826] ? pmd_val+0x88/0x100 [ 285.673269] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 285.678801] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 285.683723] __handle_mm_fault+0x273a/0x53e0 [ 285.688123] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 285.692949] ? __dump_page.cold.2+0x179/0x179 [ 285.697458] ? follow_page_mask+0x18d/0x1fb0 [ 285.701874] ? handle_mm_fault+0x42a/0xc70 [ 285.706095] ? lock_downgrade+0x900/0x900 [ 285.710239] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 285.716024] ? retint_kernel+0x2d/0x2d [ 285.719912] ? __get_user_pages+0x806/0x1b30 [ 285.724333] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 285.729787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 285.735314] ? check_preemption_disabled+0x48/0x200 [ 285.740319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.745849] handle_mm_fault+0x54f/0xc70 [ 285.749909] ? __handle_mm_fault+0x53e0/0x53e0 [ 285.754495] ? find_vma+0x34/0x190 [ 285.758060] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 285.763074] __get_user_pages+0x806/0x1b30 [ 285.767302] ? follow_page_mask+0x1fb0/0x1fb0 [ 285.771788] ? perf_trace_lock+0x7a0/0x7a0 [ 285.776008] ? lock_acquire+0x1ed/0x520 [ 285.779992] ? __mm_populate+0x31a/0x4d0 [ 285.784043] ? lock_release+0x970/0x970 [ 285.788018] ? arch_local_save_flags+0x40/0x40 [ 285.792596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.798143] populate_vma_page_range+0x2db/0x3d0 [ 285.802901] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 285.807831] ? find_vma+0x34/0x190 [ 285.811469] __mm_populate+0x286/0x4d0 [ 285.815344] ? populate_vma_page_range+0x3d0/0x3d0 [ 285.820281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.825816] ? ns_capable_common+0x13f/0x170 [ 285.830237] __x64_sys_mlockall+0x45b/0x630 [ 285.834552] ? __ia32_sys_munlock+0x160/0x160 [ 285.839037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.844584] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.849949] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 285.855386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 285.860930] do_syscall_64+0x1b9/0x820 [ 285.864805] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 285.870165] ? syscall_return_slowpath+0x5e0/0x5e0 [ 285.875091] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.879933] ? trace_hardirqs_on_caller+0x310/0x310 [ 285.884950] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 285.889955] ? prepare_exit_to_usermode+0x291/0x3b0 [ 285.894960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.899797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.904971] RIP: 0033:0x457579 [ 285.908154] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.927062] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 285.934762] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 285.942038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 285.949297] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 285.956575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 285.963831] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 285.978355] Task in /syz1 killed as a result of limit of /syz1 [ 285.984455] memory: usage 204800kB, limit 204800kB, failcnt 770 [ 285.991044] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 285.997815] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 04:37:58 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a280930a060f0000a84308910000003900080008000200f0ff0000d54400009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x8000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x7, [0xfffffffffffffffc, 0x0, 0xffff, 0x3, 0xb38, 0x5, 0x1]}, &(0x7f00000001c0)=0x12) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000100)={0xff, 0x24b, 0xdeb, 'queue0\x00', 0xffffffffffffff3d}) 04:37:58 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x44a00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) 04:37:58 executing program 3: seccomp(0x1, 0x0, &(0x7f00000002c0)={0x14197261ce63efd1, &(0x7f0000000000)=[{0x61}, {0xa288, 0x0, 0x0, 0xffffffffffffffff}]}) socketpair$inet(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000540)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x1, @broadcast}, 0x0, {0x2, 0x4e24, @rand_addr=0x5}, 'bond_slave_1\x00'}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f0000000300)=""/255, 0xff) socketpair(0x10, 0x80806, 0x100000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x1a, 0x34, 0x9, 0x19, 0x3, 0x9, 0x6, 0x9c, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000480)={0x7f3, 0x2, 0x6, 'queue0\x00', 0x1f}) bind$can_raw(r2, &(0x7f0000000280)={0x1d, r4}, 0x10) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) 04:37:58 executing program 0: r0 = socket$inet(0x2, 0x40003, 0x1f) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x2d, "f2897f2e67e05476362b08763a2a383f6bb2e95c2c2219aa6c3219c35c4b05bd3fca12d75e7203c7a3acc04be4"}, &(0x7f0000000380)=0x35) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="060019000100f9ff51000408ae8995bddf3e91125c59f02077be26f9a38aaad531e1644000000000000000d38c90"], &(0x7f0000000400)=0x10) r2 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x0, 0x381002) write$FUSE_LSEEK(r2, &(0x7f0000000500)={0x18, 0x0, 0x1, {0x4}}, 0x18) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="b4e35679ab110a20dad911cd807073d2c93272e89dc00abd922369945e8be9b63cfe260590bfc6be0034023caea775392f47d214e4ad40e95017f28a8c9c72417c4f171b13054cad6cef310860ac0924ccae7ad15bd01609a5a66412b57ced051e9352ccbdf636a66c8e2febd6a186112af18d48d7eb4ebe14b51890bf325789bccb411d879c2c5f0a2f60146c1b6b4655378798f24a57e0f2c7da23dbd5c996956c9616e06816", 0xa7}, {&(0x7f00000000c0)="ec1a4e5e23ba9d459d0ba18389d9e55d3a8c4544dddb82767bd67f180d85eea4e1e672fd8545d8b60078fe8dc68cf86d163fca8aa63137abbcc9c42b0b5d16eb18b1586866250222df15e025afd1", 0x4e}, {&(0x7f0000000140)="4a0731c1cc3fd96f35e69f2afee7df3645872dbc99ff9b84113f4c318503795e351d3b5d325b76d7191acb318e9c3a092c25cddeb275029eb8610cd28fea11493609ba115e1c99e056f122ecd9791e74ee2f86b2fcfdfd8b19fd565f502772ea41758963f0a7c1ce710e05ca279c29e03f28202274ddc112ecf98ce4464c2640f914ff", 0x83}, {&(0x7f0000000200)="3e6cfc22a43fe23d08712af5bc9658dfc08a0b4dfca19caee1e27b7a82bd491e980c391efbe34bde91a6d7dad562a98f9e1a3222bd9cc4c6e9adbec4ca09b2da2e85339fa697d5a2ef9ddb51b584fe0db3e8eb2a74b71396542926743ca173d6194ea358bb12e7af72e236ad5891df73c95d29fc870aa1335d70c7d5e9ec74380337104ace49d4a7d884079893a327283553f4822196023908453bf7924e778e7c590dde267c9a60dd0cda290854149ed250fdc7c22532a7e0d91aa4115fe31defe23b21", 0xc4}], 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0xfffffffffffff000, 0x12000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000480)=0x400) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000580)={0x3, &(0x7f00000003c0)=[{0x75, 0x2d, 0xb467, 0x4}, {0x6, 0x9, 0xae22, 0x10001}, {0x8e, 0x800, 0x6, 0x100000000}]}, 0x10) 04:37:58 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=""/77, 0x4d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x6b3, &(0x7f0000001200), 0x2d4}, 0x8000) close(r1) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000840), 0x3e8, &(0x7f0000000080)}, 0x0) [ 286.004565] Memory cgroup stats for /syz1: cache:0KB rss:195444KB rss_huge:159744KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:84420KB active_anon:2292KB inactive_file:0KB active_file:0KB unevictable:108744KB 04:37:58 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) write(r1, &(0x7f0000000080), 0xe) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x5b, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000080)="99015ed0a2b4fce57519a4011e01545a1d6c29f382a42572e318ff2aa18fb797d03cd1fb7a96546170926e1f7ec5663c02fb2dd622429dde3b8830ab7eb84009af7f2ba94a1ecfbdb57fcf757cd8858f3548c4a33ed9d04064f3daefad417b334d13ae8c", &(0x7f0000000140)=""/234}, 0x18) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8930, 0xcc70b8ef837aa8b5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x10001}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r4, 0x20}, 0x8) tkill(r0, 0x1000000000016) 04:37:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400000) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r2, r3}) msgsnd(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0xfd1, 0x800) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000140)={0x9, 0x9, 0x1, 0x9}, 0x6) clone(0x20000000, &(0x7f0000001180)="c471b2b6ee8bf74279d62d1a1157108c23af2c1f14711244ee36b4dc8243194dd751e3eb60c5c2ec813b13f8bac639dd95c31607e35259a05bcaa70f60b2ca72c3244d8d32cde9f459e664b08fa38400573a0b824737de6a8275d5fd0cfdc61512480534924b4882bc0ea6b68e8a86a05a0dc1a915280ad49bb2ffaca81114e9bd67206a1e1780aad52e321eb4200b9eaa7370b861f17ea4e5cdd25ac9500c6877abc51121c640a1d9daf8981aa1c713d1cbfe9b60277c316493f6ad8953b361d96cf5917d382405daefdb2767e7e5ab36b8d2f25d87362957e82d78c624829a67198125cd2e085f2905f59d74c75efd1a17bef4359c06a25449dfb2a823adf149e1c84d069f3a96eeb0c66b9efbddf65d226797b26174df4dfb3dbe9a303162490a125c3221a6cf1b3439b890f88391ef5a4c33902bbf8624172f9ca7538d5294b4135ccbfbda29891e539555237d6672ef615e0507b5871177146d7be552f3602ef4b825bed34d65b00f06d964e384874b394a7b3f3f2f274857c3768e80352bd85bdaef5f3fd53484cde930a07ae958e39dbc075044240602453d8861fbc102460175ff7eb49c06e5dc0a6fc11fd57df72d0484b6a42f734c508fa0d57cd24815a075bff926c990d1b8ae1c9471dc0b641740d046ac565da95086a74c3319fafb61e09f0d75eaec0bd022528c64c48018427be2527a5539cb93c84858344fc5f830694ccfc28b94508ee53de2bd872009c56e96882fd22cd58a25f5caeddb851e6142fd6667bfbdcffd8cd4f58d520062974e882d30912bce810d642bf1850df051c21c8e258ad33ce57f31dd2a4abddc487d317b692042dbd6719b517741d825a54feafc492e5e3f9226c48c7275a28d4d082a3703c183198c9249f2b2bbd66b369a0f3d2bc16b3b40128aaf6b15f941df3e2d48009a9fdc942e9cfb123d0ea671d08af1449d0b6bb3d5e00d6253fb0ec848addde83611dbe3e90835d7311d832cc050cc38613e1903df1a2776d6e00abeb59ec9cec27b907e60bf317d2f432bcf365751f1818590c704a6b3eadd8c6bb3c3d21db25bb7be6699725ff4db70462a634223f454303163ae6a0f6b061ac3949090c900271f8afd1739f14496f4159a42a6bb8d09c107fcf20cdb7623945710bec93490bea8eb48c4b1578ff56b8188657c908c5997216bf6d5c3280b9dcce5865f23307ad4b3ee8da2dfcf742b86294f1d6b1258d10947756d7847d4643fbc58b05edb962a9cfd2c56f6efbb80b5ea8029d0071ef5bcd21c8acc83a115239ec7c6cfc44fd99bd8e766180200c90c9eaa3a07728ab9f371ea521962852d6f0576d73f78561520d92fba3300c381f0c7ee07802a4ee620e1bd4debba5e7d57cda7ff90fc60a996dd796d9a5ca2ae3be4ae15dd9f02464979ae003a1ad513e0e8d7869c76f784cacd5065a274ed248ee0b34186b9b84193c8d55b923472d39d4aae19e65367a080c00484e6e2b31bbb395389b79291f8d73919acabcd4ffb0b566b895211ebb3118ea33e3ff4701ef537afcc3f1e7cca790d9a50151b0f0eaefd6ab8f7e6c5242beab34e0a13ed04cd35315622aec4ca63992c705f66ef7df1f4bfd74d3e3f2d5b2e3c3f5b54ccf2c581babf181e99662729d221e449ef1d180372ad596233ec77ca36477c52919267e6bb55eb59978cbe1a09c59162bfdc128acf26a428b56590640c3bc95a3aaad2bfef73216ed795a8469dbb2ca8a351cff8f1250a42ad6872b32bb0ffa690c9b4f1dde52b51689ce9a96829d8af55e38e7a12f616783fdedb7715aa1378287b84b072c8cb39816337a0ae5dc8f570fcedd78d902abdcb93257cd10a32c451f5ff5e9a7a52489181a360da2cfabdc2bdda70d71d58790e227638f94a29da107bcb41aebc7ad3967b7a163456291d81dbd2b809cd7e9ad63b311380f945f18b5638113f8dac4b16f788d954c3ba102db1985dc6fb5749ce4fc77ad21db4f65b0518349a7a6556ff47294e3a18b57fe82302834bef4fd7c684aeecda29b1d9b570a57d80033ab3f954586e9ffa6f87f05d77ee45de85662e4b7b4bbde995058e450661a73b39fcf9beac05d285829dbe79672b6f4d4fb7997392d49c94aae828583b4f22c22c29386a3b8f3df834a1bcb3687bb7aca97b2b0374d110802bd879628238b41a69a0323250c5c92e0c98a59780fb88b241214fa13c665ae15d8b7760c3dbde0ebb79a4eb75e2cabcc49141a8c2a75e2a77b3f1285e1dcd75899d6cfda28886b5bc5ac0579b25393365feeef163a2c84a3372576149ca7cd6cb16410fbc85f9908736dc6903066e132eb7c429a1e62b26e014eb97b78d5e3ba56d2ce8eaebe77e8de942a688e1267dea04f1665c83bdec8c500a11d5cc8c7a0c269edd5bb24f8a0dcba24092493cf044c0e7636e0f3577e900d7253f0cbca90d5d8bbd92a945678d4a3091e4a7bc1c5085837f39c538f479782955ece9452ed94e9084fa21eb886be81ec19c65f680dd9905415caefd7b246015b03471d6b94bc533239924d0a3064107e91d7e97a1e3ebb58ced515e58421e06c3975d00938946437856706ea92118b6f7e7da21878a00dc4658b501e95168e2179ea193c963555bf69aa08c897cdf4fdbd1c746a625df81fa77b57f9d2efc399bceb1cf4cab8d7a72a2d56a9384b4d58f01f72744cc3b122fe64a16244e52ca01e6d511a0d87facc4873b617d6e72958ff792b959f9672b0659c2083ff79c0bb9de812c5058fb7fbca80a4038c023cc84280923b5978d0270966580cd25e306d353134381e1cf172074ad9de2c200f760ff93cf76ba3b0e241b59a49cb05b99f80cb6c47113ab8b9bb4d3409e4b79bf53a32701faadc172930746113a5f326cccad778ea75a920aabbedcb1382e1eb46e1ed46c46413b22aa11df03550a348c8235da672ca77230bbed948d97543bdcb2c96ae2833148c0aaa4c6bdbd61ba8c49cc846ecc70b35918967a782e1289d31da6dc99c76a1f09c471524d3604a7e3c3ace147727f9e4103332ccfe83d612e896098e0dce55125fb6d2b88abb4d35611f55cd985d0439cd60ac559d19df23e40e4b091d6321a286f6be566d8315f9af4acc40842f66665ce8fe077c59ab7f3a7de17b5914f46ece35e705473aa1885154ea4e0eeccd99dbff690f50704014d0ad9c1267139a6f9b8079fd37df7ae97afee5dcf74e4e624f80f02d73286f20221da3334af750412e71f71c0cdee558b941f30a10e214b9fce4557d01e060272fe15e967d26842f578bbf4549b380643f47adb7e7aa3cdf8b5535746909f3bc67029f1f7b8b22af26a81268907107e90c99c0e98bcd1c1ccbbcc8f4f29a57f7b29aec2054c6675f4b6c694f69c8e2839078f7d96e48d9d43a3e841f554770b91004144832b5d342a2f54928411074324c6e6612c692229ca7c6bdcd4a9c46bca3eeb17e46486ac89f48b0baeaa3a7f09dde17779f42c8d10c310f76ee3b8813b6cbbf36b2d217761dc840f7da5c1d353c258ae64611fcab98fb8c903d8287fa7870d76e8ad29de0883090db4445ace0234dfea62fff1e56a80f4681d41ef8d3e8f42a7b6c9dc10ed7dba1842cfce91ace0a306838daaf5c1baf15fa981f1badab39e43e6399b23bc3533c525f5020dd5c612586b49a27f626a2658d7179b30674288495238b5b1f1140ef7f3f7ec3933d227ee620a633dc6a63ec1c4d580cfd134f09e09467e4454d401ddc9ae5b124c28a03c6a5fde7121b39378cc25bb439658dcfbc3d81faf485582eb97ff89048dc6dba9712a9e8eef18c3e229d94de3f6ed30c9e45db2e3d46e42299a366351b496c35ae45417dfc5206f0339c1330e9cafb97b3fe414355181155d2d728b9b45e74e0365eacc637a940853f7bb07f05db35b388a4ab244c527ba4175b8ac7e919ce3e7fcb8f0c5b4134863df5136980ee7e471c195191955d5655b414fa18a82ea544ae9ad2f41df7c5e32dedc86c1388af85898d2d497d8202a45d2549976d028577f31b21238e2b2c529cd29f64f17ae8839c9a4ef9b38690af9d5cec633e055a057be371ed9a90117e52a7ae9ee5a0e055c9ed80f7524e518ff8fb32a0b64f16492ac2a911d129a2bd1fcd0b1ce116212080fd3a1d3e9dca7e714052cff3711335a7566a518649bacc97c373a4f75b7b7d361235590f9703e4de93957ddad93fcc986b61f7e9ea1fd92523fb6df7a6259c8a64aca0b968cb466a0c8e96d162c2c505fcc8258d93ac30ab1a57d1c9c872cd12fc31ef792cf268d65fffe2bb6441487a2ad737cc131038eea3a2376bd7db4c84b82657aba401ff70d19d13f75f05f5e66ed2229dd65cdd43efad0dcf63dddbf780b24901e638bdbd8a0b0d98491395db9b79c8d2791ea2e1efad441fddd9f402c5b901bbcecc07a6d27f7f983f799ea38bb8a591c2cd2273bc55b04c222fd56209b470b57641959b4f80c96cffe1589e949cdd1301544c280806e04bf02344acb484e4d53455f50c6ffdd869423ba7e51b253043e0f347effb0359341bf5b85932b17962c7393a0c068706e219da61adec5601b3738320322690929129d31050f05fa74529f7fc741ae5202081a9fc42785bbebbe2904808c5b0b80c6f227ef287f7ccaad5b255a0a3aaa0be378309dfccd520e0f56b15066b2e2f519e70ef9e5549048ea035a9dc54e8bd70d80d8981c62622a9a2a4358b841286eef2f6b9e437a2274abf2c3fb46ca9616c4444143a9446e9e2526b78396df900e8ddfc9c3a76cfc62b4e1d25fe7ca7965dee1c49bf91d20452e054f9fcba3bf06e068695a8051d5df2f82871377dd4fddef166de60350dc2788b596f7363bba4421c856ad5cbee0a6f25b5b171619f63e2d178265fcde813100196f2d79bd4ef5351c5d8422404e8b6d48090a4dc5e315e9e1171abcb204c1974358bd1aaa57cb7d27f944f2ed3a85004f37c1b74c756d1b762fde30a1220d0e7e717b97f27c63641b22ae97c958a5c866101986b85a4292f94d9d56cd98e0655924a19245891fc39a4b92c1515e4b7e4ea39a8abe908f8815b095af04d22ee9e896addd7b2e053a67487ee2e76ef8b64f91e421a2af3e9a1b80cb6bc5d3fbae6efd74a0c4e6329df1157107c83b016e4bb31c82950a4753a2666c711be9bd93b870bd990a4136e392a9101d5f97db854dfc5db99de335f63fc7cf47a37bb245fc56c60e48ba461bcdd5e5f228e0fa8b13906e98e7153ed65a251065f94b0837dc897912ea5bf41ccd58aec08dfa3d1ec093dc5471b6d2ecce07953fac996ab73f7045d0a9caa638e63838b504be5b25b19d0db6264026c992b0e38dc0bf6b9b4512b742255135704fc1fa277fef76536ece387a747811871f997361eacd97b5fce50fc9bb4c9c02ed7fe0c86e64c553f9fae50a02b4abbc69b52957226c9583b152c50493e7a22dba1bc09aaa7925ce68afd75b2f7e3620d92b70039ed32d21bbd01d402c237530c20ba84ae78f8057d4c908af4ad0c9aacd8e123e59d64b571f9c1acf658a232f619b4bc00163d4c1ee55350c25e24fb7bb2ac672808a3206c9a6b49ee10bd26461de0a4a6a1726a408f79d90a45e7e8a5d107f2a60c705214297274d28f5a21d9f1ecd7d625b00e9093b70448b5039d5e16851cbe1d328426d605f801377973b562987e7158cc8ec3e53e7222087b9bca5cd3c88922c4610bba9d349706b61ef203f0ca16e66b1c6f65d29d139637f4cf2b5bed9a8b0ef90c29b48f5c969ad2de4a4bbb4b0763bdfbe0733d5add1357e19083c92cd2ffc09", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="ce31d3b6ada81792a76de5bb7309127a0103195c984b61bdb787a33fe447c9d893e3514388c3395c449b9432d556d59b6eb56f7d5f6276e3c7f5da7c765b4d396a9364f6604f639da4559afaba26d85ff51339dff64b5093304dbc579b33b13a2a") 04:37:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x100000004, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x1) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000000c0)={0x7f, 0x7f, 0x4, 0x0, 0x16, 0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080)="96", &(0x7f0000000140)}, 0x20) [ 286.145572] Memory cgroup out of memory: Kill process 7934 (syz-executor1) score 248 or sacrifice child 04:37:58 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001980)={0x0, 0x8001}, 0x8) perf_event_open(&(0x7f0000000040)={0x5, 0x451, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x5, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xff}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f00006ff000/0x18000)=nil, &(0x7f0000001780)=[@text64={0x40, &(0x7f00000003c0)="66baf80cb8564c5b8fef66bafc0cecb9800000c00f3235004000000f30b9044d564bb86dea0000ba000000000f3066b8c6000f00d866ba2000ecb8010000000f01c10f20e035000020000f22e0c40279134a00410f011d00000100b8010000000f01d9", 0x63}], 0x1, 0x15, &(0x7f00000017c0), 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000157, 0x4c004800) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000017c0)={0x0, 0xffffffffffffffff, 0x8, 0x3, 0x4, 0x401}) [ 286.207192] Killed process 7934 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 286.289543] oom_reaper: reaped process 7934 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:37:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup2(r4, r2) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r5, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:37:58 executing program 4: unshare(0x8000400) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r4 = memfd_create(&(0x7f00000001c0)="0032d9e6f2dddbcf384291934546644af571a3ba18f8e9443f16e2ed640edcfb0602aeb958fd4ad1878942a5590bfd51376f94e5b2fabb429c257543dc3035a56fd7c3d3140a9a6bb73dfe4be991c53bd2fc3622e6bda91e943b00af5a3014a7c2dc09bef6beec06588a81d840184e40f1255aafbedc82e3c4d23bb93277e1c3f35126d3db048d1fd291cfc63cca547f074961dae60e7885e1d7026260463b0283bc8f20af156a26288ecf9d6403b7f2131802e166384c18e622f29b3b5710e8387e6978cf67b96dae3f9be373f216dddf436feefff89ef13d0f85ade739ef5e7c3ec00a49", 0x7) r5 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) fstatfs(r4, &(0x7f00000002c0)=""/139) 04:37:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000003, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="36da37d2f72a2376ac9edddac6ddd4bf53f1c2c7c183fc033c442492f78db11d65d44008d7cf0e0e63dcc1"], &(0x7f0000000100)=0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 04:37:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000160001000080b5606a51a164d2bab1ba"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0x8000c0010140]}) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x400) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x401) 04:37:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x8400) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x43, 0x3, 0x2}}, 0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x30, 0x12, 0x301, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x4, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 04:37:58 executing program 5: socketpair(0x8018, 0x0, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xfa, 0x7, 0x0, 0xffffffff, 0x1}, 0x14) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) 04:37:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x9, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1e) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x0, 0x1}, &(0x7f0000000180)=0x20) 04:37:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x280000) write$P9_RVERSION(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="36281917213e8663644fe62f9d379de4d734059f2ccc5fbe103ecba9f4178c1c86e6354366824476d19a0bf3bc"], 0x15) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x49, 0x0, 0x4b564d02]}) 04:37:58 executing program 2: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req={0x1000}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000), 0x4) 04:37:58 executing program 5: mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8012, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000cbc000)=""/244, &(0x7f0000000040)=0xf4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) 04:37:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ff3000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/19) r2 = socket$inet(0x2, 0x3, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000640)=ANY=[], &(0x7f0000000580)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r3 = dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={{}, {0x0, 0x80000001}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000440)="2c4d3225862a548136eedcec6355531903a91a8943e8c9372982218e9f3681bb96959edce054924634eda9c76fedb11ec2969aa46605580e280215", &(0x7f00000004c0), 0x3}, 0x20) pwritev(r4, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x2, 0xffff, 0x40af, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000280)={r5, 0x0, 0x10}, 0xc) 04:37:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) futex(&(0x7f00000000c0)=0x2, 0x3, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x0, [0x40000107, 0x0, 0x400c0010007]}) [ 287.052345] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 287.118884] syz-executor1 cpuset=syz1 mems_allowed=0 [ 287.124241] CPU: 1 PID: 10320 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 287.131612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.140970] Call Trace: [ 287.143573] dump_stack+0x1c4/0x2b4 [ 287.147231] ? dump_stack_print_info.cold.2+0x52/0x52 [ 287.151121] kvm [10349]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 287.152432] ? mark_held_locks+0x130/0x130 [ 287.152480] ? mark_held_locks+0x130/0x130 [ 287.165373] dump_header+0x27b/0xf72 [ 287.173314] ? debug_smp_processor_id+0x1c/0x20 [ 287.173341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.183541] ? pagefault_out_of_memory+0x197/0x197 [ 287.187530] kvm [10349]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 287.188539] ? debug_smp_processor_id+0x1c/0x20 [ 287.188556] ? perf_trace_lock_acquire+0x15b/0x800 [ 287.188569] ? perf_trace_lock_acquire+0x15b/0x800 [ 287.188589] ? perf_trace_lock+0x7a0/0x7a0 [ 287.201959] ? perf_trace_lock+0x7a0/0x7a0 [ 287.201981] ? debug_smp_processor_id+0x1c/0x20 [ 287.201995] ? perf_trace_lock_acquire+0x15b/0x800 [ 287.202016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.211883] ? perf_trace_lock+0x7a0/0x7a0 [ 287.211900] ? task_will_free_mem+0x239/0xb30 [ 287.211930] ? ___ratelimit+0x36f/0x655 [ 287.225041] ? lock_downgrade+0x900/0x900 [ 287.225062] ? trace_hardirqs_on+0xbd/0x310 [ 287.235504] ? kasan_check_read+0x11/0x20 [ 287.235522] ? ___ratelimit+0x36f/0x655 [ 287.235543] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 287.270404] ? trace_hardirqs_on+0x310/0x310 [ 287.274844] ? lock_downgrade+0x900/0x900 [ 287.279014] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 287.284133] ? ___ratelimit+0xaa/0x655 [ 287.288047] ? idr_get_free+0xec0/0xec0 [ 287.292036] ? kasan_check_write+0x14/0x20 [ 287.296284] ? do_raw_spin_lock+0xc1/0x200 [ 287.300552] oom_kill_process.cold.27+0x10/0x903 [ 287.305358] ? kasan_check_write+0x14/0x20 [ 287.309611] ? do_raw_spin_lock+0xc1/0x200 [ 287.313866] ? oom_evaluate_task+0x540/0x540 [ 287.318291] ? cgroup_procs_next+0x70/0x70 [ 287.322543] ? _raw_spin_unlock_irq+0x60/0x80 [ 287.327027] ? oom_badness+0xaa0/0xaa0 [ 287.330921] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 287.335662] ? mem_cgroup_iter_break+0x30/0x30 [ 287.340239] ? cgroup_file_notify+0x226/0x2f0 [ 287.344722] out_of_memory+0xa84/0x1430 [ 287.348695] ? kasan_check_read+0x11/0x20 [ 287.352829] ? oom_killer_disable+0x3a0/0x3a0 [ 287.357306] ? kasan_check_write+0x14/0x20 [ 287.361545] ? do_raw_spin_lock+0xc1/0x200 [ 287.365774] mem_cgroup_out_of_memory+0x15e/0x210 [ 287.370601] ? memcg_memory_event+0x40/0x40 [ 287.374906] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 287.379653] ? page_counter_try_charge+0x1c1/0x220 [ 287.384565] try_charge+0xc43/0x1690 [ 287.388262] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 287.393352] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 287.399392] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 287.404219] ? lock_downgrade+0x900/0x900 [ 287.408350] ? lock_release+0x970/0x970 [ 287.412306] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 287.418087] ? kasan_check_read+0x11/0x20 [ 287.422218] ? do_raw_spin_unlock+0xa7/0x2f0 [ 287.426617] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 287.431186] ? get_mem_cgroup_from_mm+0x206/0x440 [ 287.436045] ? mem_cgroup_can_attach+0x580/0x580 [ 287.440804] ? __might_sleep+0x95/0x190 [ 287.444763] mem_cgroup_try_charge+0x5ea/0xe10 [ 287.449326] ? lock_downgrade+0x900/0x900 [ 287.453461] ? mem_cgroup_protected+0xa60/0xa60 [ 287.458115] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 287.463115] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 287.468130] ? __handle_mm_fault+0x2c32/0x53e0 [ 287.472697] ? pmd_val+0x88/0x100 [ 287.476152] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 287.481674] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 287.486591] __handle_mm_fault+0x273a/0x53e0 [ 287.491000] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 287.495823] ? __dump_page.cold.2+0x179/0x179 [ 287.500302] ? follow_page_mask+0x18d/0x1fb0 [ 287.504700] ? handle_mm_fault+0x42a/0xc70 [ 287.508922] ? lock_downgrade+0x900/0x900 [ 287.513072] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 287.518868] ? __get_user_pages+0x806/0x1b30 [ 287.523259] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 287.528690] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.534216] ? check_preemption_disabled+0x48/0x200 [ 287.539218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.544741] handle_mm_fault+0x54f/0xc70 [ 287.548785] ? __handle_mm_fault+0x53e0/0x53e0 [ 287.553346] ? find_vma+0x34/0x190 [ 287.556883] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 287.561886] __get_user_pages+0x806/0x1b30 [ 287.566126] ? follow_page_mask+0x1fb0/0x1fb0 [ 287.570621] ? perf_trace_lock+0x7a0/0x7a0 [ 287.574839] ? lock_acquire+0x1ed/0x520 [ 287.578801] ? __mm_populate+0x31a/0x4d0 [ 287.582846] ? lock_release+0x970/0x970 [ 287.586802] ? arch_local_save_flags+0x40/0x40 [ 287.591382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.596912] populate_vma_page_range+0x2db/0x3d0 [ 287.601654] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 287.606570] ? find_vma+0x34/0x190 [ 287.610096] __mm_populate+0x286/0x4d0 [ 287.613972] ? populate_vma_page_range+0x3d0/0x3d0 [ 287.618885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.624406] ? ns_capable_common+0x13f/0x170 [ 287.628798] __x64_sys_mlockall+0x45b/0x630 [ 287.633104] ? __ia32_sys_munlock+0x160/0x160 [ 287.637583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.643105] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.648462] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 287.653904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.659448] do_syscall_64+0x1b9/0x820 [ 287.663317] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 287.668665] ? syscall_return_slowpath+0x5e0/0x5e0 [ 287.673577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.678402] ? trace_hardirqs_on_caller+0x310/0x310 [ 287.683398] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 287.688397] ? prepare_exit_to_usermode+0x291/0x3b0 [ 287.693399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.698233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.703400] RIP: 0033:0x457579 [ 287.706575] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.725461] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 287.733150] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 287.740401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 287.747655] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 287.754907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 287.762158] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 287.769996] Task in /syz1 killed as a result of limit of /syz1 [ 287.776107] memory: usage 204780kB, limit 204800kB, failcnt 803 [ 287.782689] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 287.789503] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 287.795646] Memory cgroup stats for /syz1: cache:0KB rss:195404KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:98760KB active_anon:2288KB inactive_file:0KB active_file:0KB unevictable:94380KB [ 287.817060] Memory cgroup out of memory: Kill process 8710 (syz-executor1) score 248 or sacrifice child [ 287.826653] Killed process 8710 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 287.845079] oom_reaper: reaped process 8710 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 04:38:00 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', &(0x7f0000000980)="6367726f757032007228bd0805723570aa0af79485aca52dc2d78e6e0837a4c041ed7c4ed979d62a636345c892647189e19fdeb2fe4e69daadbcac4a7636a3b430a7d3a0c4c3e87e72897a3bc7d8433e71d47d67c4b69dcdac061c950ce7d99bbb01fa08b4a4d7d5a5f9a00000000000eb7d40657c0e23aaecd4a17a4b9138c39f48eec31910b05395b9253ea42e79f28dada69e7b65663f7a6ca32edaa331aee72587e77d80b63ce88f8930056ca6b83a7880b6b2725f6a0636a71d1246fc9dfa824920e8ca9bf743e92534eb88a4ad356359a354b01a04db0b3c7a5d74fe2d495eaae8a5b8bf17b6af014f802926257a932c3e620d2ca8658c8f9a79aee239baa4e9912ccbe50da0a9382ca53a5c5ee79bd17b533c9bc22333465eccde63b67890753aeebb746ac693e5c5bb3abb4c7568bd98cb5b82ce90a954d7", 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 04:38:00 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffff9c}) flock(r0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x5) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000280)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000200)={0xfbb6, 0x20, 0x7f, 0x40}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x4000000011) 04:38:00 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0xac9, 0x1, 0x2, 0x8, 0x4}, 0xc) socketpair$unix(0x1, 0x88000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) mount$9p_xen(&(0x7f0000000080)='){(@\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000, &(0x7f0000000340)={'trans=xen,', {[{@fscache='fscache'}, {@version_u='version=9p2000.u'}, {@noextend='noextend'}, {@cache_none='cache=none'}, {@noextend='noextend'}], [{@measure='measure'}, {@uid_lt={'uid<', r2}}, {@dont_hash='dont_hash'}, {@obj_user={'obj_user', 0x3d, 'vboxnet1'}}]}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x4000, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000400)={0x0, 0x9, 0x5d4e2960, 0xfff, 0x80, 0x3f, 0x8, 0xee4b, 0x2d, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) poll(&(0x7f00000002c0)=[{r5}, {r4}], 0x2, 0x7) 04:38:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x20aac1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setaffinity(r1, 0x4c75f6531ca6f8ab, &(0x7f0000000240)=0x6) ioctl$TIOCSTI(r0, 0x5412, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x40004e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000025, 0x0) 04:38:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:38:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x16, &(0x7f0000000080), 0x4) 04:38:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x4, 0x4, 0x7}, 0x2c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x2}, 0x28, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000040)={r1, &(0x7f00000000c0), &(0x7f000089b000)}, 0x18) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xc4, 0x14282) ioctl$TUNSETLINK(r2, 0x400454cd, 0xf) 04:38:00 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x3, 0x7fffffff) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100000, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x1f}}, {@sq={'sq'}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_gt={'euid>', r0}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@dont_measure='dont_measure'}, {@obj_type={'obj_type', 0x3d, '&^.'}}]}}) r1 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000340)=0x80, 0x80800) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000380)) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={r2, 0x2, 0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000480)={0xfffffffffffff0d9, 0x6, 0x3}) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000540)='mime_type]\x00', &(0x7f0000000580)='obj_type', &(0x7f00000005c0)='\x00'], &(0x7f0000000700)=[&(0x7f0000000640)='[em0md5sum:-\x00', &(0x7f0000000680)='127.0.0.1\x00', &(0x7f00000006c0)='trans=rdma,']) renameat(r2, &(0x7f0000000740)='./file0\x00', r2, &(0x7f0000000780)='./file0\x00') sendto$unix(r1, &(0x7f00000007c0)="dbf94751ed69cb142751a6b96f9e3c3bbd973181523ca7d015787268082a81824d9f1adad217e7c4c0c6dc4a713166025e07dfa23baa5843dd25f2da3b9a35628ce8ec8ce9a89728206d1513a97f35711c1230a1057fe4044e4af1e86c817419c57c6c4b798b0eb9b452be22bc7789b7a0ed746ddc696d421e558659821224c06bc4f73c78e72b0e465cf110562f2437e92d16f5d7266b5181b747cfb6f96f3ab91115ad456854b18eeab31c0e70baadc1d4d2212bf02cdf0414424c9d9219fa4975c3c097e1c0e6dd3e793875cece", 0xcf, 0x40804, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000940)={0x0, 0xc12a}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000009c0)={r4, 0x81, 0x80}, 0x8) readlinkat(r3, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=""/72, 0x48) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000ac0)="b8fb6fd0e742f3294e2ca0992a0637f45d4f0776b4f1ca84b18d1ee4a3b204e66359c9c66e97aff8168014ded35f7b99d71e73e59772d704007887026b8b85a65d9d291208db8503d0bcbe8d59e36fec0fb09d5e61b6b9dbda5766ded485efcbf1e37dfbcdb391fb96099501319b1eb61be6911f8e088ee7914585d98a23229529d010bc54b00379f4", 0x89) r5 = gettid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000b80)=0x0) setpgid(r5, r6) lgetxattr(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)=@known='trusted.overlay.nlink\x00', &(0x7f0000000c40)=""/137, 0x89) getdents(r2, &(0x7f0000000d00)=""/234, 0xea) getpeername$packet(r3, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001080)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000001100)={0x5, 0x10, 0xfa00, {&(0x7f0000000e80), r7, 0x1}}, 0x18) chdir(&(0x7f0000001140)='./file0\x00') ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) accept$inet(r8, &(0x7f00000011c0)={0x2, 0x0, @remote}, &(0x7f0000001200)=0x10) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001240), &(0x7f0000001280)=0x8) gettid() setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000012c0)=0x5, 0x4) 04:38:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r1 = dup(r0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x1000, "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"}, &(0x7f0000000000)=0x1024) recvmsg(r0, &(0x7f0000001600)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=""/106, 0x6a}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r2, @broadcast, @broadcast}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x400000000000033, 0x0) 04:38:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000000, 0x40) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x15, 0x3) socketpair(0x0, 0x80005, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='.\x00') ioctl$UI_SET_SWBIT(r0, 0x8010550e, 0x0) 04:38:00 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x805, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="03"]}) [ 288.323243] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 288.390817] syz-executor1 cpuset=syz1 mems_allowed=0 [ 288.427473] CPU: 1 PID: 10382 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 288.434848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.444201] Call Trace: [ 288.446825] dump_stack+0x1c4/0x2b4 [ 288.450480] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.455680] ? mark_held_locks+0x130/0x130 [ 288.459933] ? mark_held_locks+0x130/0x130 [ 288.464197] dump_header+0x27b/0xf72 [ 288.467942] ? debug_smp_processor_id+0x1c/0x20 [ 288.472652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.478221] ? pagefault_out_of_memory+0x197/0x197 [ 288.483159] ? debug_smp_processor_id+0x1c/0x20 [ 288.487834] ? perf_trace_lock_acquire+0x15b/0x800 [ 288.492785] ? perf_trace_lock_acquire+0x15b/0x800 [ 288.497724] ? perf_trace_lock+0x7a0/0x7a0 [ 288.501965] ? perf_trace_lock+0x7a0/0x7a0 [ 288.506206] ? debug_smp_processor_id+0x1c/0x20 [ 288.510886] ? perf_trace_lock_acquire+0x15b/0x800 [ 288.515827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.521376] ? perf_trace_lock+0x7a0/0x7a0 [ 288.525633] ? task_will_free_mem+0x239/0xb30 [ 288.530140] ? ___ratelimit+0x36f/0x655 [ 288.534125] ? lock_downgrade+0x900/0x900 [ 288.538286] ? trace_hardirqs_on+0xbd/0x310 [ 288.542610] ? kasan_check_read+0x11/0x20 [ 288.546767] ? ___ratelimit+0x36f/0x655 [ 288.550752] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 288.556220] ? trace_hardirqs_on+0x310/0x310 [ 288.560670] ? lock_downgrade+0x900/0x900 [ 288.564860] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 288.569970] ? ___ratelimit+0xaa/0x655 [ 288.573862] ? idr_get_free+0xec0/0xec0 [ 288.577857] ? kasan_check_write+0x14/0x20 [ 288.582116] ? do_raw_spin_lock+0xc1/0x200 [ 288.586352] oom_kill_process.cold.27+0x10/0x903 [ 288.591108] ? kasan_check_write+0x14/0x20 [ 288.591123] ? do_raw_spin_lock+0xc1/0x200 [ 288.591141] ? oom_evaluate_task+0x540/0x540 [ 288.591165] ? cgroup_procs_next+0x70/0x70 [ 288.608233] ? _raw_spin_unlock_irq+0x60/0x80 [ 288.612741] ? oom_badness+0xaa0/0xaa0 [ 288.616651] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 288.621414] ? mem_cgroup_iter_break+0x30/0x30 [ 288.626052] ? cgroup_file_notify+0x226/0x2f0 [ 288.630568] out_of_memory+0xa84/0x1430 [ 288.634593] ? kasan_check_read+0x11/0x20 [ 288.638768] ? oom_killer_disable+0x3a0/0x3a0 [ 288.643271] ? kasan_check_write+0x14/0x20 [ 288.647525] ? do_raw_spin_lock+0xc1/0x200 [ 288.651798] mem_cgroup_out_of_memory+0x15e/0x210 [ 288.656644] ? memcg_memory_event+0x40/0x40 [ 288.661011] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 288.665780] ? page_counter_try_charge+0x1c1/0x220 [ 288.670719] try_charge+0xc43/0x1690 [ 288.674468] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 288.679586] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 288.685648] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 288.690542] ? lock_downgrade+0x900/0x900 [ 288.694693] ? lock_release+0x970/0x970 [ 288.698693] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 288.704509] ? kasan_check_read+0x11/0x20 [ 288.708666] ? do_raw_spin_unlock+0xa7/0x2f0 [ 288.713084] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 288.717679] ? get_mem_cgroup_from_mm+0x206/0x440 [ 288.722526] ? mem_cgroup_can_attach+0x580/0x580 [ 288.727295] ? __might_sleep+0x95/0x190 [ 288.727313] mem_cgroup_try_charge+0x5ea/0xe10 [ 288.727330] ? lock_downgrade+0x900/0x900 [ 288.740009] ? mem_cgroup_protected+0xa60/0xa60 [ 288.740027] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 288.740045] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 288.740064] ? __handle_mm_fault+0x2c32/0x53e0 [ 288.740083] ? pmd_val+0x88/0x100 [ 288.755218] gfs2: not a GFS2 filesystem [ 288.759360] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 288.759381] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 288.759398] __handle_mm_fault+0x273a/0x53e0 [ 288.759418] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 288.759435] ? __dump_page.cold.2+0x179/0x179 [ 288.791057] ? follow_page_mask+0x18d/0x1fb0 [ 288.795513] ? handle_mm_fault+0x42a/0xc70 [ 288.799747] ? lock_downgrade+0x900/0x900 [ 288.803904] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 288.809712] ? __get_user_pages+0x806/0x1b30 [ 288.814113] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 288.819560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.825125] ? check_preemption_disabled+0x48/0x200 [ 288.830157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.835692] handle_mm_fault+0x54f/0xc70 [ 288.839789] ? __handle_mm_fault+0x53e0/0x53e0 [ 288.844359] ? find_vma+0x34/0x190 [ 288.847893] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 288.852918] __get_user_pages+0x806/0x1b30 [ 288.857157] ? follow_page_mask+0x1fb0/0x1fb0 [ 288.861659] ? perf_trace_lock+0x7a0/0x7a0 [ 288.865925] ? lock_acquire+0x1ed/0x520 [ 288.869896] ? __mm_populate+0x31a/0x4d0 [ 288.873956] ? lock_release+0x970/0x970 [ 288.877933] ? arch_local_save_flags+0x40/0x40 [ 288.882515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.888065] populate_vma_page_range+0x2db/0x3d0 [ 288.892829] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 288.897762] ? find_vma+0x34/0x190 [ 288.901321] __mm_populate+0x286/0x4d0 [ 288.905224] ? populate_vma_page_range+0x3d0/0x3d0 [ 288.910159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.915695] ? ns_capable_common+0x13f/0x170 [ 288.920108] __x64_sys_mlockall+0x45b/0x630 [ 288.924428] ? __ia32_sys_munlock+0x160/0x160 [ 288.928941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.934509] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.939874] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 288.945322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.950878] do_syscall_64+0x1b9/0x820 [ 288.954762] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 288.960126] ? syscall_return_slowpath+0x5e0/0x5e0 [ 288.965067] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.969941] ? trace_hardirqs_on_caller+0x310/0x310 [ 288.974952] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 288.979965] ? prepare_exit_to_usermode+0x291/0x3b0 [ 288.984982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.989838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.995022] RIP: 0033:0x457579 [ 288.998229] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.017120] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 04:38:00 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) setregid(0x0, r2) setregid(0x0, r2) 04:38:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfffffffffffffffb) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000580)={[{@noacl='noacl'}]}) socket$xdp(0x2c, 0x3, 0x0) [ 289.024825] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 289.032085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 289.039377] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 289.046639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 289.053904] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 289.094222] gfs2: not a GFS2 filesystem 04:38:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000a80)='/dev/dsp#\x00', 0x2, 0x802) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYRES16], &(0x7f0000000840)=0x1) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, 0x59}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x2000000000003fe, 0x325, 0x2a01, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x3603, 0x252, 0x8]}, 0x75, r2}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x4403]}, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x1c0270, r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)=0x1) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r0, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000480)=0xf59035ab2d0a7096) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYBLOB="000400008e00612d92ee01e1236a5309350649d08a23dfe06735ad279a59c693a78db5ab3a701fae12e96fd1a140b553e5ef5906a47e3776461e55a918c7eaa4767c29ce35f4425f6d63bccc467d33ad8c0f7ed0ede360811879869dea4c1bbdb08707db78"], &(0x7f00000005c0)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101080, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000780)) r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000380)) r6 = inotify_init1(0x0) r7 = dup2(r6, r5) fcntl$getownex(r7, 0x10, &(0x7f0000000240)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) mq_open(&(0x7f0000000000)="2e1f05", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) getresgid(&(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000280)) 04:38:01 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffbfffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 04:38:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) signalfd(r0, &(0x7f0000000080)={0x4}, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) r3 = dup2(r0, r2) tkill(r1, 0x14) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000100)={0x5000, 0x0, 0x797e, 0x9, 0xfffffffffffffffa}) [ 289.160138] Task in /syz1 killed as a result of limit of /syz1 [ 289.166240] memory: usage 204720kB, limit 204800kB, failcnt 823 [ 289.172817] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 289.180220] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 289.186454] Memory cgroup stats for /syz1: cache:0KB rss:195212KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:100768KB active_anon:2328KB inactive_file:0KB active_file:0KB unevictable:92320KB [ 289.260979] Memory cgroup out of memory: Kill process 8794 (syz-executor1) score 248 or sacrifice child [ 289.320140] Killed process 8794 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 289.355695] oom_reaper: reaped process 8794 (syz-executor1), now anon-rss:0kB, file-rss:32640kB, shmem-rss:0kB 04:38:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:38:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f0000000280)="025cc80700145f8b764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x200101, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000340)={0x2d, @multicast1, 0x4e20, 0x0, 'none\x00', 0x36, 0x4, 0x34}, 0x2c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f75fdf)="3e244e7e87adeb0717edd8b867042a0dedf14029e85b62f01a0ca46272e04b65", 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x240400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x20, 0xa7, 0x5, 0x100000001, 0x7b], 0x5, 0x1, 0x4000, 0x10000, 0x5, 0x6fa, {0xffffffffffffff6c, 0x4, 0x57c4, 0x220b0536, 0x3, 0x9, 0x2, 0x8, 0x28, 0x4, 0x1, 0x6, 0x20, 0x1, "aac718033d015076c6cdb548603e1d18ee726b453137f6b4431dfb6508c9d33e"}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x10001, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000002c0)={r4, 0x10000, 0x5}, 0x8) r5 = accept$alg(r1, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00000000c0)={0x689, 0x2, 0x100000001}) recvmsg(r5, &(0x7f00001f5000)={&(0x7f0000d45fa8)=@alg, 0x80, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1, &(0x7f0000000040)}, 0x0) r7 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) recvfrom$unix(r7, &(0x7f0000000080)=""/21, 0x15, 0x0, 0x0, 0xfffffffffffffe8b) 04:38:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffd2e, 0x2000800a, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xff0f, 0x0, 0x15000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0x2af) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") sendto$inet(r1, &(0x7f0000000040)="df", 0x1, 0x1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2f, &(0x7f0000000040)=0x0) io_getevents(r5, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r4, &(0x7f0000000140)}]) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=@newtclass={0xce0, 0x28, 0x10, 0x70bd27, 0x25dfdbff, {0x0, r6, {0xffff, 0x7}, {0x1f, 0xffff}, {0x0, 0x1f}}, [@TCA_RATE={0x8, 0x5, {0x4, 0x5}}, @TCA_RATE={0x8, 0x5, {0x7, 0x6}}, @TCA_RATE={0x8, 0x5, {0x17, 0x4}}, @TCA_RATE={0x8, 0x5, {0x6, 0x4}}, @TCA_RATE={0x8, 0x5, {0x8000, 0xfffffffffffffff8}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0xc58, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_RTAB={0x404, 0x4, [0x10000, 0x3f, 0x80, 0x3, 0x6, 0xe42e, 0x3, 0x0, 0xf6, 0x7f, 0x80, 0x800, 0x0, 0x0, 0x4, 0x2, 0x8, 0x4, 0x100000001, 0x3, 0xd0, 0xfffffffffffffffd, 0x6, 0x3, 0x1bb, 0x800, 0x5, 0x2000, 0x40, 0x55b, 0x9, 0x1, 0x6, 0xfebf1f7, 0x8, 0x4, 0x7, 0x6, 0x1, 0x4, 0x3, 0x1ff, 0x5, 0x1, 0x6, 0x7, 0x6, 0x3e7, 0x2a, 0x7, 0x1ff, 0x1ff, 0x6, 0x2f8ce892, 0x5, 0x6, 0x1, 0x9, 0x93, 0x3, 0x5, 0x1, 0x1, 0xd8, 0xb691, 0x401, 0x7, 0x7ff, 0x10000, 0x5, 0x0, 0x2ac4, 0x401, 0x0, 0x0, 0x4, 0x20, 0x21ed, 0x10001, 0x1, 0x7ff, 0xffff, 0x1, 0x4, 0x7fffffff, 0x0, 0x3f, 0x6, 0x7, 0xf7d9, 0xff, 0x0, 0x5, 0x6, 0xc59, 0x101, 0xab, 0x3, 0xffffffff, 0xfffffffeffffffff, 0x80000001, 0xdf1, 0x1000, 0x9, 0x5, 0x100000001, 0x7f, 0x7, 0x40, 0x21b, 0x81, 0x4, 0xe1e, 0x8f, 0x81, 0x81, 0xfffffffffffff90b, 0x0, 0x100, 0x4, 0x5, 0x1, 0xec6, 0x1cd, 0x3, 0x7, 0x5, 0x100, 0x193, 0x8, 0xffffffff8e319be6, 0xd7, 0x8, 0xffffffff, 0xfff, 0x5a6, 0x0, 0xb28, 0x6, 0x8, 0x561, 0x9, 0x7ff, 0x80000001, 0x9a, 0x4, 0xf98, 0x1, 0x3, 0x0, 0x4, 0x3f000000000000, 0x80000001, 0x8, 0x1000, 0x7fff, 0x80000000, 0x28c, 0x1, 0x3, 0x5, 0x200, 0x1, 0xfffffffffffffffb, 0x8001, 0x5, 0x81, 0x7fff, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xc1, 0x8000, 0x4, 0x7af4e258, 0x1da466a5, 0x2, 0x1, 0x5, 0x80, 0x2, 0x7, 0x6, 0x56ddf2af, 0x7a2f, 0x0, 0x7, 0x5, 0x68ce, 0x2, 0xffff, 0x0, 0x7, 0x6, 0x2, 0x0, 0x1, 0x5, 0x2, 0x9, 0x800, 0xff, 0xd3, 0x8, 0x200, 0x9, 0x1000, 0x59d, 0x3f, 0x6, 0x8001, 0xffffffff, 0x1000, 0x9, 0xffffffff, 0x3, 0x6b, 0x7ff, 0x74, 0x7d4b1de8, 0x2d3, 0x400, 0x6, 0x1, 0x4, 0x7fff, 0x7f, 0x4, 0x1ff, 0x401, 0x2, 0x924, 0x9, 0x8, 0x5, 0x5f, 0x1, 0x4, 0xfffffffffffffffe, 0x800, 0x1, 0x2, 0x7f, 0x5, 0x8000, 0x5, 0x5, 0x7, 0x7fff, 0x20, 0x8, 0x0, 0x2, 0x400, 0x1]}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x6, 0x8001, 0x2, 0x9, 0x5, 0x3, 0x5, 0x5, 0x7fff, 0x3, 0x6, 0x6, 0x2, 0x873, 0x6, 0x0, 0x68, 0x2, 0x1, 0xdfc9, 0xffff, 0x3, 0x2d, 0x3, 0x100000001, 0x7, 0x1f, 0x1, 0x0, 0x2, 0xe5, 0x5, 0x1ff, 0x10000, 0x7, 0x4, 0x1, 0x26bfd0b, 0x401, 0x6, 0x0, 0x1, 0x68, 0x5, 0x4, 0x8000, 0x40, 0x80000001, 0x81, 0x101, 0x9, 0x6, 0x8001, 0x78, 0x100000001, 0x1, 0x53, 0x8, 0x4, 0x3, 0xfffffffffffffffa, 0x9, 0x5, 0x80000000, 0x1ff, 0xa89, 0x4, 0x9, 0x7, 0x401, 0x3f, 0x590, 0x3573, 0x33, 0x0, 0x1, 0x8d6, 0x7, 0x2, 0x1f, 0x4, 0xa3b, 0x80, 0x7, 0x7ac1, 0x100000000, 0x400, 0x7f, 0x6fa8, 0xfff, 0x10001, 0x0, 0x8001, 0x29c0, 0x1, 0x1, 0x627, 0x5, 0x10000, 0xa084, 0x4, 0x10001, 0x1, 0x2, 0x3, 0x0, 0xfffffffffffffffd, 0x4, 0x8000000000000, 0x421b, 0x0, 0x7, 0x9, 0xc4, 0x6, 0x8, 0x10001, 0x1, 0x5, 0x7ff, 0x4, 0x3f, 0xffffffff, 0x100000000, 0x3, 0x1, 0x2, 0x67dd18d1, 0x9, 0x10001, 0x7, 0x200, 0x5a7fc221, 0x6ba, 0x1, 0x7, 0x80000001, 0x8, 0x100000000, 0x5, 0x100000001, 0x5, 0x0, 0x2, 0x80, 0xffffffffffffff05, 0x2, 0x3, 0x39e5, 0x100000000, 0x9, 0xe2c, 0xfffffffffffffffa, 0x8, 0x0, 0x1, 0x7, 0x2, 0x6073dc2c, 0x7, 0x4, 0x3, 0x7, 0x60, 0x9, 0xfff, 0x7fff, 0x3f, 0xce6a, 0x7, 0x9, 0x3, 0x0, 0xffffffffffffff94, 0x1, 0x0, 0xee6b, 0x0, 0x8000, 0x1, 0x9, 0x4, 0x3, 0x6, 0x8, 0x8001, 0x2, 0x80000001, 0x2, 0x1e61, 0x1, 0x49, 0x9, 0x8, 0xffffffff80000000, 0x8, 0x7f, 0x1, 0x8, 0x80000001, 0x39dd, 0xfff, 0x400, 0x5, 0x6, 0x4, 0x4, 0x1, 0x8, 0x1, 0x2, 0x800, 0xffee, 0x9b0000, 0x1, 0x0, 0x3f, 0xffffffff, 0x0, 0x3f3, 0x5, 0x8, 0x7, 0xf3b6, 0xffffffff, 0xee, 0x8001, 0x8, 0x3, 0x8001, 0xfffffffeffffffff, 0x401, 0x4, 0x5, 0x200, 0x9, 0x2, 0x2, 0x2, 0x8, 0x8, 0x9, 0x4ca1, 0x8, 0x2, 0x20, 0x0, 0x26d, 0x1, 0x0, 0xf, 0x77e, 0x1f, 0xffff, 0x40]}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffffafd}, @TCA_HTB_CTAB={0x404, 0x3, [0xffffffff, 0x1000, 0x3, 0x1, 0x80, 0x10001, 0x1b3d2, 0x9, 0x7f, 0x40, 0x3290, 0x200, 0x859, 0xfffffffffffffffb, 0x134, 0xb4f3, 0x39ca, 0x400, 0x7ff, 0x2, 0xa7d, 0x7, 0x1, 0x2, 0x4, 0x19b, 0x8, 0x3cda, 0x1, 0x0, 0x6, 0x7b3c, 0x1, 0x5, 0x10001, 0x6, 0xff, 0x8, 0xff, 0x4, 0x3, 0x1, 0x6, 0x3, 0x100, 0x6, 0x3e, 0x1, 0x6, 0xfffffffffffff000, 0x4, 0x54f, 0x4, 0x0, 0x3, 0x2, 0x8, 0x4, 0x7f, 0x40, 0x200, 0x8000, 0x3, 0x0, 0x2, 0x830, 0x401, 0x80, 0x7, 0x8ec1, 0x2, 0x40, 0x80000001, 0x7d1f, 0x101, 0xb9ea, 0x4000000000, 0x10001, 0x100000000, 0x0, 0x221c79ed, 0x8e7, 0xd42d, 0x101, 0x4, 0x7fffffff, 0x4, 0x4, 0x2, 0x3, 0x4ea, 0x6, 0x6, 0x3, 0x38e, 0x20, 0x6ab0, 0x10001, 0x4, 0xffffffffffff0000, 0x4, 0x7, 0xfffffffffffffff8, 0x4, 0x1f, 0xffffffff, 0x0, 0x5, 0x9, 0x56, 0x3f, 0x80000000, 0xee3, 0x1, 0x5, 0xfffffffffffffc00, 0x200, 0x10000, 0x101, 0x1, 0x9, 0x3, 0x4, 0x7, 0x1, 0x5, 0x9, 0x2, 0x10000, 0x5, 0x8, 0x59f2, 0x8001, 0x6, 0x7fffffff, 0xa2a, 0x4, 0xfffffffffffffc01, 0x92, 0x99f, 0x6, 0x5, 0x6, 0x4cb, 0x8, 0x6, 0x7f, 0x80000000, 0x1, 0xfffffffffffffff9, 0x1, 0x8, 0xd767, 0x6, 0x100000000, 0x7, 0x6, 0x5, 0xffff, 0x80, 0x59a, 0xd07d, 0x20, 0x7fff, 0x8000, 0x2, 0x5, 0x5, 0xfffffffffffffffb, 0x602b, 0x9d5c, 0x7d6, 0x1, 0xfff, 0x8, 0x10000, 0x9, 0x8, 0x1, 0xb1, 0x3cc3, 0xfffffffffffffff9, 0x0, 0x2, 0x6, 0x1, 0x2, 0x1, 0x6a, 0x7, 0xdfc, 0x100000001, 0x6, 0x2, 0x0, 0x9, 0x6, 0x8, 0x3f, 0x6, 0xdc1, 0x9, 0x9, 0x5, 0x80000000, 0x7, 0x3ff, 0x0, 0x56, 0x0, 0x3, 0x1f, 0x7, 0x1, 0x8, 0x3288, 0x4, 0x20, 0xfffffffffffffffe, 0x401, 0x80000001, 0x2, 0x48000000000, 0x5, 0x9, 0xb205, 0x7, 0x35b5, 0x400, 0x18, 0x101, 0x1000, 0x6, 0x9, 0x20000000000000, 0x2, 0x79ed5852, 0x3, 0x1ff, 0x4d, 0x7, 0x5, 0x5, 0x30d, 0x9, 0x0, 0xffff, 0xb1, 0x3, 0x10001, 0x0, 0xd3, 0xffffffffffffffff, 0x9, 0x5, 0x1ff]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xffff, 0x0, 0xfffffffffffffffb, 0x4fb0, 0x27, 0x2}, {0x1ab, 0x2, 0x0, 0x81, 0x661e, 0x3}, 0xfff, 0x5, 0x2, 0x4, 0x80}}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x1c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0xb}}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_FD={0x8, 0x1, r3}]}}, @TCA_RATE={0x8, 0x5, {0x2}}, @TCA_RATE={0x8, 0x5, {0x2}}]}, 0xce0}, 0x1, 0x0, 0x0, 0x40}, 0x800) 04:38:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1ff, 0x301000) ioctl$KVM_SMI(r0, 0xaeb7) setsockopt(r0, 0x6, 0x10000, &(0x7f0000000080)="d2386bb0488b8386dc7b0d55604b1796dde8b44c670cd88496c90db55dd3e4a88b7a9a9a4b330785654e46629b5187b4f176d9583660db7275ce1b8203bea8098b7cd18ce6810324e03d9ea8ba5264140ff83b98726150f2389cc259c52e753859d32c98f25e280af3f085907e7677ff01b875418f3e0d9052597045c93a4de5e584400325a717", 0x87) accept4(r0, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80, 0x0) socketpair$inet(0x1e, 0x8000b, 0x2, &(0x7f0000000640)={0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x840, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0x2, 0xff, 0x1f, 0x1, 0x5, 0x100}) listen(r1, 0x3f) 04:38:01 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x480000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0x71) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000980)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0xffff, 0x5, 0x1, 0xfff}, &(0x7f0000000380)=0x98) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000440)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000001c0)={{0x0, @remote, 0x4e20, 0x2, 'lblcr\x00', 0x0, 0x7}, {@broadcast, 0x4e23, 0x0, 0x1, 0x5}}, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x46, 0x3}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="e3f55ded2f469c66aa7667671a9547719a2688fe70227ecc61c18e5425", 0x1d, 0x400c004, &(0x7f0000000000)={0xa, 0x4e22, 0xa29}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x31030000, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x1, 0x4) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x3, 0x0, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000500)=0xfffffffffffffffe, 0xffffffffffffffa3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="80ff000000000000850000000000000000000000000000000000000000008500000020080000000000000000000095000000000000000000000000000000950000000000000000000000000000000000"], &(0x7f0000000300)='GPL\x00', 0x1f, 0x7c, &(0x7f0000000340)=""/124, 0x41000, 0x1, [], 0x0, 0x4}, 0x48) 04:38:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3, 0xffffffffffff2f4b, 0x2, r2}) r4 = eventfd(0x0) r5 = socket$inet(0x2, 0x200000002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000440)) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6}, 0x10) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000400)={'ip6tnl0\x00', @ifru_ivalue}) ioctl$sock_ifreq(r6, 0x891d, &(0x7f0000000300)={'veth1_to_bridge\x00', @ifru_map={0x8, 0x0, 0x9, 0x8000, 0x100}}) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f00000004c0), 0x4) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x213e, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00010024000100656e61626c656401feffff00080000000000000000060000000000000000000008000300080006edf7721a32207a6e59e0bed5f0c6c693ede801a88a70093cc9cf2713f729cb734f158e75c1d0109216439303fc4fbc3253eb0000000000000000", @ANYRES32=r7], 0x2}, 0x1, 0x0, 0x0, 0x20000841}, 0x20000040) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0xb) ioctl$sock_SIOCGIFCONF(r6, 0x8910, &(0x7f0000000240)=@req) connect$netlink(r5, &(0x7f0000000040)=@unspec, 0xc) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x8000, 0x3f}, 0x2c) timerfd_gettime(r8, &(0x7f0000000480)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffffffffae2c, &(0x7f0000000100)={0x77359400}) flock(r3, 0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x2, r2}) [ 289.707560] device veth0_to_bridge entered promiscuous mode [ 289.735498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:38:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003340)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f0000004b80)=[{{&(0x7f0000000180)=@hci={0x1f, r1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="89a515ec2f1c8c32fa0b37e6516a94623c9b423502108a87223c5070", 0x1c}], 0x1, &(0x7f0000000280)=[{0x40, 0x101, 0x20, "394df294f864dacd74cb3c5ba598fffec613714bddacbe3372f0e719a96b6c1f5e2ef685a6ab656b4be47997cbfdbb2a"}, {0x40, 0x10f, 0x219, "a841cb8ec8e0633de7c73bd43c18bd6eaab5fe3103303474ac195ae97299608057a37afce9270a436b"}, {0xf0, 0x19f, 0x7, "7fbe74f84ab7f4e8b8aea6c0906221a8b70b1132d1825b825429d4fb8de5ee4b58f712d4b57aa755c097fcb021951688c461fca21cbfe55f9ebb78d8f17d869072ebf1cf52fbf8a1e3942a2cdf96bdf1118fea52ae1b115ae11df6dc81add315b47393de43aa4c506a2c4300fee60d35a6a22e4b19a81d8a6a7505507a18e844bab08489a5cc5058c422a97115187a0610feb7f3aed08cb9c61635a6e16070b3510b954a10036be3a7518d0be529dfc5b9d73f2d7c44bdf4d44fa5d0dddc0c41dec1b2951acfbc6333aad775b072ee35bfad8706d263932fa3d8d89ed65a29"}, {0x18, 0x84, 0xffffffffffff0001, "610c9e77"}, {0xc8, 0x10d, 0xd896, "115a45f1c05956ccc8863d832fed740d9b7ad11451dd6f6f91ed95c951639b6305daed27a994ff0085dcc0a8e4167a7618b387550e32c4a4545ddcadd63484a1b79d2d1f2e073754127c940ba6716162a377fe5080bb98d74651d7b86f7b111689f43bd4e063ec4288c08104543e75e3d96539df108004e40277805f5ef1de96ccdecf257501537d192f28bb18f23df532f044da2f06b6b2425ac884cfa68dd41d761d3aaeb333b9f9d2f42e75fcf6d9e0b0850f27"}, {0x80, 0x109, 0x7, "cef4b1e8f4cc5f7650f5da26b9393219774f77e1d13c1c3c0b0cd4390fa76533fd1070a505f8467493cc7d956cd103b0279e5703d05a18c76faa86dca8e10dcbd2ea74da7f32517df6781ff36f852bea66ba9a8bf210ee7c8374276dabc9f16087415703a47a561c6c384ff42b7c91"}, {0x18, 0x11f, 0x4, "31ba51"}, {0x98, 0x10d, 0x7f, "2faecb5ea047de7fb58c8d3718bd3aadebd80d54a85bd79c50e0201870490875a45185ec12681a9123c8229b260c573ce6406b5cbb0fe9438acddbec3aef59b8d5c57cfe27a1f57579a3f7c981ece55b60f23891081a399e82afe123c096d628a899466c87a81a8c979e6408c8cb55bf0e15d6efae75db4811aa4c748fc9b9747b2edad52a008035"}], 0x380, 0x4}, 0x101}, {{&(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x6, 0x4, "5ae3b23b4e31736479a9ed4ee05e83ab17fb14e78e0bed908cc1b307fb770f72cac7c4c34c62382c457c4c200cdfabe0b71efee25b3ce09547eedf0976dde9", 0xa}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)="31421108c11a2f60351b5e0b3ac1f253995f44b412792c99abde25424c35c7e7d229d9179079b45e4bd8d7494ca9ec5af22cc22778e4353f1ab664cbb6f428a20fc3cfa0573c6c1d2b059f25", 0x4c}, {&(0x7f0000000700)="81624148221e5d2a2258acfed57a17314025e8aff31db0726ecd9cae8c9a002627e07340526fffeeeb1e25f7232ca321939fdca82f420196d558f303b4502ceb1086539f49be587da55a3589f25fcc72546605a90fc8fa19ea949b8f268f10902243d69a7dbf1ed72bf7027acb4cb457842c624767fc8b272cd7e0b14a284c44292ffc760b21313c40feae0ffdd9e24174b67f6772c7054cf181fef666da87a3264d89", 0xa3}, {&(0x7f00000007c0)="b7b5f12ea6478f39f106edf4d850eb71b6c9a47ef996b2fe5971021c8c5ad8786ba10b09172929dd2435cdd3cbb1c2aa8a991f08310a10a907cf52d9e318559b05a1210a15c937d18d01f0ff6c82df93b1332a6b9748f1038d70ebeba7a077655a6d266f98c7de2452c91cb4413ad051cd2888c3a08a7d8b07a46959e2235ddff5bec71629744adc7a213e98297cb5f6c084dbfd863f8847f4c5bdb9ab34e416836df39067dd473e1d08d74a75ad581f84d47ccdfc2afe6c03c33bd653ea056fba33abf2afd42da93ff2b3e3daacc226596544b29f1d0763eb195f4cf8b70675116217db4dbcfa5cd299b8", 0xeb}, {&(0x7f00000008c0)="ea86500c116bff2f45a34f7921a9c4f4e57382712c67b55011c40c879e91c493a9debce6339d526627c847002e86a8a12219cc997cdfcc2b0a1678035e50fdeade838f67b5f3972216ba6ae6e9d5ce43c03475525ee35593423cee831c72e5c2c3355324a0036651aacd187ce0f9754a6c2ba3c25bbd6c6e030b02daa12dfcb0619294bba342cda401a017a6627cf9f64c4a7d66d467e9e3d7b252ee769232fab3d7935409a0ed72c1f3c9d5136b5b50f5992c009f91", 0xb6}, {&(0x7f0000000980)="7d7097d580894c8b2182a199f8308c4101e29f6a189297ccb549a72c28cbd2a4159d44e924864608b5e2290148a13b6f2ecf67d227232c1bc114448369a9c34aaa847eb83cf528fa080ce6bb0bdf010c2747e2200c5941744304f56746f4f18f1115a4e02653d3bde08d6d05c7f7dce022542fca742b4252c7b5e7dd36181eb3dc20cb2d90cd109eae41f8715d901653565ba2325ac7080b10c0d065640395fcf8fbdf9c693c410ac68166d45cd9bc6dc9e015d1a5af2eae7aea4452464bf58a9bd30571b84961bc23f5474055541f6d5c7c04f62e88d528cd33a0c4bb6bf78226d6e4792e2dbba0d7e49d6f0572fa8cde82a4c759aa", 0xf6}, {&(0x7f0000000a80)="78b55e1e6a25434ff4b9d47fee3ae4a6cd566b36d9535684ed5b827c2101b1e68fa91032c00eb193cbfe53ab5263e99aded26bccb2495dabb9069dcc47e326fd73a93f2abdeb18ea500efffba3d922dc46ef420aa9320a3e7041386471da3e7d76ff7722e827402a2f1e2d95bab161f91780c36470f25d92d5507a331158437713395fb49c258620140712a521ee68ac2cfa9a7d541f819ef57f182648d486af1159d4be198a7225f0145b2a11b18f5c1dd13b649348384c", 0xb8}, {&(0x7f0000000b40)="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", 0x1000}], 0x7, &(0x7f0000001bc0)=[{0x20, 0x11a, 0x3, "804f5c1ad56346538819ff79a2a8101e"}, {0xb8, 0x112, 0xfffffffffffff801, "8ba0e96cf22b72092e3ead721062531d5dc44a1f37c63dee018538cde887451ee645a33e800d2b09afc13675bc9b194b406aefb929431d905bf2c2b1f7d18431b34687d70bf9066231ce003d5f1e47138d3cd95facb7e1e0b5931da0b360947fa70895e5ff071ac2dbfd65fed2e6ea994434955e6e95f4e5bbf002d4ae90b86b33761ca132522a32e34f97962d12e99950ec6b64a0d94f128b26d617158b01b64781"}], 0xd8}, 0x4}, {{&(0x7f0000001cc0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x1, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d40)="c2d7c708e987e58c1f5dbecead661c94952a231313e738a77fe1dd18bfdb8c88f0502701be48d7465a", 0x29}, {&(0x7f0000001d80)="9257780f7233dd5b8aec488092b1a0f5794c6d2b553f98e9a8c2de30d803148f711fdffb719a57be2b0ea041697b7194", 0x30}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)="2f8911ad39eae0d448d0542e51c2ffce00930d48d0b329a816791b86a4a7bd295a670ca9ce2a18426063bf9ac97fef23518ea471e7df47db7fde64799607fc650638bc735593f20d040fa61d370780ad758c5a4f488c874c22d0267e1cfb19da0db6a3c42b324ea3838704257398b28885390eb10bb7d8b57a32cb1e92441992f6485f28f23b6ac236b58533a372af49751361f8c91590b5e2870aa4a9173099f9c206fceabccba3afbe32bae72e001dee6a26d418569882ba7c96639d911d794aa5105a3efe614d3cdfcc1e7b3ddfaf95a9579c85f1beaeeaec323ba75215ff9893727c6148d99f776bfb6b8296", 0xee}], 0x4, &(0x7f0000001f40)=[{0xd0, 0x1, 0x8, "c3d21c050f65420baa92d24ed037b7c735fe4fe63c214a4a5f74f38d72fad4c172fc3e6f1a6509bbfd094e639bb4e5b805bb6f1199e89c63954a56403a7a967ec184e4e8b7b560409029a9b4c8ce209ec4aa1dd5870a9010e77da9cb508d27504f110cf031c4ca05e84c12f98358d154836d05f30612e16fe871c468926cea971440fed244696966eea1cfac6a394afad9d4b4784320adb9245c8ef10e51acd0fabac902e0453e5acf52fb9dc3206d4dbb81c04b4983c42ba5569481"}, {0x80, 0x11f, 0x9, "01f54daa306b248470c4186e126d5dec052f6479794c2519b552ca227eb9623c26b25686c547130fb031061b70331c8688b0a5da1c312bb37a19e594456daebc010d26d75ab801fc9f22df67b12f327856f3e2395230ad5077a3c2863f366322089237bb4dab812a6618ea0bb1"}, {0x28, 0x119, 0x1, "3caa5f0472e7c55032d14425737b2f434f0a079d"}, {0x1010, 0x0, 0xfffffffffffff801, "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"}, {0xb8, 0x5e67cbb75ff20fbd, 0x3, "0b680170208a29e7ac145d27b21446fa2b8f93f99112f211c37af6ac3feced56204380f711f1fa6f06444be0349cc0787af24212e2e64319ee81466ae5f9fe04588a379f54b6e59d9c57694440b4f9597227bd6d340f92ac9c1975038508960988964a89f7a7d7f7dea2d255e02c93d33ea619496d64a4bc1db9444c105c69a16a4a8e1e552aa0c6082ae27e4ff02893e13e0c3e0f17eafdaf2fcb273098b7d189f71910d5b60770"}], 0x1240, 0x10}}, {{&(0x7f0000003380)=@hci={0x1f, r2}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003400)="b03226a801518a8f6fe5b18f114e8925515db00be412dd2aa44671d29437fb0b21c6fc694b3183958342fb25dadc0b815449e7ef290af686241d19f037937db5cbf94c", 0x43}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="1431cbbe9149d2914e6bf1a5b60b0f6823c94dc9421b56a300bba82cb5f365ef462be483c618bd7a970580264f6c9493adc53eb5392b32c6386ac2ff0e57f4f6d8386105bc7c353c0b9c369cc1a7b82fc3d6ff5caaecb878af381cc14e10326631ed57db542cba67877eaa23515e951132202811eeac1f71e8c1ec7ebdd1f691c3af4cbe342faef5515725b78e0d4f5ad0364b33276b06508c37a6b56e9e1b5160d322b0d28d093040ec58b4874ec8ad26b9318e145c01541426fbdc3998e4c4387afb3c80b33b8e92903c1d6fb863aed27cf488f03c80293ace81890a33dfe34420b6001b9e967e14744d4dd3ed31ba1961aac12012", 0xf6}, {&(0x7f0000004580)="f346049a3ea1244bf6f9f26d214b2bec4618073fcb16560bde613c5260be4b0731696fd49ec9cafae3243fa00a73b3e99b94b9f05f7fd6f563f361d7b2b28ce7eec1a241759c8e638039367e2d63332fd6a1c6afa0c751f33cabdc0a607692200aa438f2ae370712d63784a574c74399", 0x70}, {&(0x7f0000004600)}, {&(0x7f0000004640)="ac8bcc2e50861084f146dd818304bba39423806719075a1552c7fe062a901ea91caa7bb5c5d9b262f186338e1215585e5e6da95015eb3faec90576f0c2de793b046b6c63214b6061beb8de6f2cf8290f18cd8dd914718645b2ade7433b95bf8d7c1488394843e14cf72d991a9125af698d6954601a12b31795e89da382ccdc50d96c21692e81cdbd76", 0x89}, {&(0x7f0000004700)="a839bd3e416eea19d624ba534cad9114468271f7ae10838751ae168ed159cbcabaa946f4bd759b4f7b4a9137bfd34fcd2582ad9d0ed92fdb9c43195a351b424f376b524882b40af0eccb49a0adb304245326f86cb167812e9004421a1302deb4c51a1396db82bffa3c25dcf2c4fe12b05a4402175bd0609f79a0fc18c7ff4284ca", 0x81}, {&(0x7f00000047c0)="cfd87050f469438a1cf6c604d1f0984e505a6136a04439214ebd89fe1581851481550c8171410eee6e8ebccf50b9ce8821346d06fb02a3b75d0221373ed310df6cf2c247b74d06c7e93c6202c08a8e3b4239f69fc8c191f72d739a66000d8c51512c60476d78f1d79d4e5351a99f740939c4b48887851804a4cc8e521221e72db1ad8ed23bbc8afefe635e0408f7026a64fba0792d33260e6872a96d4dde67362f280bc00705e9a4", 0xa8}, {&(0x7f0000004880)="e839730cf4c7396a2340b8cabb718d55d9d7586290e22e9030f73bda976ea9689022249d0c61e35ecb10fe12ad10a1f909be91c71db7a861739cb14f6e07591be6f391306aa2b9e4fb4d9de428f9f6688284f80dcc113ef4a0408313b0016394fb752a4e2c9d33ccd128a61bd0710ab76946478c27b2d09398b4cda86d50245f50adb548d608bd00e88bd2b8a10f7932f5c1fff1d59b", 0x96}, {&(0x7f0000004940)="ab70c9e751b517fd28f75cbd6b382012cdc7d2f70ec6bee6077c2d235ec2a00fa723d7e3bf2c7ac4f61fb6a8fccce126201fdae35dd1dd656702fed377e214ca73c634e2091abc51318b5ceb981d10b01e9c1d49b6ddd28afd32061a37f2d5b5eab479d8bc50b6e5020d6be44ab8625303e951e0d2ba7c280ee9dc995d1c998436f3cf5fa30f31d7a5b4a93bfd0497beb1c4f9519dbf2a11cadf63de7b4bfc34f0ca525e5aa2b5408c3088752d3b2fb222b24020c8d224d58f3986eedf3d095f46ded4a4fc49c48d0531961ca5411991e45add48cb44b2cc67c772d0e0a823b89c7247c883752f0a8f3eb33e8e34ff249c", 0xf1}], 0xa, &(0x7f0000004b00)=[{0x70, 0x1, 0x9, "c7b83d0e68c47d9f22298c39c4164ca5fc98e592a88891e7933ae1cc7ea02c95db88157b1151efeed4ca8fd6a0ca7e7dc0f94053e14425a1482a8f457c3337fe084e53672f0e49711aa02d1f358b2007e4e910cc177e91e52b"}], 0x70, 0x40}, 0x3}], 0x4, 0x40) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r4, 0x0, 0x0, 0x73e0) sendfile(r3, r4, &(0x7f0000000140), 0x1f) ioctl$sock_bt(r4, 0x0, &(0x7f0000000080)="5df3f88896382df72ae7ab5f8ec4b2b6c778240ded359356a661e962") [ 289.753307] ip6tnl0: mtu less than device minimum [ 289.763224] bond0: Error: Device is in use and cannot be enslaved 04:38:01 executing program 3: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x401000400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x3}}, 0xe10, 0x6, 0xfffffffffffff001, 0xfffffffffffffffd, 0x3ff}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x674, 0x8, 0x1ff, 0x3ff, r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x10) close(r4) close(r2) 04:38:01 executing program 0: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x9, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000001c0)={[{@nobarrier='nobarrier'}]}) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) prctl$getreaper(0xb, &(0x7f00000003c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7b3) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file1\x00', 0x8, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9a46, 0x20000) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000300)={0xfffffffffffffffc, 0x1f, 0x2, 0x2bf, 0x7, 0x7f}) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x2a) mount$overlay(0x40405c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 289.871249] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 04:38:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x400000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000dc5f98)) [ 289.928597] ip6tnl0: mtu less than device minimum [ 289.929406] syz-executor1 cpuset=syz1 mems_allowed=0 [ 289.945761] bond0: Error: Device is in use and cannot be enslaved [ 289.955378] CPU: 1 PID: 10475 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 289.962772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.962777] Call Trace: [ 289.962801] dump_stack+0x1c4/0x2b4 [ 289.962821] ? dump_stack_print_info.cold.2+0x52/0x52 [ 289.962839] ? mark_held_locks+0x130/0x130 [ 289.962853] ? mark_held_locks+0x130/0x130 [ 289.962883] dump_header+0x27b/0xf72 [ 289.962905] ? debug_smp_processor_id+0x1c/0x20 [ 289.983646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.983669] ? pagefault_out_of_memory+0x197/0x197 [ 290.010937] ? debug_smp_processor_id+0x1c/0x20 [ 290.015619] ? perf_trace_lock_acquire+0x15b/0x800 [ 290.015633] ? perf_trace_lock_acquire+0x15b/0x800 [ 290.015655] ? perf_trace_lock+0x7a0/0x7a0 [ 290.029748] ? perf_trace_lock+0x7a0/0x7a0 [ 290.033996] ? debug_smp_processor_id+0x1c/0x20 [ 290.034012] ? perf_trace_lock_acquire+0x15b/0x800 [ 290.034043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.043651] ? perf_trace_lock+0x7a0/0x7a0 [ 290.043669] ? task_will_free_mem+0x239/0xb30 [ 290.043697] ? ___ratelimit+0x36f/0x655 [ 290.057953] ? lock_downgrade+0x900/0x900 [ 290.057973] ? trace_hardirqs_on+0xbd/0x310 [ 290.057990] ? kasan_check_read+0x11/0x20 [ 290.070399] ? ___ratelimit+0x36f/0x655 04:38:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0xfff, 0x1f) [ 290.070416] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 290.070430] ? trace_hardirqs_on+0x310/0x310 [ 290.070468] ? lock_downgrade+0x900/0x900 [ 290.070487] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 290.078618] ? ___ratelimit+0xaa/0x655 [ 290.078636] ? idr_get_free+0xec0/0xec0 [ 290.078650] ? kasan_check_write+0x14/0x20 [ 290.078666] ? do_raw_spin_lock+0xc1/0x200 [ 290.078686] oom_kill_process.cold.27+0x10/0x903 [ 290.118799] ? kasan_check_write+0x14/0x20 [ 290.123046] ? do_raw_spin_lock+0xc1/0x200 [ 290.127297] ? oom_evaluate_task+0x540/0x540 [ 290.131726] ? cgroup_procs_next+0x70/0x70 [ 290.135990] ? _raw_spin_unlock_irq+0x60/0x80 [ 290.140498] ? oom_badness+0xaa0/0xaa0 [ 290.144402] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 290.149182] ? mem_cgroup_iter_break+0x30/0x30 [ 290.153843] ? cgroup_file_notify+0x226/0x2f0 [ 290.158371] out_of_memory+0xa84/0x1430 [ 290.162359] ? kasan_check_read+0x11/0x20 [ 290.166516] ? oom_killer_disable+0x3a0/0x3a0 [ 290.171028] ? kasan_check_write+0x14/0x20 [ 290.175283] ? do_raw_spin_lock+0xc1/0x200 04:38:02 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xfffffffffffffcc9}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x410001, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000240)=0x857, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x4, 0x35, [], 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/53}, &(0x7f0000000380)=0x78) dup2(r0, r0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x70, 0x240000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x5, 0x8, 0xffffffffffffff79}) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x5, 0x20, 0xfffffffffffff801, 0x4}, &(0x7f0000000480)=0x18) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000500)=0x7, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000004c0)={r3, 0x1ff}, 0x8) clock_gettime(0x0, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)}], 0x0, &(0x7f0000000140)) [ 290.179540] mem_cgroup_out_of_memory+0x15e/0x210 [ 290.184390] ? memcg_memory_event+0x40/0x40 [ 290.188730] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 290.193557] ? page_counter_try_charge+0x1c1/0x220 [ 290.198525] try_charge+0xc43/0x1690 [ 290.202263] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 290.207377] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 290.213452] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 290.218332] ? lock_downgrade+0x900/0x900 [ 290.222490] ? lock_release+0x970/0x970 [ 290.226495] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 290.232297] ? kasan_check_read+0x11/0x20 [ 290.232314] ? do_raw_spin_unlock+0xa7/0x2f0 [ 290.232334] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 290.240914] ? get_mem_cgroup_from_mm+0x206/0x440 [ 290.240930] ? mem_cgroup_can_attach+0x580/0x580 [ 290.240955] ? __might_sleep+0x95/0x190 [ 290.240973] mem_cgroup_try_charge+0x5ea/0xe10 [ 290.263657] ? lock_downgrade+0x900/0x900 [ 290.267854] ? mem_cgroup_protected+0xa60/0xa60 [ 290.272539] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 290.277593] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 290.282613] ? __handle_mm_fault+0x2c32/0x53e0 [ 290.287184] ? pmd_val+0x88/0x100 [ 290.290623] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 290.296149] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 290.301064] __handle_mm_fault+0x273a/0x53e0 [ 290.305483] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 290.310325] ? __dump_page.cold.2+0x179/0x179 [ 290.314821] ? follow_page_mask+0x18d/0x1fb0 [ 290.319251] ? handle_mm_fault+0x42a/0xc70 [ 290.323487] ? lock_downgrade+0x900/0x900 [ 290.327623] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 290.333406] ? __get_user_pages+0x806/0x1b30 [ 290.337813] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 290.343271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 290.348809] ? check_preemption_disabled+0x48/0x200 [ 290.353823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.359347] handle_mm_fault+0x54f/0xc70 [ 290.363402] ? __handle_mm_fault+0x53e0/0x53e0 [ 290.367982] ? find_vma+0x34/0x190 [ 290.371512] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 290.376515] __get_user_pages+0x806/0x1b30 [ 290.380742] ? follow_page_mask+0x1fb0/0x1fb0 [ 290.385232] ? perf_trace_lock+0x7a0/0x7a0 [ 290.389478] ? lock_acquire+0x1ed/0x520 [ 290.393594] ? __mm_populate+0x31a/0x4d0 [ 290.397645] ? lock_release+0x970/0x970 [ 290.401608] ? arch_local_save_flags+0x40/0x40 [ 290.406175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.411715] populate_vma_page_range+0x2db/0x3d0 [ 290.416483] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 290.421405] ? find_vma+0x34/0x190 [ 290.424936] __mm_populate+0x286/0x4d0 [ 290.428812] ? populate_vma_page_range+0x3d0/0x3d0 [ 290.433739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.439283] ? ns_capable_common+0x13f/0x170 [ 290.443679] __x64_sys_mlockall+0x45b/0x630 [ 290.447993] ? __ia32_sys_munlock+0x160/0x160 [ 290.452511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.458062] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.463423] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 290.468872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 290.474412] do_syscall_64+0x1b9/0x820 [ 290.478284] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 290.483646] ? syscall_return_slowpath+0x5e0/0x5e0 [ 290.488575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 290.493400] ? trace_hardirqs_on_caller+0x310/0x310 [ 290.498404] ? prepare_exit_to_usermode+0x291/0x3b0 [ 290.503419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 290.508258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.513426] RIP: 0033:0x457579 [ 290.516613] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.535534] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 290.543288] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 290.550547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 290.557802] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 290.565059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 290.572313] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 290.583141] Task in /syz1 killed as a result of limit of /syz1 [ 290.592053] memory: usage 204796kB, limit 204800kB, failcnt 845 [ 290.598349] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 290.605108] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 290.605114] Memory cgroup stats for /syz1: cache:0KB rss:195572KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:104868KB active_anon:2324KB inactive_file:0KB active_file:0KB unevictable:88380KB [ 290.633038] Memory cgroup out of memory: Kill process 8856 (syz-executor1) score 248 or sacrifice child [ 290.647809] Killed process 8856 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 290.765082] device veth0_to_bridge left promiscuous mode 04:38:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x8, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:38:03 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000001740)=[{&(0x7f0000001540)="1b076d38c6e3fdbbb1b5a2b457a08104ba604b9324c5f15a0d9a6e2da9bf403b334877d54df8a6ce83d2fc811e545570ec1d9f2c29b308b85c7c09a78f8716b1a168f6f4f2b7f9ea73936710509cc71441ea4fc7535b0b758c016c", 0x5b, 0x16d}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) dup2(r0, r0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0x8a40) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0xb015, 0x0, 0x6, 0x10000, 0x0, 0x1000, 0x80000, 0x1, 0x7, 0x800, 0x5, 0x4, 0xfffffffffffffffa, 0x6, 0x75, 0x200, 0x2, 0x101, 0x7, 0x8, 0x2, 0xffffffffffff8001, 0x8, 0x100000001, 0xcb46, 0x1, 0x0, 0xf724, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1, 0x7f1, 0x82, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000040), 0x2}, 0x4080, 0xe00, 0x0, 0x4, 0x1, 0x2, 0x102}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) 04:38:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000009bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x48) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x801, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)=r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x7a, &(0x7f0000000080)="60e8302bbc89f67cca77d709af98", &(0x7f0000000440)=""/122, 0x4f8}, 0x28) 04:38:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x38}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x20000115, &(0x7f0000000000)=[{0x2000000000087, 0xffffffffffffffff}, {0x7, 0x800, 0x0, 0x80000000}]}, 0x10) 04:38:03 executing program 4: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7}, &(0x7f0000000280), &(0x7f0000000100), &(0x7f0000000380)={&(0x7f0000000340), 0x8}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0x0, 0x100000002}, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000002c0)="9f3936e5610e8b53b0df314b9e51c5e038ec18700ba50313c062aa60cf4875e02e88237190e5048e55414b08043df1af221a9075e185dc12bf2ee8b80114c48a65f0f609867c862c2638903dc78b087dfa60904072e944dc552d24b8885c15aaf6081407595075a886d680d8f59f4a029fb1") ioctl(r0, 0x2000c2604110, &(0x7f0000000080)) ioctl$RTC_AIE_OFF(r0, 0x7002) 04:38:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ab553fec", 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = accept$alg(r0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x4, &(0x7f0000000540)=[{&(0x7f0000000280)="3d5643e81a670512bf6a99c91a57ec3624c65356ea0e216e383758b92864bacbbf78eb928ef7f5d506b826f6318a0eb04c3fedd42b96c8d40d452bed4a4bfb3f5dc187f7db11cd15e69982224ee5467e7dbace2c25506282a0b212d1bbf4a9", 0x5f, 0x80000001}, {&(0x7f0000000300)="3881726563f3ca3ba39613d1321b84e6f957b1e9f3bc382f6af185726c772213aec3b1999d2f03c5e3797e2f6f3978c94449e317819d281b751f15eeee9735edf96112d90d668925257f481cd0544c5064467db3074886fe31897a9fc64753a1943bbf6dbeb47bf9f0af55da4063bf37de8b5abca44fa73d562abfc2ec08d20d2b77bdb1ed0f53ea32e2177e2087766bbba72eef29420939140d8417d2701f812d222b30de77f755e052b463a29b6dd814533420dbdf57ac49e1450bdf23a80fc9e5a571bd42872bb88facb88f8b8a6da26745b9bbd1a71a80efa66672c2ed5e4d28915b6e8ac7be9f126a35c2b829c0a3b4918876f9", 0xf6, 0x9}, {&(0x7f0000000400)="e1551461fa4c0b2acc82081174d7ae4cd89d1bfec3037fa4f713faf65bcecbe7b9d483a4a4f89642bd4686121f5220efbc447886faf466fa2a8f077b2d49dad11dd226e32351e254a2a2bfee4b2544f16832f281d2ab3e1fe69bedd72eaec765f211659c775e194df1d8dbfe1dc42c84e187518cc3ac7c0352859ae5d76a10c96e6cb3276eb8", 0x86, 0x8}, {&(0x7f00000004c0)="8e522455fb80fe41c79b71cadeca3a4823a7e3dd10fdde2a17c700312de56bcd47fc27e7c9064d438fca2e70cb00ced7569d22c07f0f050c7b573d9e9cff480211621f3a7282a24ef75ff34564ed9002b8", 0x51, 0x4}], 0x1000000, &(0x7f00000005c0)='skcipher\x00') write(r1, &(0x7f0000000fc0)="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", 0x1000) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @broadcast}, &(0x7f0000000180)=0x8) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local, 'sit0\x00'}}) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0x7fffeeef}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x4, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 04:38:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x200) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f0000000040)="03aea449af577a8761e6ce02675b4d5afc61a382cc1c23c806c1c5d00623f754d3e4babca9f98c66f850dd061702e7b562598480f63345c90afc80d6634563d0cac22dffcdc46a661b8d1616d9f0431cc125fd8784724555f0adcb273cecd6676ae26c051d97ee17dec51ab5917673151400", 0x2d5) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x40) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x5, 0x1, 0x77, 0x33, 0x69, 0x69, 0x2}, 0x1c) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x8000000024e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 291.039883] Dev loop3: unable to read RDB block 1 04:38:03 executing program 4: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0xfff}]}, 0xffffff5f) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 291.068599] loop3: unable to read partition table [ 291.081904] ceph: device name is missing path (no : separator in /dev/loop2) [ 291.097826] loop3: partition table beyond EOD, truncated 04:38:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x43) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) open(&(0x7f0000000000)='./file0\x00', 0x40, 0xa2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="bf", 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000200)=""/142) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000698000)=0xe) syz_open_pts(r1, 0x800) close(r1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000100)=""/114) [ 291.124655] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 04:38:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = dup(r0) sendto$inet(r1, &(0x7f000026cfff), 0x0, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xff) shutdown(r0, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, @in6}, &(0x7f0000000300)=0x84) 04:38:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="c9646faac650f0b88d9f3ac8498ff8b176bbacd79dc4f3d4702b50014a4affa98895503784928f0e2d25e3bc063d5c9b3562c38d3cec35db359ff4a9e6d3c374c11276a3fc60f17a910db00e7514245916b23730492cb8886411d4abd4c22ee2af188192c335c696ba3477c40de75e2fff926d75211b", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES32=r0], @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYBLOB="b0c9cfeaff278aae1e3f7a3663b09724273dd834e1293fd2f50747081fad3cc0466514415a62a34e27eca1425afad64196de0054e56d251cfaff5d51ce1e623412a91c70f1ac4f036bb5b9350b33fd92f703c059604820de44bb961947f02a36727b346f6d858334ae1135d89bedf984d83dcd8d58692d2d9bd6b3d69d0d2b1cf2659245", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r0]]], 0x3}}, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4002}, {r0, 0x200}, {r0, 0x70}, {r0, 0x4044}], 0x4, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x410000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast2, @dev}, &(0x7f0000000600)=0xc) [ 291.244834] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 291.256094] syz-executor1 cpuset=syz1 mems_allowed=0 [ 291.258784] Dev loop3: unable to read RDB block 1 [ 291.266990] CPU: 1 PID: 10552 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 291.267122] loop3: unable to read partition table [ 291.274377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.274383] Call Trace: [ 291.274407] dump_stack+0x1c4/0x2b4 [ 291.274428] ? dump_stack_print_info.cold.2+0x52/0x52 [ 291.274454] ? mark_held_locks+0x130/0x130 [ 291.274468] ? mark_held_locks+0x130/0x130 [ 291.274489] dump_header+0x27b/0xf72 [ 291.312330] ? debug_smp_processor_id+0x1c/0x20 [ 291.315157] loop3: partition table beyond EOD, [ 291.317028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.317047] ? pagefault_out_of_memory+0x197/0x197 [ 291.317068] ? debug_smp_processor_id+0x1c/0x20 [ 291.336851] ? perf_trace_lock_acquire+0x15b/0x800 [ 291.336855] truncated 04:38:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000017c0)={0x7, &(0x7f0000001200)=""/101, &(0x7f0000001700)=[{0x3, 0xc8, 0x0, &(0x7f0000001280)=""/200}, {0x401, 0xdb, 0x7, &(0x7f0000001380)=""/219}, {0x10000, 0x59, 0x2, &(0x7f0000001480)=""/89}, {0x5, 0x7e, 0x4, &(0x7f0000001500)=""/126}, {0x2, 0xfa, 0x8, &(0x7f0000001580)=""/250}, {0x80000001, 0x2d, 0x61, &(0x7f0000001680)=""/45}, {0x65e, 0x0, 0x6, &(0x7f00000016c0)}]}) getsockopt(r0, 0x1ff, 0x401, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000100)={r4, 0x3}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0xfffffffffffffffd}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x3, "60ece1397839cbeb"}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r2) [ 291.336869] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 291.341792] ? perf_trace_lock_acquire+0x15b/0x800 [ 291.341814] ? perf_trace_lock+0x7a0/0x7a0 [ 291.341825] ? perf_trace_lock+0x7a0/0x7a0 [ 291.341845] ? debug_smp_processor_id+0x1c/0x20 [ 291.341863] ? perf_trace_lock_acquire+0x15b/0x800 [ 291.374501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.380058] ? perf_trace_lock+0x7a0/0x7a0 [ 291.380075] ? task_will_free_mem+0x239/0xb30 [ 291.380098] ? ___ratelimit+0x36f/0x655 [ 291.392796] ? lock_downgrade+0x900/0x900 [ 291.396957] ? trace_hardirqs_on+0xbd/0x310 [ 291.396971] ? kasan_check_read+0x11/0x20 [ 291.396986] ? ___ratelimit+0x36f/0x655 [ 291.397005] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 291.414860] ? trace_hardirqs_on+0x310/0x310 [ 291.419285] ? lock_downgrade+0x900/0x900 [ 291.423464] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 291.428578] ? ___ratelimit+0xaa/0x655 [ 291.432494] ? idr_get_free+0xec0/0xec0 [ 291.436484] ? kasan_check_write+0x14/0x20 [ 291.440760] ? do_raw_spin_lock+0xc1/0x200 [ 291.445009] oom_kill_process.cold.27+0x10/0x903 [ 291.449791] ? kasan_check_write+0x14/0x20 [ 291.454067] ? do_raw_spin_lock+0xc1/0x200 [ 291.458338] ? oom_evaluate_task+0x540/0x540 [ 291.462760] ? cgroup_procs_next+0x70/0x70 [ 291.467020] ? _raw_spin_unlock_irq+0x60/0x80 [ 291.471528] ? oom_badness+0xaa0/0xaa0 [ 291.475424] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 291.480200] ? mem_cgroup_iter_break+0x30/0x30 [ 291.484811] ? cgroup_file_notify+0x226/0x2f0 [ 291.489321] out_of_memory+0xa84/0x1430 [ 291.493310] ? kasan_check_read+0x11/0x20 [ 291.497477] ? oom_killer_disable+0x3a0/0x3a0 [ 291.501975] ? kasan_check_write+0x14/0x20 [ 291.506230] ? do_raw_spin_lock+0xc1/0x200 [ 291.510496] mem_cgroup_out_of_memory+0x15e/0x210 [ 291.515337] ? memcg_memory_event+0x40/0x40 [ 291.519670] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 291.524431] ? page_counter_try_charge+0x1c1/0x220 [ 291.529386] try_charge+0xc43/0x1690 [ 291.533113] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 291.538227] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 291.544281] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 291.549130] ? lock_downgrade+0x900/0x900 [ 291.553282] ? lock_release+0x970/0x970 [ 291.557263] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 291.563073] ? kasan_check_read+0x11/0x20 [ 291.567226] ? do_raw_spin_unlock+0xa7/0x2f0 [ 291.571638] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 291.576233] ? get_mem_cgroup_from_mm+0x206/0x440 [ 291.581081] ? mem_cgroup_can_attach+0x580/0x580 [ 291.585848] ? __might_sleep+0x95/0x190 [ 291.589823] mem_cgroup_try_charge+0x5ea/0xe10 [ 291.594402] ? lock_downgrade+0x900/0x900 [ 291.598553] ? mem_cgroup_protected+0xa60/0xa60 [ 291.603244] ? mem_cgroup_commit_charge+0x275/0x9d0 [ 291.608264] ? mem_cgroup_uncharge_swap+0x1a0/0x1a0 [ 291.613284] ? __handle_mm_fault+0x2c32/0x53e0 [ 291.617874] ? pmd_val+0x88/0x100 [ 291.621329] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 291.626868] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 291.631811] __handle_mm_fault+0x273a/0x53e0 [ 291.636255] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 291.641106] ? __dump_page.cold.2+0x179/0x179 [ 291.645599] ? __schedule+0x874/0x1ed0 [ 291.649482] ? follow_page_mask+0x53c/0x1fb0 [ 291.653888] ? follow_page_mask+0x18d/0x1fb0 [ 291.658322] ? handle_mm_fault+0x42a/0xc70 [ 291.662557] ? lock_downgrade+0x900/0x900 [ 291.666707] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 291.672533] ? __get_user_pages+0x806/0x1b30 [ 291.676959] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 291.682408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 291.687948] ? check_preemption_disabled+0x48/0x200 [ 291.692979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.698516] handle_mm_fault+0x54f/0xc70 [ 291.702595] ? __handle_mm_fault+0x53e0/0x53e0 [ 291.707174] ? __get_user_pages+0x84a/0x1b30 [ 291.711578] ? write_comp_data+0x16/0x70 [ 291.715659] __get_user_pages+0x806/0x1b30 [ 291.719902] ? follow_page_mask+0x1fb0/0x1fb0 [ 291.724399] ? perf_trace_lock+0x7a0/0x7a0 [ 291.728635] ? lock_acquire+0x1ed/0x520 [ 291.732609] ? __mm_populate+0x31a/0x4d0 [ 291.736675] ? lock_release+0x970/0x970 [ 291.740648] ? arch_local_save_flags+0x40/0x40 [ 291.745232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.750794] populate_vma_page_range+0x2db/0x3d0 [ 291.755556] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 291.760487] ? find_vma+0x34/0x190 [ 291.764056] __mm_populate+0x286/0x4d0 [ 291.767961] ? populate_vma_page_range+0x3d0/0x3d0 [ 291.772897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.778436] ? ns_capable_common+0x13f/0x170 [ 291.782854] __x64_sys_mlockall+0x45b/0x630 [ 291.787169] ? __ia32_sys_munlock+0x160/0x160 [ 291.791666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.797206] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.802568] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 291.808013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 291.813576] do_syscall_64+0x1b9/0x820 [ 291.817466] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 291.822828] ? syscall_return_slowpath+0x5e0/0x5e0 [ 291.827801] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.832644] ? trace_hardirqs_on_caller+0x310/0x310 [ 291.837660] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 291.842675] ? prepare_exit_to_usermode+0x291/0x3b0 [ 291.847739] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.852607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.857792] RIP: 0033:0x457579 [ 291.861007] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.879903] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 291.887616] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 291.894882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 291.902145] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 291.909411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 291.916698] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 291.928000] Task in /syz1 killed as a result of limit of /syz1 [ 291.934886] memory: usage 204800kB, limit 204800kB, failcnt 876 [ 291.944530] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 291.951730] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 291.957976] Memory cgroup stats for /syz1: cache:0KB rss:195500KB rss_huge:157696KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:104872KB active_anon:2320KB inactive_file:0KB active_file:0KB unevictable:88404KB [ 291.983638] Memory cgroup out of memory: Kill process 8928 (syz-executor1) score 248 or sacrifice child [ 291.996678] ceph: device name is missing path (no : separator in /dev/loop2) [ 291.996778] Killed process 8928 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 292.026244] oom_reaper: reaped process 8928 (syz-executor1), now anon-rss:0kB, file-rss:32640kB, shmem-rss:0kB 04:38:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x0, 0x32, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:38:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x6, [0xde5, 0x7fffffff, 0x8, 0x7, 0x5, 0x800]}, &(0x7f00000001c0)=0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x400) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000100)={0x2, r5}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x5}, 0xfffffffffffffe47) close(r2) 04:38:04 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e20, 0x8, @local, 0x5}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e21}], 0x4c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, &(0x7f0000000100)=0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$VHOST_SET_FEATURES(r2, 0xaf02, &(0x7f0000000000)) close(r0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000080)=0x8d, 0x4) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000280)) 04:38:04 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x0, 0x800) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/13) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r3 = dup(r2) recvfrom$packet(r3, &(0x7f0000000140)=""/55, 0x37, 0xb6d0158af1a6d344, 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r3, &(0x7f0000000900)=""/4096, 0x1000) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000001c0)=0xfff) ftruncate(r4, 0x80080) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0xbffffffffffffffe) sendfile(r3, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000300)={0x2, 0x9, 0x4, 0x1, 0x7a, 0x9, 0xfffffffffffffffc, 0x7, r5}, 0x20) 04:38:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x102, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818218e5a080000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r2}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x325, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r3}) socket$l2tp(0x18, 0x1, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x2000, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000700)={0x0, 0x4, 0x1000, 0xd3, &(0x7f0000000500)=""/211, 0xad, &(0x7f0000000600)=""/173, 0x38, &(0x7f00000006c0)=""/56}) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="070000000000000000000000c0000000010000003f000000070000000000000001000000000000000800000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000100000000000000a00a000000000000008000000000000000000000000000000000000000000000080000e8ff0000000000000000000000ff0f0000000000000000000000000014010000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000030000000000000857c1de250a2fc8000000000000000000000000000000000008000000000000000000000000000000e775ae7a0000000001001e00000000000300000000000000000000000000000000000000000000000304000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000600000000000000484b00000000000007000000000000000000000000000000000000000000000000200000000000000000000000000000"]) openat$full(0xffffffffffffff9c, &(0x7f0000000940)='/dev/full\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r8}}, 0x18) 04:38:04 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x800010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf280000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffff71, 0x5, 0x100000000000d00, {0x186a0, 0x40000}}, 0x56da83a0) r2 = dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x100000001, {{0x2, 0x4e21, @loopback}}}, 0x88) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0xd1e}, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0xfffffffffffffffd, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) msgget(0xffffffffffffffff, 0x8) 04:38:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000100)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:38:04 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x80000000, 0x8}}, 0x30) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000022c0), 0x80, &(0x7f0000002340)='mime_type/ppp1()\')+\x00') 04:38:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={r1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000b18000)={{}, {0x0, 0x6b}}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r2, 0x1}) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000001c0)={0x8, 0x6}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) [ 292.561625] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 04:38:04 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) symlinkat(&(0x7f0000008ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') sendfile(r1, r0, &(0x7f0000000000), 0x10001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) llistxattr(&(0x7f0000000080)='\x00', &(0x7f0000000740)=""/4096, 0x1000) [ 292.618966] syz-executor1 cpuset=syz1 mems_allowed=0 [ 292.635955] CPU: 1 PID: 10618 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 292.643336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.648569] ceph: device name is missing path (no : separator in /dev/loop5) [ 292.652687] Call Trace: [ 292.652711] dump_stack+0x1c4/0x2b4 [ 292.652730] ? dump_stack_print_info.cold.2+0x52/0x52 [ 292.652748] ? mark_held_locks+0x130/0x130 [ 292.652763] ? mark_held_locks+0x130/0x130 [ 292.652791] dump_header+0x27b/0xf72 [ 292.671380] ? debug_smp_processor_id+0x1c/0x20 [ 292.679833] ? check_preemption_disabled+0x48/0x200 [ 292.693192] ? pagefault_out_of_memory+0x197/0x197 [ 292.698139] ? debug_smp_processor_id+0x1c/0x20 [ 292.702841] ? perf_trace_lock+0x14d/0x7a0 [ 292.707118] ? perf_trace_lock_acquire+0x15b/0x800 [ 292.709075] audit: type=1804 audit(1539146284.754:42): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir247190556/syzkaller.8xwo0L/94/bus" dev="sda1" ino=16572 res=1 [ 292.712048] ? perf_trace_lock_acquire+0x15b/0x800 [ 292.712067] ? zap_class+0x640/0x640 [ 292.712082] ? perf_trace_lock+0x7a0/0x7a0 [ 292.712105] ? debug_smp_processor_id+0x1c/0x20 [ 292.753154] ? perf_trace_lock+0x14d/0x7a0 [ 292.757412] ? perf_trace_lock_acquire+0x15b/0x800 [ 292.762366] ? zap_class+0x640/0x640 [ 292.766098] ? perf_trace_lock+0x7a0/0x7a0 [ 292.770349] ? task_will_free_mem+0x239/0xb30 [ 292.774873] ? zap_class+0x640/0x640 [ 292.778602] ? zap_class+0x640/0x640 [ 292.778621] ? ___ratelimit+0x36f/0x655 [ 292.778637] ? lock_downgrade+0x900/0x900 [ 292.778657] ? trace_hardirqs_on+0xbd/0x310 [ 292.778670] ? kasan_check_read+0x11/0x20 [ 292.778685] ? ___ratelimit+0x36f/0x655 [ 292.778733] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 292.786452] ? trace_hardirqs_on+0x310/0x310 [ 292.786468] ? lock_downgrade+0x900/0x900 [ 292.786488] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 292.786503] ? ___ratelimit+0xaa/0x655 [ 292.786519] ? idr_get_free+0xec0/0xec0 [ 292.786535] ? kasan_check_write+0x14/0x20 [ 292.794681] audit: type=1804 audit(1539146284.834:43): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir247190556/syzkaller.8xwo0L/94/bus" dev="sda1" ino=16572 res=1 [ 292.795000] ? do_raw_spin_lock+0xc1/0x200 [ 292.861487] oom_kill_process.cold.27+0x10/0x903 04:38:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000000c0)={0x88, 0x0, 0x1, [{0x2, 0x8000, 0xb, 0x6, '/dev/mixer\x00'}, {0x0, 0x1, 0xb, 0x8, '/dev/mixer\x00'}, {0x4, 0x0, 0xb, 0x0, '/dev/mixer\x00'}]}, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) setregid(r2, r2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x4) 04:38:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x4c}}, &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x100, 0x80480) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) [ 292.866267] ? kasan_check_write+0x14/0x20 [ 292.870520] ? do_raw_spin_lock+0xc1/0x200 [ 292.874771] ? oom_evaluate_task+0x540/0x540 [ 292.879203] ? cgroup_procs_next+0x70/0x70 [ 292.883480] ? _raw_spin_unlock_irq+0x60/0x80 [ 292.887990] ? oom_badness+0xaa0/0xaa0 [ 292.891898] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 292.896670] ? mem_cgroup_iter_break+0x30/0x30 [ 292.901282] ? cgroup_file_notify+0x226/0x2f0 [ 292.905794] out_of_memory+0xa84/0x1430 [ 292.909782] ? kasan_check_read+0x11/0x20 [ 292.913945] ? oom_killer_disable+0x3a0/0x3a0 [ 292.918475] ? kasan_check_write+0x14/0x20 [ 292.922729] ? do_raw_spin_lock+0xc1/0x200 [ 292.926987] mem_cgroup_out_of_memory+0x15e/0x210 [ 292.931841] ? memcg_memory_event+0x40/0x40 [ 292.936172] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 292.940947] ? page_counter_try_charge+0x1c1/0x220 [ 292.945891] try_charge+0xc43/0x1690 [ 292.949650] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.954800] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 292.960861] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 292.965694] ? lock_downgrade+0x900/0x900 [ 292.969854] ? lock_release+0x970/0x970 [ 292.973823] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 292.979619] ? kasan_check_read+0x11/0x20 [ 292.983770] ? do_raw_spin_unlock+0xa7/0x2f0 [ 292.988179] ? zap_class+0x640/0x640 [ 292.991908] ? get_mem_cgroup_from_mm+0x206/0x440 [ 292.996771] ? mem_cgroup_can_attach+0x580/0x580 [ 293.001534] ? __might_sleep+0x95/0x190 [ 293.005498] mem_cgroup_try_charge+0x5ea/0xe10 [ 293.010068] ? lock_downgrade+0x900/0x900 [ 293.014205] ? mem_cgroup_protected+0xa60/0xa60 [ 293.018876] ? __handle_mm_fault+0x2c32/0x53e0 [ 293.023491] ? pmd_val+0x88/0x100 [ 293.026971] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 293.032524] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 293.037464] __handle_mm_fault+0x273a/0x53e0 [ 293.041884] ? zap_class+0x640/0x640 [ 293.045606] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 293.050436] ? __dump_page.cold.2+0x179/0x179 [ 293.054940] ? zap_class+0x640/0x640 [ 293.058656] ? handle_mm_fault+0x42a/0xc70 [ 293.062903] ? lock_downgrade+0x900/0x900 [ 293.067079] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 293.072882] ? retint_kernel+0x2d/0x2d [ 293.076767] ? __get_user_pages+0x806/0x1b30 [ 293.081190] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 293.086650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.092208] ? check_preemption_disabled+0x48/0x200 [ 293.097263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.102822] handle_mm_fault+0x54f/0xc70 [ 293.106897] ? __handle_mm_fault+0x53e0/0x53e0 [ 293.111483] ? find_vma+0x34/0x190 [ 293.115027] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 293.120060] __get_user_pages+0x806/0x1b30 [ 293.124313] ? follow_page_mask+0x1fb0/0x1fb0 [ 293.128816] ? zap_class+0x640/0x640 [ 293.132536] ? perf_trace_lock+0x7a0/0x7a0 [ 293.136773] ? lock_acquire+0x1ed/0x520 [ 293.140749] ? __mm_populate+0x31a/0x4d0 [ 293.144798] ? lock_release+0x970/0x970 [ 293.148777] ? arch_local_save_flags+0x40/0x40 [ 293.153346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.158880] populate_vma_page_range+0x2db/0x3d0 [ 293.163641] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 293.168562] ? find_vma+0x34/0x190 [ 293.172124] __mm_populate+0x286/0x4d0 [ 293.176042] ? populate_vma_page_range+0x3d0/0x3d0 [ 293.180973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.186524] ? ns_capable_common+0x13f/0x170 [ 293.190947] __x64_sys_mlockall+0x45b/0x630 [ 293.195281] ? __ia32_sys_munlock+0x160/0x160 [ 293.199794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.205334] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.210701] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 293.216156] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.221686] do_syscall_64+0x1b9/0x820 [ 293.225565] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 293.230946] ? syscall_return_slowpath+0x5e0/0x5e0 [ 293.235874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.240726] ? trace_hardirqs_on_caller+0x310/0x310 [ 293.245754] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 293.250772] ? prepare_exit_to_usermode+0x291/0x3b0 [ 293.255799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.260651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.265840] RIP: 0033:0x457579 [ 293.269043] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.287941] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 293.295637] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 293.302895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 293.310160] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.317485] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 293.324744] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 293.333175] Task in /syz1 killed as a result of limit of /syz1 [ 293.340842] memory: usage 204792kB, limit 204800kB, failcnt 922 [ 293.346960] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 293.353982] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 293.360388] Memory cgroup stats for /syz1: cache:0KB rss:195484KB rss_huge:159744KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:102828KB active_anon:2316KB inactive_file:0KB active_file:0KB unevictable:90452KB [ 293.398512] Memory cgroup out of memory: Kill process 8999 (syz-executor1) score 248 or sacrifice child [ 293.426114] Killed process 8999 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB [ 293.493709] audit: type=1804 audit(1539146285.534:44): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir247190556/syzkaller.8xwo0L/94/bus" dev="sda1" ino=16572 res=1 [ 293.530584] audit: type=1804 audit(1539146285.564:45): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir247190556/syzkaller.8xwo0L/94/bus" dev="sda1" ino=16572 res=1 [ 293.557461] audit: type=1804 audit(1539146285.604:46): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir247190556/syzkaller.8xwo0L/94/bus" dev="sda1" ino=16572 res=1 [ 293.605800] audit: type=1804 audit(1539146285.644:47): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir247190556/syzkaller.8xwo0L/94/bus" dev="sda1" ino=16572 res=1 04:38:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x102, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818218e5a080000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r2}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x325, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r3}) socket$l2tp(0x18, 0x1, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x2000, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000700)={0x0, 0x4, 0x1000, 0xd3, &(0x7f0000000500)=""/211, 0xad, &(0x7f0000000600)=""/173, 0x38, &(0x7f00000006c0)=""/56}) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="070000000000000000000000c0000000010000003f000000070000000000000001000000000000000800000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000100000000000000a00a000000000000008000000000000000000000000000000000000000000000080000e8ff0000000000000000000000ff0f0000000000000000000000000014010000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000030000000000000857c1de250a2fc8000000000000000000000000000000000008000000000000000000000000000000e775ae7a0000000001001e00000000000300000000000000000000000000000000000000000000000304000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000600000000000000484b00000000000007000000000000000000000000000000000000000000000000200000000000000000000000000000"]) openat$full(0xffffffffffffff9c, &(0x7f0000000940)='/dev/full\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r8}}, 0x18) 04:38:05 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x0) write$nbd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10b) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x10, &(0x7f00000000c0), 0x69b) 04:38:05 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x102, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYBLOB="0024ade322744acf9bd1aa35bb6818218e5a080000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@loopback, 0x2c, r2}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r1, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x3ac, 0x3ef, 0x5, 0x325, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x75, r3}) socket$l2tp(0x18, 0x1, 0x1) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x2000, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x0, r3}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000700)={0x0, 0x4, 0x1000, 0xd3, &(0x7f0000000500)=""/211, 0xad, &(0x7f0000000600)=""/173, 0x38, &(0x7f00000006c0)=""/56}) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="070000000000000000000000c0000000010000003f000000070000000000000001000000000000000800000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000100000000000000a00a000000000000008000000000000000000000000000000000000000000000080000e8ff0000000000000000000000ff0f0000000000000000000000000014010000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000030000000000000857c1de250a2fc8000000000000000000000000000000000008000000000000000000000000000000e775ae7a0000000001001e00000000000300000000000000000000000000000000000000000000000304000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000600000000000000484b00000000000007000000000000000000000000000000000000000000000000200000000000000000000000000000"]) openat$full(0xffffffffffffff9c, &(0x7f0000000940)='/dev/full\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r8}}, 0x18) 04:38:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:38:05 executing program 5: r0 = dup(0xffffffffffffff9c) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x4, r0, 0x1}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000001100)={@loopback, @multicast1}, &(0x7f0000001140)=0xc) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) 04:38:05 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002180)={0x0, 0x401, 0x0, 0xffffffff, 0x4}, &(0x7f00000021c0)=0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002200)={r1, @in={{0x2, 0x4e21, @local}}}, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x9f, 0x20, 0x4, 0xffff}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f00000015c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0x3, 0x3, 0x4, 0x82}, &(0x7f00000016c0)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000001700)={0x0, 0x4, 0x5, 0x602, 0x8001, 0x7fff}, &(0x7f0000001740)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001780)={0x3ff, 0x1, 0x0, 0x199, 0x7, 0x6195, 0x81, 0x8, 0x0}, &(0x7f00000017c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001f00)={0x0, @in6={{0xa, 0x4e21, 0x41, @loopback, 0x1f}}, 0x6, 0x7fffffff, 0x8, 0x2, 0x8}, &(0x7f0000001fc0)=0x98) sendmmsg$inet_sctp(r4, &(0x7f00000020c0)=[{&(0x7f0000000080)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="2a33a073d8f6f50cd7fe377fecaa41b962305f6b74f4380f32e9213f84ea00e1e3ead90bbd4d6051d5852043cd838f31a3a6f436143d5c4aac061868136407d94a4137b0fd0a863a227d208799f73f7dea5a42f5e2101bd402fbef03498364f4fb2f2e75435bdd1e10872f5f6fe5", 0x6e}], 0x1, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x8, 0x8, 0x1f, r5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1}}], 0x38, 0x80}, {&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x100000000, @mcast1, 0x7}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000300)="d961f2c7b71972f02b71b7f71150d12eb596f230af4f0c19de7507b1cc274fe04aa2bc4f0edb0b5a2a00ceaafc9cb6b2cfd9e55c7e76e0a392933c9cca2339a55ae1507f48016d25011fd9590749f4c4598d91ff4b5d2e7873dc0645e4189a52b6e79bb86d7eb0b6e4a20f1c0c33631fa47feee81f7b3109a457743b0e94955d3ed8f71d671bd34eeddadcc53c0ed3bf3b30e61d", 0x94}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="05b7f98a0d327733b9ad2fc9a43d21ade7227fa8c91bf942b46c1694be9b64d49fe57aca7a701d3bda177e580aa90f4014e4a4eb283f00264bea8b5496df2286815a3d46e654ae2063e41c8d20377059134d840785ffee3af19da72e5a88b611faf4220e9172103b2fd7e78ac279a1076ae90457f3b47aae39847786fa6adf064946891f3110f12e5d1a16aab740e9bbfdc16f23cde0f26024e174f63a2bec5a55a488ae9ce687109cbef4b8c1256bbcefabfe9e49d23d17e579633379871b0cfe5ac019352d001dd9a2a8c243d590f96cc573b94919993585", 0xd9}], 0x3, &(0x7f0000001800)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x7, 0xffffffffb2786a67, 0x7fffffff, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0xa, 0x3, 0x12000000000, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x7fffffff, 0x20000, 0x6, 0x6, 0x401, 0x2ba3, 0x56, 0x1000, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @init={0x18, 0x84, 0x0, {0x8, 0xcf06, 0x2, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x1, 0x200, 0x7ff, 0x3, 0x4, 0x939, 0x3, r9}}, @init={0x18, 0x84, 0x0, {0xd561, 0x8, 0xfffffffffffffc00, 0x8}}], 0x120, 0x40000}, {&(0x7f0000001940)=@in6={0xa, 0x4e24, 0x7, @loopback, 0x1}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001980)="104f443852720d1f2732bc41c9a3a37a8468af67325ac7cc4234bd7fd2a3e71bd328b22ca6cefec3661b4b7ea9c42e25ec0d3ab6e96d3fe584de62c4c9ceacad84dc1ee49ae36a6c799384755c21009b03e14f192f9fbeec695a7154520451306c3979a7d952507de9b6d605a79c92cdca58cbe43d311d38cb7950470e1653d484ada1516a5c1a82cc7f9bb1644e40f35c25dd5a053787b23917f0f5960846b49a42e49326b7f34a0929ad695fd71541a19581b574b691185a5a354198e82eaa6cb20344cc2ddc7ba9", 0xc9}, {&(0x7f0000001a80)="b46f010ea1acc5567df6ba5b05f8036ffc2c30d1f635f4dcae15d57b67d38355168ea2b21c3c999580d9bcb9453c561f894809c4255b56bed1e8516572e78acdfbbb6f7c6dd2bfefedfbc4448c669c2bd36fcbe73a93f82b9b6b7b27db8d77bb97121f0eba2a896396448993009f2f64250b5eec8925efac50baa69eb34a2355341bab42438c65", 0x87}, {&(0x7f0000001b40)="5db5063ab45dfcdd63b3de547feb45970d53c36e6299cb4f9d9eca1a873dfc8e7857e3c47572f3cc63541df5eea243ff2f7a4052fc399f0c79cc0f4cba6484667b9ab8bdd337b2101830a5cf2621903a8ee72f6b5a64d4b53950555b91746a0299403609795648b1f234870d4bb868cd7bc122184a1a847b3e7f31a773a81e663e5e55ebf676e7b46b030a88bac1b244d57ca771e06fcf29", 0x98}, {&(0x7f0000001c00)="95a3ebab8c620f7dd2941098191851b96e7dd69e7d271894c6bb09203398e225c2653fc4bc999a9486e1b1b57027966e94d1c816c39c9a70fbdb185ece7ae128ba59df1bc42ccf8487a2508821d03b60cf58430e07e457cbac2f8a132794f72e4ced801d6d1bb9023909f255d7e4bb9188c5b860c1b785e7c37c7e01a058e81b8dbbb1460d64508780ee343cb26a70c77d472e0cfa51de722f431f3721f24f6158acd80f82e5b458a216c5084bb9fda82e315548eed3f42e3d323058b2ac1c11f4e956c14f26f741a1c0ac6925e5a68acf026bc6ba7f83f70c0e20f3db7fbc8d53f188ea8606463a735f5830d750c22dd3f9dd0439e80b", 0xf7}, {&(0x7f0000001d00)="5ac528a8c829e7e3c0f93af70f949766767716de5118db29caa29ed76b392a3cf3e7ad5bb9e73a24f28c2f958273ca0753f14ede05952806326ca1384350890d9620b77ec94233eb4fbfd11fa193736ad8458e9f71171d9708f4f03f94a308dcb8de2ad4ec77fa65d81dcbc0299422ccb9d31cebba53840abf696ed38ea08d0705aec554518d5078b3b3240644eb83ef50edcc88927b14b9561dc135", 0x9c}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)="5cc0249b50e1de72958d517da293682b950d7b745005fc93b62099fe7cf74be0b38dfd8a0e1be5eda6a4da2fe39a2f0dbc668a7091e02feecea2ea66a33a8bfb06c4b0c1120cfe", 0x47}], 0x7, &(0x7f0000002000)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5d1}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x5, 0x0, 0xd4, 0x100000000, 0x3f, 0x78, 0x4, r10}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @authinfo={0x18, 0x84, 0x6, {0x2}}], 0x98, 0x40}], 0x3, 0x80) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000022c0)={r5, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002300)={r1, 0x81}, 0x8) ioctl$KVM_ENABLE_CAP_CPU(r11, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x0, [0x4b564d00, 0x0, 0x10000000049, 0xffffffffffffffff]}) [ 293.944116] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 293.968010] syz-executor1 cpuset=syz1 mems_allowed=0 [ 293.988762] CPU: 1 PID: 10681 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 293.996174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.005560] Call Trace: [ 294.008182] dump_stack+0x1c4/0x2b4 [ 294.011858] ? dump_stack_print_info.cold.2+0x52/0x52 [ 294.017061] ? mark_held_locks+0x130/0x130 [ 294.021301] ? mark_held_locks+0x130/0x130 [ 294.025552] dump_header+0x27b/0xf72 [ 294.029289] ? debug_smp_processor_id+0x1c/0x20 [ 294.033975] ? check_preemption_disabled+0x48/0x200 [ 294.039016] ? pagefault_out_of_memory+0x197/0x197 [ 294.043953] ? debug_smp_processor_id+0x1c/0x20 [ 294.048635] ? perf_trace_lock+0x14d/0x7a0 [ 294.052881] ? perf_trace_lock_acquire+0x15b/0x800 [ 294.057817] ? perf_trace_lock_acquire+0x15b/0x800 [ 294.062763] ? zap_class+0x640/0x640 [ 294.066488] ? perf_trace_lock+0x7a0/0x7a0 [ 294.070737] ? debug_smp_processor_id+0x1c/0x20 [ 294.075427] ? perf_trace_lock+0x14d/0x7a0 [ 294.079736] ? perf_trace_lock_acquire+0x15b/0x800 [ 294.084691] ? zap_class+0x640/0x640 [ 294.088432] ? perf_trace_lock+0x7a0/0x7a0 [ 294.092682] ? task_will_free_mem+0x239/0xb30 [ 294.097179] ? zap_class+0x640/0x640 [ 294.100916] ? zap_class+0x640/0x640 [ 294.104645] ? ___ratelimit+0x36f/0x655 [ 294.108630] ? lock_downgrade+0x900/0x900 [ 294.112805] ? trace_hardirqs_on+0xbd/0x310 [ 294.117130] ? kasan_check_read+0x11/0x20 [ 294.121285] ? ___ratelimit+0x36f/0x655 [ 294.125273] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 294.130730] ? trace_hardirqs_on+0x310/0x310 [ 294.135162] ? lock_downgrade+0x900/0x900 [ 294.139351] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 294.144468] ? ___ratelimit+0xaa/0x655 [ 294.148366] ? idr_get_free+0xec0/0xec0 [ 294.152348] ? kasan_check_write+0x14/0x20 [ 294.156607] ? do_raw_spin_lock+0xc1/0x200 [ 294.160862] oom_kill_process.cold.27+0x10/0x903 [ 294.165631] ? kasan_check_write+0x14/0x20 [ 294.169879] ? do_raw_spin_lock+0xc1/0x200 [ 294.174129] ? oom_evaluate_task+0x540/0x540 [ 294.178551] ? cgroup_procs_next+0x70/0x70 [ 294.182795] ? _raw_spin_unlock_irq+0x60/0x80 [ 294.187311] ? oom_badness+0xaa0/0xaa0 [ 294.191209] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 294.195995] ? mem_cgroup_iter_break+0x30/0x30 [ 294.200622] ? cgroup_file_notify+0x226/0x2f0 [ 294.205132] out_of_memory+0xa84/0x1430 [ 294.209120] ? kasan_check_read+0x11/0x20 [ 294.213281] ? oom_killer_disable+0x3a0/0x3a0 [ 294.217782] ? kasan_check_write+0x14/0x20 [ 294.222029] ? do_raw_spin_lock+0xc1/0x200 [ 294.226282] mem_cgroup_out_of_memory+0x15e/0x210 [ 294.231132] ? memcg_memory_event+0x40/0x40 [ 294.235482] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 294.240256] ? page_counter_try_charge+0x1c1/0x220 [ 294.245197] try_charge+0xc43/0x1690 [ 294.248932] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.254053] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 294.260116] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 294.264970] ? lock_downgrade+0x900/0x900 [ 294.269132] ? lock_release+0x970/0x970 [ 294.273116] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 294.278920] ? kasan_check_read+0x11/0x20 [ 294.283089] ? do_raw_spin_unlock+0xa7/0x2f0 [ 294.287506] ? zap_class+0x640/0x640 [ 294.291247] ? get_mem_cgroup_from_mm+0x206/0x440 [ 294.296103] ? mem_cgroup_can_attach+0x580/0x580 [ 294.300889] ? __might_sleep+0x95/0x190 [ 294.304880] mem_cgroup_try_charge+0x5ea/0xe10 [ 294.309495] ? lock_downgrade+0x900/0x900 [ 294.313657] ? mem_cgroup_protected+0xa60/0xa60 [ 294.318357] ? __handle_mm_fault+0x2c32/0x53e0 [ 294.322961] ? pmd_val+0x88/0x100 [ 294.326423] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 294.331992] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 294.336933] __handle_mm_fault+0x273a/0x53e0 [ 294.341347] ? zap_class+0x640/0x640 [ 294.345074] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 294.349919] ? __dump_page.cold.2+0x179/0x179 [ 294.354423] ? follow_page_mask+0x1d2/0x1fb0 [ 294.358872] ? zap_class+0x640/0x640 [ 294.362611] ? handle_mm_fault+0x42a/0xc70 [ 294.366852] ? lock_downgrade+0x900/0x900 [ 294.371014] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 294.376815] ? __get_user_pages+0x806/0x1b30 [ 294.381233] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 294.386694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 294.392765] ? check_preemption_disabled+0x48/0x200 [ 294.397800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.403382] handle_mm_fault+0x54f/0xc70 [ 294.407477] ? __handle_mm_fault+0x53e0/0x53e0 [ 294.412064] ? find_vma+0x34/0x190 [ 294.415611] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 294.420639] __get_user_pages+0x806/0x1b30 [ 294.424951] ? follow_page_mask+0x1fb0/0x1fb0 [ 294.429460] ? zap_class+0x640/0x640 [ 294.433182] ? perf_trace_lock+0x7a0/0x7a0 [ 294.437490] ? lock_acquire+0x1ed/0x520 [ 294.441474] ? __mm_populate+0x31a/0x4d0 [ 294.445562] ? lock_release+0x970/0x970 [ 294.449576] ? arch_local_save_flags+0x40/0x40 [ 294.454161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.459726] populate_vma_page_range+0x2db/0x3d0 [ 294.464500] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 294.469439] ? find_vma+0x34/0x190 [ 294.473002] __mm_populate+0x286/0x4d0 [ 294.476904] ? populate_vma_page_range+0x3d0/0x3d0 [ 294.481843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.487390] ? ns_capable_common+0x13f/0x170 [ 294.491806] __x64_sys_mlockall+0x45b/0x630 [ 294.496129] ? __ia32_sys_munlock+0x160/0x160 [ 294.500629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.506174] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.511542] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 294.517008] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 294.522581] do_syscall_64+0x1b9/0x820 [ 294.526499] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 294.531888] ? syscall_return_slowpath+0x5e0/0x5e0 [ 294.536849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.541700] ? trace_hardirqs_on_caller+0x310/0x310 [ 294.546741] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 294.551763] ? prepare_exit_to_usermode+0x291/0x3b0 [ 294.556790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.561646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.566857] RIP: 0033:0x457579 [ 294.570066] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.588962] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 04:38:06 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x71, 0x0, 0x20, 0x9b, 0x0, 0x400, 0x2080, 0x4, 0x3, 0x14, 0x2, 0x0, 0x0, 0x80000001, 0x9, 0x0, 0x80000000, 0x3, 0x4, 0x8, 0xbfc, 0x2, 0x9, 0x0, 0xd3, 0x8000, 0x4, 0x7, 0x0, 0xfffffffffffff001, 0x4, 0x1, 0x5, 0xfff, 0x0, 0x82, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x80, 0x1, 0x6, 0x0, 0x0, 0x401, 0x6}, r1, 0x6, r0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000002bc0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x8, &(0x7f0000002b40)=""/8, 0x0, 0xfffffffffffffffc}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x50, &(0x7f0000000480)}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)='keyring\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xffffffffffffff34) 04:38:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x3ff, 0x3, &(0x7f0000000040)=0x1ff}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r0, &(0x7f0000000180)={r1, r2, 0x20}) splice(r1, &(0x7f00000001c0), r0, &(0x7f0000000200), 0x1, 0x1) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000380)={r6, &(0x7f0000000280)=""/215}) r7 = perf_event_open(&(0x7f0000000400)={0x4, 0x70, 0x7, 0x40, 0x352, 0x0, 0x0, 0x40, 0x10, 0xb, 0xffff, 0x49, 0x4, 0x760f, 0x1f, 0x3f, 0x7fffffff, 0xffffffff, 0x2, 0x0, 0x1, 0x6, 0x4, 0x4, 0x8001, 0x200, 0x4, 0x3, 0xffff, 0x1, 0x82, 0x7f, 0x9, 0x6a00000000, 0xfe, 0x7fff, 0x7, 0xffffffffffff7943, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000003c0)}, 0x100, 0x6, 0x5, 0x2, 0xf5c3, 0xf86, 0x80000000}, r5, 0xe, r0, 0x9) prctl$setmm(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) fsetxattr$security_selinux(r7, &(0x7f0000000480)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:var_run_t:s0\x00', 0x1f, 0x1) r8 = syz_open_dev$dmmidi(&(0x7f0000000500)='/dev/dmmidi#\x00', 0x81, 0x101000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40485404, &(0x7f0000000540)={{0x0, 0x3, 0x9, 0x2, 0x10001}, 0x6, 0x80000000}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x80000001, 0x200, 0x37c200000000000, 0x101c, 0xfffffffffffff9f7, 0x10000, 0x10001, {0x0, @in6={{0xa, 0x4e24, 0x7, @remote, 0x5}}, 0x0, 0x7, 0x8, 0x7fff, 0x101}}, &(0x7f0000000680)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000006c0)={r9, 0x100000001}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f00000007c0)) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000800)=@assoc_id=r10, 0x4) r11 = add_key(&(0x7f0000000840)='asymmetric\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="2381efd1833f4ba360bba1dbf3c6aaecdf6b5f7f055c848492dd746d7c0bd24b31e277b337a5290d4ac163627c0d7cd6a55fe4ccd14b9e901aa4f6c248d58f65d8acf65dc339942444f78c7c3ffc45f9aa2e09e306557bb4e16fafb6753d1e721b3c6d74038f8916b7a83972c2ee5b52635715e70ad2dfb342", 0x79, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r4, r11) openat$nullb(0xffffffffffffff9c, &(0x7f0000000940)='/dev/nullb0\x00', 0x40, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000980)=0x3, 0x4) write$FUSE_IOCTL(r1, &(0x7f00000009c0)={0x20, 0xfffffffffffffff5, 0x4, {0x5, 0x4, 0x7, 0x8}}, 0x20) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000a00)=0x30bb) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000a40)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000a80)={0x8}) syz_emit_ethernet(0xa1, &(0x7f0000000ac0)={@remote, @random="49a3b3fa2957", [{[{0x9100, 0x1, 0x800, 0x1}], {0x8100, 0x4, 0x8}}], {@ipx={0x8137, {0xffff, 0x8b, 0x6, 0x14, {@random=0x6, @random="38660713f94b", 0xa7}, {@random=0x3ff, @current, 0x3}, "ffd9977223f8ec77dc6da4151e7aaea1130b50229c643cafaf19128b784a8ca835c623ecf39fc535bd9df5bd215b8cd4c5ad77e13da77c467eab44f406becf115eabdad56f9fcb706f646f68705f9f2ef50de27eb17a658a8628d91f9b8b1dd039f9ea41d312aa3d1e754ef8e5"}}}}, &(0x7f0000000b80)={0x1, 0x1, [0xeec, 0xb3f, 0x1f9, 0x750]}) [ 294.596675] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 294.603943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 294.611213] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 294.618488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 294.625753] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff 04:38:06 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x49c) r1 = userfaultfd(0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) close(r1) [ 294.652676] Task in /syz1 killed as a result of limit of /syz1 [ 294.666893] memory: usage 204788kB, limit 204800kB, failcnt 938 [ 294.673211] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 294.682650] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 04:38:06 executing program 5: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'rose0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f0000000140)=""/169, 0xa9, &(0x7f0000000240)=""/155, 0x3, 0x2}}, 0x68) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000002680), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @dev}, &(0x7f0000000440)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:38:06 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0xb03]}) [ 294.689348] Memory cgroup stats for /syz1: cache:0KB rss:195452KB rss_huge:159744KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:94640KB active_anon:2312KB inactive_file:0KB active_file:0KB unevictable:98644KB [ 294.711118] Memory cgroup out of memory: Kill process 9064 (syz-executor1) score 248 or sacrifice child [ 294.740431] Killed process 9064 (syz-executor1) total-vm:70472kB, anon-rss:18076kB, file-rss:32768kB, shmem-rss:0kB 04:38:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000000)=""/131) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x3, 0x8012, r1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x81, 0x4) 04:38:06 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="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", 0x1000, r1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5423, &(0x7f00000000c0)={{}, 0x0, 0x0, 'id1\x00', '4imer1\x00'}) [ 294.804962] oom_reaper: reaped process 9064 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 294.887827] QAT: Invalid ioctl 04:38:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socketpair(0xa, 0x800, 0x2, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRCREATE(r1, &(0x7f0000000640)={0x7, 0x21, 0x1}, 0x7) lsetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'user.', 'ecb-camellia-asm\x00'}, &(0x7f00000005c0)='$\x00', 0x2, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x280000) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0xffffffff, 0x1, 0x0, 0x9, 0x4, 0xffff, 0x100000000, 0x1, 0x7c, 0x6, 0x6, 0xff, 0x4}, {0x5, 0x401, 0x8a8f, 0x1e0, 0x6, 0xe9, 0x6, 0x2, 0x9, 0x2, 0x0, 0x5, 0x81}, {0x2, 0x3, 0x3, 0x7, 0x2, 0x9d2f, 0x0, 0x4, 0x80, 0x100000001, 0x1ff, 0x8fe4, 0x5}], 0x10000}) r3 = accept$alg(r0, 0x0, 0x0) recvfrom(r3, &(0x7f0000000140)=""/244, 0xf4, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x1b, 0x4}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000003c0)={r5, 0x0, 0x40, 0x74, 0x2, 0x40}, &(0x7f0000000400)=0x14) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000500)=0x7ff) setregid(r4, r6) getsockname$unix(r0, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) [ 294.932139] QAT: Invalid ioctl 04:38:07 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x101, 0x20080) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0xf77, 0x7b}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1, 0x40}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000200)=0x4) 04:38:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x0, 0x8, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(r5, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)) getsockopt$bt_BT_DEFER_SETUP(r6, 0x10e, 0xa, &(0x7f0000000240), &(0x7f0000000080)=0xfffffffffffffd92) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff}, 0xa) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x280400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 04:38:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000400)=""/194) socket$inet6(0xa, 0x1080000000002, 0x0) sendto$inet(r0, &(0x7f0000000500)="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", 0x1000, 0x0, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfff}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 04:38:07 executing program 3: r0 = socket$inet6(0xa, 0x80000, 0xda1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000600)="eb64c96d4f66732e2c000000000000ef3ea36b7624bdf4f90b0000000000000020bd536c6315e836f2bbd8ff083bd200000000000000000000000000000092e4e4bc95672950adb8df49b1d4c0b6533ccf0b7d49ba8729fb7291dd1f5789de80d9bb05391e790854e471f619019ecd9dbad7653b546104700e1e685e76d0b37a9ec543a4bf939c2b0008ec7544d1634b8af9e8e800e5249042c63223f5e2932b8a7da991331e3ca7fd8e51f26828ede5bebd2bc1bf43f1c337aadde0948788b0ecb560e633080e634becdb5bc80834bf1c17c60312751e4fc0537fba1aae0fc0060b120153d760ef89a086e1412120e3a2cb3223dec5fd50019dc4e9306e1c6d5232ee328bad774dcf97f7cdffe27d03088c818d0000010046ee", 0x11a}], 0x0, &(0x7f0000000400)=ANY=[]) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x10808410, &(0x7f0000000340)=ANY=[]) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='security.ima\x00') r4 = perf_event_open(&(0x7f0000940000)={0x2, 0xfffffffffffffdcd, 0xfffffffffffffffe, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r4, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000001140)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) r7 = gettid() capset(&(0x7f00000002c0)={0x19980330, r7}, &(0x7f0000000300)={0x2, 0x2, 0x89, 0x3, 0xca, 0xca30}) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp, 0x1e}, 0x0, 0x0, r6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x3, 0x0, 0x80000000, 0x80, 0x4}, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400000, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) mkdirat(r3, &(0x7f0000000480)='./file1\x00', 0x100000000) creat(&(0x7f0000000a00)='./file0/file0\x00', 0x0) fchdir(r2) seccomp(0x0, 0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) fstatfs(r0, &(0x7f0000000940)=""/128) 04:38:07 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x71, 0x0, 0x20, 0x9b, 0x0, 0x400, 0x2080, 0x4, 0x3, 0x14, 0x2, 0x0, 0x0, 0x80000001, 0x9, 0x0, 0x80000000, 0x3, 0x4, 0x8, 0xbfc, 0x2, 0x9, 0x0, 0xd3, 0x8000, 0x4, 0x7, 0x0, 0xfffffffffffff001, 0x4, 0x1, 0x5, 0xfff, 0x0, 0x82, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x80, 0x1, 0x6, 0x0, 0x0, 0x401, 0x6}, r1, 0x6, r0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000002bc0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x8, &(0x7f0000002b40)=""/8, 0x0, 0xfffffffffffffffc}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x50, &(0x7f0000000480)}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)='keyring\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xffffffffffffff34) 04:38:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="66b9b40900000f326666dfd0660f38145800baf80c66b888234a8b66efbafc0c66ed0f330fc75a80670f01cbbaf80c66b808f6878866efbafc0cecba2100ec0f22a1", 0x42}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000440)={0x80003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x28, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 295.501659] FAT-fs (loop3): invalid media value (0xbd) [ 295.524501] FAT-fs (loop3): Can't find a valid FAT filesystem [ 295.607771] BUG: unable to handle kernel paging request at ffff8801cd74e000 [ 295.614892] PGD bc01067 P4D bc01067 PUD 1d940b063 PMD 80000001cd6001e3 [ 295.621705] Oops: 000b [#1] PREEMPT SMP KASAN [ 295.626217] CPU: 1 PID: 10764 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #275 [ 295.633593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.642969] RIP: 0010:mmu_page_zap_pte+0x295/0x390 [ 295.647914] Code: 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c7 85 58 ff ff ff 00 00 00 00 48 c1 ea 03 80 3c 02 00 0f 85 d4 00 00 00 48 c1 eb 03 <49> c7 45 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 be 01 00 [ 295.666829] RSP: 0018:ffff880185556e08 EFLAGS: 00010a06 [ 295.672198] RAX: dffffc0000000000 RBX: 1ffff10030aaadc6 RCX: ffffc9000e469000 [ 295.679480] RDX: 1ffff10039ae9c00 RSI: ffffffff8111178b RDI: 0000000000000007 [ 295.686754] RBP: ffff880185556ed8 R08: ffff880185f34380 R09: fffff520014ee93a [ 295.694030] R10: fffff520014ee93a R11: ffffc9000a7749d3 R12: 1ffff10030aaadc2 [ 295.701304] R13: ffff8801cd74e000 R14: 0000000000000004 R15: 0000000000000000 [ 295.708579] FS: 00007fba3e6f3700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 295.716813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.722699] CR2: ffff8801cd74e000 CR3: 00000001d35f6000 CR4: 00000000001426e0 [ 295.729980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.737257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.744522] Call Trace: [ 295.747124] ? ept_prefetch_invalid_gpte.isra.71+0x1c0/0x1c0 [ 295.752932] ? lock_timer_base+0x2b0/0x2b0 [ 295.757181] ? do_raw_spin_lock+0xc1/0x200 [ 295.761434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.767008] ? check_preemption_disabled+0x48/0x200 [ 295.772040] kvm_mmu_prepare_zap_page+0x1f9/0x1510 [ 295.776981] ? perf_trace_lock_acquire+0x15b/0x800 [ 295.781938] ? check_preemption_disabled+0x48/0x200 [ 295.786985] ? kvm_handle_hva_range+0x780/0x780 [ 295.791668] ? debug_smp_processor_id+0x1c/0x20 [ 295.796340] ? perf_trace_lock_acquire+0x15b/0x800 [ 295.801281] ? perf_trace_lock+0x7a0/0x7a0 [ 295.805531] ? mark_held_locks+0x130/0x130 [ 295.809804] ? mark_held_locks+0x130/0x130 [ 295.814054] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 295.815289] kobject: 'loop3' (00000000a595fbf3): kobject_uevent_env [ 295.818819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.818836] ? check_preemption_disabled+0x48/0x200 [ 295.818854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.818869] ? kvm_make_vcpus_request_mask+0x45b/0x5c0 [ 295.818889] ? gfn_to_pfn_atomic+0x7a0/0x7a0 [ 295.818914] ? kvm_mmu_invalidate_zap_all_pages+0x9f/0x7b0 [ 295.825800] kobject: 'loop3' (00000000a595fbf3): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 295.830856] ? lock_release+0x970/0x970 [ 295.830872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 295.830889] ? kvm_reload_remote_mmus+0x99/0xe0 [ 295.830918] ? kvm_make_all_cpus_request+0xe0/0xe0 [ 295.830933] ? do_raw_spin_lock+0xc1/0x200 [ 295.830968] kvm_mmu_invalidate_zap_all_pages+0x348/0x7b0 [ 295.830989] ? kvm_mmu_zap_collapsible_sptes+0x850/0x850 [ 295.831019] ? kvm_vcpu_on_spin+0x830/0x830 [ 295.831036] ? lock_release+0x970/0x970 [ 295.908921] ? lock_release+0x970/0x970 [ 295.912910] ? trace_hardirqs_on+0x310/0x310 [ 295.917331] kvm_arch_flush_shadow_all+0x15/0x20 [ 295.922114] kvm_mmu_notifier_release+0x59/0x90 [ 295.926795] ? kvm_vcpu_on_spin+0x830/0x830 [ 295.931133] mmu_notifier_unregister+0x1ff/0x600 [ 295.935949] ? debug_check_no_obj_freed+0x305/0x58d [ 295.940980] ? kvm_vcpu_on_spin+0x830/0x830 [ 295.945406] ? __mmu_notifier_register+0x30/0x30 [ 295.950173] ? __free_pages+0x10a/0x190 [ 295.954166] ? free_unref_page+0x960/0x960 [ 295.958427] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 295.963927] kvm_put_kvm+0x6c0/0xff0 [ 295.967658] ? kvm_write_guest_cached+0x40/0x40 [ 295.972445] ? do_raw_spin_unlock+0xa7/0x2f0 [ 295.976893] ? up_write+0x7b/0x220 [ 295.980481] ? up_read+0x110/0x110 [ 295.984036] ? mntput+0x74/0xa0 [ 295.987331] ? debugfs_remove_recursive+0x40d/0x530 [ 295.992376] ? debugfs_remove+0x130/0x130 [ 295.996532] ? kasan_check_write+0x14/0x20 [ 296.000787] ? kvm_vm_release+0x50/0x50 [ 296.004775] kvm_vcpu_release+0x7b/0xa0 [ 296.008758] __fput+0x385/0xa30 [ 296.012056] ? get_max_files+0x20/0x20 [ 296.015957] ? trace_hardirqs_on+0xbd/0x310 [ 296.020285] ? kasan_check_read+0x11/0x20 [ 296.024477] ? task_work_run+0x1af/0x2a0 [ 296.028569] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 296.034032] ? kasan_check_write+0x14/0x20 [ 296.038277] ? do_raw_spin_lock+0xc1/0x200 [ 296.042520] ____fput+0x15/0x20 [ 296.045813] task_work_run+0x1e8/0x2a0 [ 296.049712] ? task_work_cancel+0x240/0x240 [ 296.054048] ? debug_smp_processor_id+0x1c/0x20 [ 296.058729] get_signal+0x155e/0x1980 [ 296.062542] ? __fget+0x4aa/0x740 [ 296.066032] ? lock_downgrade+0x900/0x900 [ 296.070193] ? ptrace_notify+0x130/0x130 [ 296.074268] ? zap_class+0x640/0x640 [ 296.077996] ? zap_class+0x640/0x640 [ 296.081730] ? __fget+0x4d1/0x740 [ 296.085216] do_signal+0x9c/0x21e0 [ 296.088770] ? __might_fault+0x12b/0x1e0 [ 296.092844] ? lock_downgrade+0x900/0x900 [ 296.097008] ? lock_release+0x970/0x970 [ 296.100994] ? setup_sigcontext+0x7d0/0x7d0 [ 296.105328] ? kvm_vcpu_block+0x1030/0x1030 [ 296.105906] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 296.109655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.109672] ? do_vfs_ioctl+0x201/0x1720 [ 296.109691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.109709] ? check_preemption_disabled+0x48/0x200 [ 296.109729] ? kick_process+0xed/0x170 [ 296.109745] ? trace_hardirqs_on+0xbd/0x310 [ 296.109759] ? task_work_add+0x123/0x1f0 [ 296.109774] ? do_syscall_64+0x6be/0x820 [ 296.109790] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 296.109805] ? cpumask_weight.constprop.5+0x3f/0x3f [ 296.109827] exit_to_usermode_loop+0x2e5/0x380 [ 296.109844] ? syscall_slow_exit_work+0x520/0x520 [ 296.109858] ? ksys_ioctl+0x81/0xd0 [ 296.109880] do_syscall_64+0x6be/0x820 [ 296.109896] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 296.109915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 296.121030] syz-executor1 cpuset= [ 296.126271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.126289] ? trace_hardirqs_on_caller+0x310/0x310 [ 296.126306] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 296.126324] ? prepare_exit_to_usermode+0x291/0x3b0 [ 296.126344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.126364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.130681] syz1 [ 296.135954] RIP: 0033:0x4573e7 [ 296.141259] mems_allowed=0 [ 296.144830] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.144838] RSP: 002b:00007fba3e6f1098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.144854] RAX: 0000000000000000 RBX: 0000000000000018 RCX: 00000000004573e7 [ 296.144863] RDX: 00007fba3e6f16f0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 296.144872] RBP: 0000000020017000 R08: 0000000000000001 R09: 0000000000000028 [ 296.144880] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 296.144888] R13: 00000000ffffffff R14: 00000000004d7cf8 R15: 00000000ffffffff [ 296.144905] Modules linked in: [ 296.149510] CPU: 0 PID: 10758 Comm: syz-executor1 Not tainted 4.19.0-rc7+ #275 [ 296.157310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.162737] CR2: ffff8801cd74e000 [ 296.167738] Call Trace: [ 296.172309] ---[ end trace 8c8e313180cdae36 ]--- [ 296.177150] dump_stack+0x1c4/0x2b4 [ 296.180777] RIP: 0010:mmu_page_zap_pte+0x295/0x390 [ 296.184650] ? dump_stack_print_info.cold.2+0x52/0x52 [ 296.189997] Code: 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c7 85 58 ff ff ff 00 00 00 00 48 c1 ea 03 80 3c 02 00 0f 85 d4 00 00 00 48 c1 eb 03 <49> c7 45 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 be 01 00 [ 296.194916] ? mark_held_locks+0x130/0x130 [ 296.198347] RSP: 0018:ffff880185556e08 EFLAGS: 00010a06 [ 296.203181] ? mark_held_locks+0x130/0x130 [ 296.213186] dump_header+0x27b/0xf72 [ 296.218179] RAX: dffffc0000000000 RBX: 1ffff10030aaadc6 RCX: ffffc9000e469000 [ 296.223013] ? debug_smp_processor_id+0x1c/0x20 [ 296.228178] RDX: 1ffff10039ae9c00 RSI: ffffffff8111178b RDI: 0000000000000007 [ 296.230145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.233318] RBP: ffff880185556ed8 R08: ffff880185f34380 R09: fffff520014ee93a [ 296.236239] ? pagefault_out_of_memory+0x197/0x197 [ 296.236260] ? debug_smp_processor_id+0x1c/0x20 [ 296.255145] R10: fffff520014ee93a R11: ffffc9000a7749d3 R12: 1ffff10030aaadc2 [ 296.262858] ? perf_trace_lock_acquire+0x15b/0x800 [ 296.270145] R13: ffff8801cd74e000 R14: 0000000000000004 R15: 0000000000000000 [ 296.277411] ? perf_trace_lock_acquire+0x15b/0x800 [ 296.284663] FS: 00007fba3e6f3700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 296.291921] ? perf_trace_lock+0x7a0/0x7a0 [ 296.299170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.302368] ? perf_trace_lock+0x7a0/0x7a0 [ 296.309700] CR2: ffff8801cd74e000 CR3: 00000001d35f6000 CR4: 00000000001426e0 [ 296.309712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.319067] ? debug_smp_processor_id+0x1c/0x20 [ 296.322511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.325082] ? perf_trace_lock_acquire+0x15b/0x800 [ 296.329812] Kernel panic - not syncing: Fatal exception [ 296.333433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.510856] ? perf_trace_lock+0x7a0/0x7a0 [ 296.515093] ? retint_kernel+0x2d/0x2d [ 296.518996] ? trace_hardirqs_on_caller+0xc0/0x310 [ 296.523930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.528692] ? trace_hardirqs_off+0x310/0x310 [ 296.533204] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.537966] ? retint_kernel+0x2d/0x2d [ 296.541861] ? trace_hardirqs_on+0xb4/0x310 [ 296.546184] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 296.551291] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 296.556402] ? ___ratelimit+0xaa/0x655 [ 296.560293] ? idr_get_free+0xec0/0xec0 [ 296.564301] ? kasan_check_write+0x14/0x20 [ 296.568559] ? do_raw_spin_lock+0xc1/0x200 [ 296.572804] oom_kill_process.cold.27+0x10/0x903 [ 296.577570] ? trace_hardirqs_on+0xb4/0x310 [ 296.581892] ? _raw_spin_unlock_irq+0x56/0x80 [ 296.586397] ? oom_evaluate_task+0x540/0x540 [ 296.590814] ? cgroup_procs_next+0x70/0x70 [ 296.595056] ? _raw_spin_unlock_irq+0x60/0x80 [ 296.599554] ? oom_badness+0xaa0/0xaa0 [ 296.603448] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 296.608216] ? mem_cgroup_iter_break+0x30/0x30 [ 296.612810] ? cgroup_file_notify+0x226/0x2f0 [ 296.617311] out_of_memory+0xa84/0x1430 [ 296.621290] ? kasan_check_read+0x11/0x20 [ 296.625441] ? oom_killer_disable+0x3a0/0x3a0 [ 296.629946] ? kasan_check_write+0x14/0x20 [ 296.634187] ? do_raw_spin_lock+0xc1/0x200 [ 296.638431] mem_cgroup_out_of_memory+0x15e/0x210 [ 296.643284] ? memcg_memory_event+0x40/0x40 [ 296.647605] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 296.652370] ? page_counter_try_charge+0x1c1/0x220 [ 296.657308] try_charge+0xc43/0x1690 [ 296.661023] ? rcu_gp_kthread+0x2310/0x2310 [ 296.665358] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 296.671415] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 296.676267] ? lock_downgrade+0x900/0x900 [ 296.680418] ? __rcu_read_unlock+0x2e5/0x2f0 [ 296.684832] ? lock_release+0x970/0x970 [ 296.688809] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 296.694620] ? lock_acquire+0xb/0x520 [ 296.698433] ? get_mem_cgroup_from_mm+0x206/0x440 [ 296.703288] ? mem_cgroup_can_attach+0x580/0x580 [ 296.708056] ? __might_sleep+0x95/0x190 [ 296.712034] mem_cgroup_try_charge+0x5ea/0xe10 [ 296.716623] ? mem_cgroup_protected+0xa60/0xa60 [ 296.721295] ? swp_swapcount+0x530/0x530 [ 296.725374] ? retint_kernel+0x2d/0x2d [ 296.729287] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 296.734833] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 296.739771] wp_page_copy+0x46c/0x14f0 [ 296.743660] ? kasan_check_write+0x14/0x20 [ 296.747915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.753470] ? follow_pfn+0x2e0/0x2e0 [ 296.757282] ? do_wp_page+0x76c/0x1390 [ 296.761184] ? lock_downgrade+0x900/0x900 [ 296.765348] ? kasan_check_write+0x14/0x20 [ 296.769584] ? kasan_check_read+0x11/0x20 [ 296.773739] ? do_raw_spin_unlock+0xa7/0x2f0 [ 296.778154] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 296.782746] ? __pte_alloc_kernel+0x220/0x220 [ 296.787252] do_wp_page+0x774/0x1390 [ 296.790973] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 296.795648] ? lock_release+0x970/0x970 [ 296.799625] ? retint_kernel+0x2d/0x2d [ 296.803520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 296.809073] ? kasan_check_write+0x14/0x20 [ 296.813313] ? do_raw_spin_lock+0xc1/0x200 [ 296.817568] __handle_mm_fault+0x2c60/0x53e0 [ 296.821987] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 296.826833] ? __dump_page.cold.2+0x179/0x179 [ 296.831338] ? follow_page_mask+0x18d/0x1fb0 [ 296.835764] ? handle_mm_fault+0x42a/0xc70 [ 296.840015] ? lock_downgrade+0x900/0x900 [ 296.844174] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 296.849972] ? __get_user_pages+0x806/0x1b30 [ 296.854387] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 296.859858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 296.865399] ? check_preemption_disabled+0x48/0x200 [ 296.870417] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.875184] handle_mm_fault+0x54f/0xc70 [ 296.879252] ? __handle_mm_fault+0x53e0/0x53e0 [ 296.883861] __get_user_pages+0x806/0x1b30 [ 296.888108] ? follow_page_mask+0x1fb0/0x1fb0 [ 296.892609] ? retint_kernel+0x2d/0x2d [ 296.896501] ? trace_hardirqs_on_caller+0xc0/0x310 [ 296.901430] ? trace_hardirqs_on_caller+0xc0/0x310 [ 296.906387] ? trace_hardirqs_off+0x310/0x310 [ 296.910897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.915659] ? retint_kernel+0x2d/0x2d [ 296.919559] ? populate_vma_page_range+0x29e/0x3d0 [ 296.924513] populate_vma_page_range+0x2db/0x3d0 [ 296.929276] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 296.934214] __mm_populate+0x286/0x4d0 [ 296.938122] ? populate_vma_page_range+0x3d0/0x3d0 [ 296.943059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.948604] ? ns_capable_common+0x13f/0x170 [ 296.953017] __x64_sys_mlockall+0x45b/0x630 [ 296.957343] ? __ia32_sys_munlock+0x160/0x160 [ 296.961840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.967378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.972748] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 296.978208] do_syscall_64+0x1b9/0x820 [ 296.982095] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 296.987485] ? syscall_return_slowpath+0x5e0/0x5e0 [ 296.992414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.997259] ? trace_hardirqs_on_caller+0x310/0x310 [ 297.002282] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 297.007302] ? prepare_exit_to_usermode+0x291/0x3b0 [ 297.012322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.017171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.022361] RIP: 0033:0x457579 [ 297.025571] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.044476] RSP: 002b:00007fbb4ad67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 297.052206] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000457579 [ 297.059476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 297.066748] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 297.074013] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb4ad686d4 [ 297.081282] R13: 00000000004c2841 R14: 00000000004d3bb8 R15: 00000000ffffffff [ 297.089467] Kernel Offset: disabled [ 297.093095] Rebooting in 86400 seconds..