[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.851861] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 39.689952] random: sshd: uninitialized urandom read (32 bytes read) [ 39.966259] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.693400] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. [ 47.474438] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/05 03:20:07 fuzzer started [ 49.091903] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/05 03:20:10 dialing manager at 10.128.0.26:45707 2018/09/05 03:20:13 syscalls: 1 2018/09/05 03:20:13 code coverage: enabled 2018/09/05 03:20:13 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/05 03:20:13 setuid sandbox: enabled 2018/09/05 03:20:13 namespace sandbox: enabled 2018/09/05 03:20:13 fault injection: enabled 2018/09/05 03:20:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/05 03:20:13 net packed injection: enabled 2018/09/05 03:20:13 net device setup: enabled [ 57.170652] random: crng init done 03:22:25 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x7, 0xfffffffffffff001, 0x1ff, 0x0, @tick=0x78, {0x4000000000000000, 0x7fff}, {0xf7c7, 0x100000001}, @raw32={[0x7, 0x20]}}, {0x10000, 0x2, 0x7f, 0x4, @tick=0x9, {0x2, 0xff}, {0x40, 0x800}, @connect={{0x9, 0x401}, {0x0, 0xbb1}}}], 0x60) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f00000000c0)=""/241, &(0x7f00000001c0)=0xf1) setsockopt$inet6_buf(r0, 0x29, 0x7c, &(0x7f0000000200)="6560cd0920514c6b33d8238e5fd0ab60b22e57fa6dcf6bc917a0651da4dc92533580ca69beeda52ed30118d60c23cc7432ff3b3a1e0446835cc21535b0ef34c6e9b7118c9b978886e88a0d59023197d027d6445557911db44eeda1b2e3c777fcaef2dddb7aeb49b3c8512a104ef01bb61f647042eeed8d722f3a3ee44e29590340bfad96885014f0688b4a7438cdb3580cf2b4e9966d8bea1465a47daff4da49a0cc8e5f0d3763c8f93a88563140246f3532e17d00df", 0xb6) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000002c0)={0x5, 0x7ff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) sync() ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000380)=0x7) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f00000003c0)="835ed70cf5b33f95c562047c45b8d90516f7") setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000400)={0x3, 'bond0\x00', 0x1}, 0x18) r1 = shmget(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000440)=""/114) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000004c0)={@rand_addr, @empty, @rand_addr}, &(0x7f0000000500)=0xc) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000540)) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000580)) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000005c0)=0x3) write$binfmt_elf32(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x4, 0x101, 0x8, 0x6, 0x3, 0x3, 0x80000000, 0x330, 0x38, 0x7f, 0x7, 0xf809, 0x20, 0x2, 0x6, 0x5, 0x4b88}, [{0x7, 0x400, 0x7, 0x80, 0x8, 0x1, 0x1, 0x9}], "4e1f0d8b3e13da0c8446e229bb16f7ed77f9e486b263548c3ffdb243dab98962", [[], [], [], [], [], [], [], [], [], []]}, 0xa78) ioperm(0x5, 0x200, 0x7fffffff) timerfd_gettime(r0, &(0x7f0000001080)) r2 = syz_open_dev$vcsa(&(0x7f00000010c0)='/dev/vcsa#\x00', 0x5, 0x10000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001280)={'nat\x00', 0x0, 0x3, 0xb2, [], 0xa, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000011c0)=""/178}, &(0x7f0000001300)=0x78) ioctl$EXT4_IOC_SHUTDOWN(r0, 0x8004587d, &(0x7f0000001340)=0x2) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000001380)) syz_execute_func(&(0x7f00000013c0)="67660f3a63b00c0000000067410ffde5670f8102000000e0688f08009f9bfaffffff068fc8c0a26021110fd9dac4427d137b08c4426d474a27c422fd22e8") ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001400)=0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001440)=0x0) setpgid(r3, r4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001480)) 03:22:25 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1000, 0x0, 0xffffffffffff845c, 0xbb58}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x1, 0x100}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) open_by_handle_at(r0, &(0x7f0000000140)={0xdd, 0xa23, "d7f046ba5bcd44b37e8676f9e020304522b3bd2b229a28f3cffa1147134715d52971c06ddf85357fd59ae53b8dd1655ed40feafe9a33db65224d59b4f337d0e26bcfa371f6778999e2754325f1edf9431dae32dd096486eaa240183568d7dd276ce58d177eaa6ab78590336e2388c600efe7ee1afe0a9497120b3e0c9cd54ecd8f491f2402074a1c13d27e6ea86403ab0c94016488f932375c2a18c7818012c94c9d1ee52f633dc1add12c77500810aece71c1366ccfb9e39bd7d077b4ec865a42a7a754c07d884ccb4c0e74d8ec8d9e10450baae2"}, 0x400040) getgid() setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e24, 0x8, @local, 0x6}}, 0x1f, 0xe42, 0x8, 0x1, 0x80}, 0x98) socket$can_raw(0x1d, 0x3, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000300)=""/216) socketpair(0x9, 0x7, 0x2, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440)={r1, 0x4}, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x15c, r4, 0x413, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffffff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x255a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xce17}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000700)={r1, 0x1}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000780), &(0x7f00000007c0)=0xb) socket$bt_bnep(0x1f, 0x3, 0x4) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value, &(0x7f0000000900)=0x8) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000940)={0x7, 0x8001, 0x400, 0x5, 0x80, 0x5, 0xffffffffffff8000, 0x0, 0x38a0, 0xa55}) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x33) fallocate(r3, 0x40, 0xc7d, 0xfffffffffffffffe) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, r4, 0xa00, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5aef}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe85}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x15}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c040) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000c00)=0x20, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000c40)=0xa2f, 0x4) open$dir(&(0x7f0000000c80)='./file0\x00', 0x2, 0x10) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000cc0)={0x3, r2}) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000d00)=""/47, &(0x7f0000000d40)=0x2f) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000d80)) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000dc0)={0x1, 0xffffffffffffffff}, 0x2) 03:22:25 executing program 7: r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x5) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x16) rt_sigtimedwait(&(0x7f0000000080)={0x10001}, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, 0x8) rmdir(&(0x7f0000000140)='./file0\x00') ioctl$KDDISABIO(r1, 0x4b37) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000240)={@loopback, @multicast2, @multicast1}, &(0x7f0000000280)=0xc) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x12) r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x80000) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xb) r4 = accept4$unix(r3, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x80000) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000440)={{0xdb, 0x5, 0xffff, 0x10001}, 'syz0\x00', 0x1a}) writev(r2, &(0x7f0000001a00)=[{&(0x7f00000004c0)="fb44dca5fa83269e78044fff76d501531976254e269e50160e71bca0ad09417c2f76aab69d871b45a60c7be82da2e7c0916faceb803c95b8ace966824fe0cfcc1af2b85619970dc6100b1bed9dec194c38149d92add4689615f8b8ae1dabf9fc8eea5330582ad5c3d445580e5012f27ddc070fa48876c20f23cd0d0cd28689ad54d2d3fbac63642fb18b0870608a9be4520683c405925be788ccfd63c1f487644c1a886493e3432e603d39367434613ea13ebb5fb8ea0d", 0xb7}, {&(0x7f0000000580)="9aed0e602e850cc0984c6061", 0xc}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="38f23646b1996ad308a9eee3154fe54550848cfb7050b68b690ccbfa722e26b9064fdfb01e073525", 0x28}, {&(0x7f0000000640)="9d879d11836faede7902146d2d3c4405edbded15e3bad5c0ac2ea462bfe6e131ab0a80c30d7a064a552304f3de3640724f064f28fca13db9991d228db32173fffc9fce7ad8627f6c7a2553bd74cd24fd1f510822084010ce18e2f880732ce36e33b1439d56d99a0dc71d0abd5ba88f8d24dc06e2ba734783ab02ed5253b9d5150952ba5f753e951108732c69c86d39468e8407fa88b5df0e7087d8253ac75aaff38a2c1e031ce0a29f904ef66242aa3915ba42995625c18bff169746d54df90c24940eaf81fcd1c4bcd6a0f40ccb008e4c9b351dd52815e229319e1eae2591d68985096b03b15221b56babffa0bb19b6a067cabdf356641ef8a4add14af2145c193da84c30162aae49f83367ef19aa29c38ecedc016c12431187b57554905a5f50c53e2ff20d5e407f879ce0d51dd6ae7f2831ad8727b2a3bef4b74d2426685e41adce976405ee7a7eefed4b04ef6b3c7c1f4b7da76eb6a26adf8abbb275edc19436de2d0cce3ec7ca5dbe9d7af75381e7370142142bdbee273e4258e3f9f8a69b9699a790c3b5c4b322aca3efdad41bbc15cea28c182655a3772017e90402f1f378eb8a4a6884ab29623f2f3fd2d520bfffa519bbf0362cdbb32ee1a436ab404e0e72f0b6011ebe19ea69c79f0023bce16aec1d0094ef4fa0c3e6457c828e0fb119a941ef5cb2c237fb059aca1189c188158d79cb8e4d3674bcee6f053317003e6d642e7ee8ddc96a122d11642d3543bd5676dfc06477694f88b3931fda27f9cfd029bcea629b9850d12001d5b634081115086768e543a5f219f26fe97f0cb9c3ce0e76fd0bb4ae130eaa42b631f262d070d4889db4e59f99862412e1579b08c41a31ceed554c2fa57f4cb8f8f77bda7e814cc1e7e18eebf66ec07e845c28fe8c67fb0fbd1b7530112c31218f246b47aceabe9549cd7d4ee1d5af5fc462dad1ba8b8fa6050b85a07bf63594e40d022242fc9af3ca5b379d8d21e3b25b234008d2039dfbf356fdfd4ae570898934c4d01d55f02d64fe85cac0063cbd8074162c0f9bc9625b95a5f7c2cd2cafb3b5c91d94b91431f6ce6a22490f21406124c07d4cb4339196ab30ecc7c3b250b2af6c2cbb8106ba534074dddf0259035f5d395ad7cb05f8db92293440f07cbf5f2068739405edffe5ff45c4c9eef0ce27678dbe8d1b800c19ba07f9109d19922b0235ac208e8c01cd622aac52c0dff434cb8d0b9f79bc049ec8622e97cded142b8c805e9792f6323bff995eb65af4a1485257cca0bdb13fcf45220e73924f959c5a0aa827bd1582366fbf3325c8795647f882adf57b82239b3748fc3ece21b44f309f56f105093715bbaeef8006b2e80ad2cf96592129a6c2092301fa4cbf5daaaea5273fd446b127cf44243c8c3e548382da5f67b6fc80f019c238ed6caa2b98558fd342de3e557b81eb486ee3e416b4b6a7bc957f435e9a7b7a9385893e61123745807cf2ceef81ccd80b9ff6a456875ef0bb3a2d72bdbb72fe8dc749caf803821a1ac4c4e8058ccae1c9f82736f842ee2f1a8d3d47dc5b97c27cc0cf88bae0b12815d31b944b9a66f17cb5fe0d1ec64203741985bd0beaaa2b94be80d243226a0e4a6116587d691632b2b64a600def5385502fc04fe195d797e930d65cca577d5b68e1a9241a2413eb152765023814a814ce763534128eea1dd242d00b30873a5a531dc9031fd780d6e18262e1030bea38637022d4f68d62ea536fcdbeaadf86ad4d18a5e3108850f41970bbcb44bad2ad328f3be303cd9cff56506eadce78efca874a254c454e6e68a40d9ccb6f8e72264a5ed28443610022673fa477c923b6d8eab92f730ebad11807b5683c9a85533f188419eec1457fca22f00f7f2d8a4b2e0e112b5ad6bb403dbe9403064a6d19af2ab58d26449b32c2a49625d6e9ae0b0bc4d3a26f3eabc6ba0c8ce20feadfa12e74ca06ad2bf7ca52b93f674fbfce336ebef51f3f114b5e880b97178331a15bc4e616670e340f924a72a2320ac02d58c71a551cbf34e1da9b61d720a58331e43ce88362b53ed42c0cfbb340f82e3b4954355d03370175b896709321c43ffc1546f9cddacea2e83aaf6dae6f770d8f8b49d0f6675510f526c0a1ad636e07fc36524e0bcae5b256ab5f68acbf51679fc47ad4efa4bd1a738cd0251ecac4f5c6fb9cbf02cc49e87d976aa6732e511b9f2dc8174f67099afe0ff0a36df18c829bf24d320be2d63617ddd2135475c6e6492b7b7feccbcb15908aa407ae2f6402b065aa95c50dab4bf07e792a2b3f2f9ea0fcedf208f3e2a2c6867b31877b3b8aa056c8a043170009b9255a4095ca4421212421aa6698f52ff7cfd6f2afe4bed61dbfeea9ec67dcfb8349ec4f54611086b4bc7588aaff6d9bfff05b4399d92b4caf5d7254589cf91bcca3565c3060db853459fa0f0418ad50a4c6a8c2fac05fbe703ebe6eba1a0e21aca14d55f06565e6aa0b60a710255737b81aed65b80f7d676015db78904548eae78d0ff178092dc685579f34f730e40ac542c086ceaff76510b393f10a24b74c04915f12f529fb4b30204fba8905ec21685378ed0954315c05d891383a245d97fce9635f702c9b6c08494065d7eef35f860cf743ce20b980b9f65d0abacfce98b290e0f4755cfddcf17aecf5bb1153faba582286c7f6aebe10c6464bc48d3744a2e9edbad5ff445e41784081d0b725badbd12d0fa8d165c975603ca6c4545a3baec2f1c7012e1248214ccd00d4473e983cc10780535bac7da063e62b16d14408cdc194f2686fc2da57ba2146f6c8daa4e187afe23e404aba2662cec416b143a51af77fe729497f2df1dffdb38dfa2b597f34ace46d749707426ff1760e1e5966c9038c8f98c2d0aabf27303194507a29c583efe7111d8d5fabc1402296ad6eb836d23d73c7c6dd32af64e9f1f441252d049b01f334ba69f860761a1c9458a7d45b17c1275d8061c1e84ea8879f8f3553bdbd8a10c3df3398a35a974c2fbda14a0be675a4022088584534cb4daf78e9422582b5febf3952c3d88e39efc104f9d09224fe95b518124eecd9de96b2ce273554938c5bac6281e0518eaa4c63a7ed3d98aee582856fb8aef5f0df28718f6aebc653c9a0f66631c2adcce2920e80922e16b5eb33c083f94c7a8d55ef1ef9730a8f49f21c6da3fa62301f5b655df7d294ca3bc745ad82626bdf480d355d0ce13b74f1e92fcce81f9dece088e91b6af6afa36b8301457dfb4bc3b7f79c757cb9585725462669c40f7f08317b89ce8e6b47cc1cdf2047eca2c1b9a5d1453b43fd137fde94373426844e716dd2a40b0363d1ce51f1f2589aa11303c01e2a42ec8f60ee487d7a36dae7c1d6c3c739cde87a1ce0cdae021af1a5b9f0428e8f7c13c7668ccc6c4353f985980cd825d57167c4eed38495aa28bb8583e42749c3f5ad2562240a1108e9e77417277d1119bb1065241eb7f3fc8748ce892992f3823a570774498ff1b4a23eef71a452fa9af840281c7ca6483efdf343233c9ac19da4617a4c86383cb3296f410a13c0d91a7c553d16f37d03c81bb2023cdb71a12b1c82b2ad66f74b7017134cd7cb1beed18ab74890fe65b8eb5dde3041e9b9e05d3059023271abecd75cf1fb9bafaae20e6dba84871aec18ae962c9f673929777251a9324dce7cff1e6091a7c924876ae7f77fe9180affc6be80b354762d6e21609e375ce2057a355e67f0a1e383f5372d499c5259637bd8163c0685a7e806f55c8a481140a0d0b5c020a750517a3065243cebccfd38ca403409302c35fcf5ca1a179694c98ad578ca6591b3e6f9fe44dd1b9d82817ae6316e884aa95c66cf05b1a9f06323e2a9c8b6dcbbe071e3c1de2340dba1125abe33f3d42a9735a570a0aa13e2834d9f31a5077850b71bb2768983a29e320d7185cdf1cb3bbd2de3f1578be9a48b92aa80d8b02a9c9353ca86bd04d30abf4a5b4b7ad0dfcfc141c7ab446060f4a30ee3c706ae518fa0de0ecc4ceeddc38719e85cdeac5a563d7529059a0107e1c414d00d088652908fcf87948ed46a233dfd8895c1ada0c2fd861131bdc7f4d8ba5d09f42e92a6a0514056b6583ccb95e7ff4e897c7adc623b659a7b91ada903f5a97faaa141da4c868dd86490c3eaf68fde5c7ff0fdadc36909f64b75a1683aff4cdbcd01745b8e7f9da3cf99d61d7b68631a7bc8d16406a5b7a6182986caabfd70caf7606849700c7f202e09d399230d44f190ace2a88274d0b472505b3707422edec70186ec5ac2a30ecb461111d8d056d235dccdc3fed39b43fb3a7e31c8005717838db7d94053e4abf50a129c4fc8aa499d7c5ff8f925bde6be09f75cda7e09da4cff1d0fcf406694c2463da189111fb42b0603a294b2dc79cf69f05058100e512410071b9b605036021f165744f8b891d4d5233954cc6a4028c0ab571cd0a3f5d405d8c0ed9ac9a20003477f3d68b8c3c2df8c70d7e13bfa37138995cec758aa3a61d86cd7feea107d89ff672d8a0f959859376e79b3bfb650d7e16c1d435e5a5b9e518e548c8e9160336c2051520a4ba28b8227af05ac0cc430380d7a5e6edd50da2fc106e928acde4572221c0561eca30d9d6fce17f486168a931bab63ad14a651cd8af9d3ee0119978c4604047bf81efc0bb7198fbf99d8e55ea8a6a15b2c4aff415f77e4cd9987d9551bb34a7a3d49f21602829cbab4b0a7b302ff72aa541254591bd96b097ec5e149d3fdecd9c80d3fd447a604e6d6356c591f24d6b0515a337f5359b0655302530c8e836582931f16db43d9c943428d8e08bae2d6a238698500c0cca897f1fe2d93b517672cef6fa4e5a8812f6174e660643c224b4c80c971311b10b5ef074726f04d1de7afb588e7bb2eaa4c28efaa7f90e12c415b1c9e1eabc8fd493a5445254105aa1acbf31c083e148cda9dc04e282844dbaf5cfe7934312279f05b636401fbcdf57aacf859cbb692fc6b84a33e8bee7517c6850c8de5e8e9f55bf05916d97489ab89c02d05a3fe90f402ca3a76baffc64650e048f992579936b6328f33ae03d91109bbd6f41c6447052e8be5c30ea301192414729db23b870e02bde8be8341d70f43643b00f5fcdb8faa1f7bce201850162ccaa0ca942c2e0a4a12b11d477e31ef7ba9e62e28f67d27f4f3608d8185d58fda7c0621d6ef1b97be74394d9f2a57838d2040b5c97df9e6898e55fbf6896d33204178ef8cb4b5e8e8c424bb2302ed4d42007786cd13c5ceed2fbf713876485e2b38d4c59003578efa822a0fc1d6d4d9e4d330f2c257ff95688a6315f07c5ed64d109ff9f5c82cae557c9dc395a765ad94721fde05a50804b4eb9377ee96ca954e25e75932378e90e67b012c3df21c00275c1d65c553619cb5124030f84691cc09e41bcb5632521c82942b6ee3db5119509b82d37cba079ee3c2f7c06bbc7e377fe70bb124dd6a312eda692a3531c0077a11b7803a220a9f0389d372519fec3bbd580b8cce7ff5ae7eab38125b671c559124e99cd54c45becae4eb977bef25d24ba7f4e670876d61f48e7b39e39d381f0a18c6f837d972b8527225e000a22aca2ee132940ee55664ef08543645c9875a0ce84fb8c3d45bb9cebff991144326c4fe935aaa05206d75334132137dc7faaee0bf58eaa1d4dc21d23d10b9177cb9ab7c1d3db5f28224a82c598890a9a593c6023c7f44df9d4a5b10c963fe28d1cab1f9143c900f21b6bef4bb33b9683bb4b14504aecf1460e1dbb8d62681bd1e1e5e5c43fa3b118d50abd70a576572fef1ac98fd01240a6abe2db942e2539628b601764e14b7049e33f8fa4727f8bc39", 0x1000}, {&(0x7f0000001640)="7741d668b6d9d5b5d218f419ab48868c869e9c682317658f5ca0ade7db4b76fbea5daf8b5e74f878b822f31222ad6c35da1e7cf46f83fcf15a17999b54012f8e219c104ab88d9cecda5289dde4b65d347db57934bfe774763a30a921d8b26e2f69e22791e97400846bd7744f96e0b325adb3e4e4f2dfa5cc80dc40104633a26de4c182a18347626994ceb3985356d42be6e02fd9bd6c9a950c8aafe46fff46ccbcd30633ec68ae3681557e1a16d9b4077b2b0cf89486332034848701151f0cb1719b09a4d5efa3edb32c6b30b199dfea19c93ed26cefdc5de3e5e75791f803318c36bd93", 0xe4}, {&(0x7f0000001740)="353a2047e2d0d43ebc38f7f7ec371813a9570678fbfcd64a74952c195d0da3e8e38ebe158f86ce001dccd1730ef647c051b7ff56e735ac70e3a9ec63f0cac0cd78d08d98f478a8545b17b6b3e2de7af68da32705ce643cfe08b8ad9a36fb0e67bfe81b8255198c80169ad3c1edb4e9bc77550488ba9dec316eebfdf09b3e5eeafe49ac82480e146fc63af6b0a78798f2acbd7e33dc6beb71d70e4a88312ab0aa89b817573035197e4962ca310a0ee43cf0e4ceb251d17261", 0xb8}, {&(0x7f0000001800)="18084c75be0dbaec8b520e3a2e27ff51e1eb895158b68ab79a48a170e59d5733efe0544e55f21ac599ca27da1da00c1ba12a114a23e51fc7aa322a5f7a9e42036b13af8dc1196e9dfd64103d74206e42293fb7b94e12becbc9ed7597d77b3c7cd695379228dd0d562e4ac6adcf5fb0263c3a13cb97a31648275143371304cb9be6d4efd1ff977838bc74069308b3dee5fdf1407598d8cf360096e52541525c3bc01da10b34396ff7be2d8565b24c1c70b2396af309aee6e1d7bc071171f858713b78c78a9f8e904a1e33032478b80d886614b3a4ee479ef7935e93840f5a23", 0xdf}, {&(0x7f0000001900)="1b8011abceb090558ad8214bf58a", 0xe}, {&(0x7f0000001940)="26a104a151b2ac3264a7a0e67215e998abd016436eab97082ea6dfa26b14d7efc0ecf83e630e63047c6a970a27e2cb608ad5c38dff073128549593503c18e1c0f91bd5ce5ad5dffdc94702618fbd247274b4b7b3d35ffe89ff8a617f71dd28804a23cea31d816d63560a31f4757515a865efd0673ce5dfc62a9f52a748756a1c6ab35d6294574369d25e41fabaca112ab7b84bd08178d8eb22212cce0a6e52c3cb2fe27c5f8f4e6c0ac495e99b780e13f8abd2f8", 0xb4}], 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ac0)={0x0, r2, 0x4, 0x3}, 0x14) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x24, r5, 0x306, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x10) pwrite64(r2, &(0x7f0000001c40)="cb39b27b4173a860c9d35422261bcb2949833a9d92dc93065236dabe35a5c1ac1c777343a58ebace6a6453369342c0dc731c9a2ca4ddd96d43916a83d3ed268b0bf97b13aacd9399cc08af65988565253170ebec7c409779299e3e58ddba2e7090a7917e0982d661ff67001b7a8702858650acc7f6869729c9b9715ccd23fb5f7f1d87736b5d9ce5dc5c4d9cd8127bb4a33765c1642f391e1de085e49d7f7ac3a08ce12b33d712", 0xa7, 0x0) flock(r1, 0x9) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x100000000, 0x6, 0x0, 0x7, 0xc, 0x0, "8f4a5b39e7e827e507a262b8a76c59ecf6d5cdd032483a3c62d1f56e6bbd4b7dac9101055a44d5fd4aacc92c2d10cacc6bf7e0afddababd3b3ae20275372e3b2", "2c6dfbf3aa1b43a7b9f725225d2d391f40a187ce668f0fc9eaea75ff0543d316674b3ee6222e1bd12169336f2525a0d3bd70a01bfa1ce27d3277d9c5a80731fc", "ca8fe7546f69ea8a379641c992740d1229893065a2c18a3dc4a97a8f33addbe6", [0x800, 0xf392]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001e80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001e40)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000001ec0)={0x16, 0x98, 0xfa00, {&(0x7f0000001e00), 0x3, r6, 0x0, 0x37972b8b03cc715f, @ib={0x1b, 0x8, 0x9d, {"c79b9943bec76f596d39d7b8cadb0547"}, 0x4, 0x2, 0x4}}}, 0xa0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001f80)={0xf6d, 0x7, 0x0, 0x0, 0x81, 0x8}) sendfile(r2, r4, &(0x7f0000002000), 0x4) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000002040)={0x10001, 0x0, 0x6}) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000002080)={0x8, 0x120, 0xfa00, {0x4, {0x2, 0x5, "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", 0x5a, 0x0, 0x4b, 0x1f, 0x1, 0x5, 0x3}, r6}}, 0x128) 03:22:25 executing program 3: socketpair(0x8, 0x8080e, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000080)="44627b5fe4c10ed03437d3b6ab530a55c0f2586337ed52f48dab29b63bd75c2333064260937c79518b58f74d5baf342a0317eb895ffea35c4570c34b31bc654a9ab3eb1f6ffa4cfe7303e9d0aeff6149dbadc18361575c433b446157a60a5ee97880900f3718faa13a1f11b3a7cd4b01b2cc12b537131fdf8ea5c8cc2bec2f7abbcb4f077e132539268b61479d029396b1b648e49838acf6dec7cc014fe0698e4b98aee38685a7e28c6f7eb2bc1ee2468d2abe5ef25bb4d85836c0bde4d929d58350f0b259ba05bebc59b188fb8f9ef0af423f0e3727a955daa4ed21fa5865c543198c10d3c1d965e5589b4cb3", 0xed, 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x3ff, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000380)={0x4, 0x9215, 0x8000, 0x0, 0x1, 0x100, 0x7ff, 0x0, 0x0}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={r4, 0x1}, 0x8) mkdirat(r0, &(0x7f0000000440)='./file1\x00', 0x0) clock_gettime(0x4, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000500)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'irlan0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000580)={@rand_addr=0x9, @broadcast, r5}, 0xc) r6 = creat(&(0x7f00000005c0)='./file1/file0\x00', 0xa9) r7 = openat$cgroup_int(r6, &(0x7f0000000600)='memory.high\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xde) openat$cgroup_type(r0, &(0x7f0000000640)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000680)=0x0) tkill(r8, 0x24) bind$unix(r6, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socketpair(0x18, 0xa, 0x8, &(0x7f0000000740)) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000780)={0xffffffffffffffff}, 0x113, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000800)={0xf, 0x8, 0xfa00, {r9, 0xf}}, 0x10) getsockopt$inet_dccp_buf(r6, 0x21, 0x2, &(0x7f0000000840)=""/179, &(0x7f0000000900)=0xb3) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000940)=0xffff) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000980)={'nat\x00', 0x81, "0b29abcee60dc1d4c8bf243564b6dcdf6a55c12041feb870a32becf83467816066603c5bec7fa409f03812d1e19e89480db8d4da0f8f96130dc9b087e466770651341108e9fe220d6cfc7a732bf6e9813f30f501aa88d75bda9647f7ea86a3a475e63f437e883b8be0f9c459134e669e6113644ecfb502cb66ea6106736885ce24"}, &(0x7f0000000a40)=0xa5) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000a80)={@remote, @multicast1, r5}, 0xc) shmget(0x1, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/autofs\x00', 0x4000, 0x0) 03:22:25 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x4}, 0x7}}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @mcast2, 0x8000}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x57, @remote, 0x40}}, 0x8, 0x1a, 0x401, 0xfffffffffffffc00, 0xbe2}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0x6cd78bf000000000, 0x2, 0x4, 0x7}, &(0x7f0000000300)=0x98) write$FUSE_BMAP(r0, &(0x7f0000000340)={0x18, 0xffffffffffffffff, 0x6, {0x81}}, 0x18) r3 = epoll_create(0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000003c0)) poll(&(0x7f0000000400), 0x0, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000640)=@buf={0x9a, &(0x7f0000000580)="e72811e4fb6ebcead1d45372cc68eaad70d64a9a6c02ae9d264573bd7ecf2675bf87b885037f317b0557730960c507221fed81c9c88c0d28e2dd6147e8b845d9f3dd3a4619e6c3ea3dd67c2fa055c2614b370bdd2073d45abf0ef22297a19adee3e502902bf34ebf8bf83a875cb49e3490b4a9bd52ca4db711c902e4b04b56efe525c50bcc0c8b8ca556b76226a562e5ce29c69d72ff4a95a9bc"}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ppp\x00', 0x8040, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000006c0)=0x2002, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000700)={r1, 0x8001}, &(0x7f0000000740)=0x8) uname(&(0x7f0000000780)=""/157) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ppp\x00', 0x4000, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000880)=0x3, 0x4) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer2\x00', 0x501001, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000900)={r2, 0x8, 0x3, 0x1, 0xfffffffffffffffd, 0x3}, 0x14) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000940)=@generic={0x2, 0x2, 0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000a80)=0xe8) prctl$setfpexc(0xc, 0x100083) arch_prctl(0x1003, &(0x7f0000000ac0)="c587a39ad50afc5e175882d6701d68cc8166a50d54b38b7777e8014fe513cd951100a99ef429a7b7023d92d051b129e50b1fc93289dc2dfc527b56c8a4c83551a15efd4820428ed86515e34a2164c9907251f1d9") getsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) lstat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getresgid(&(0x7f0000001180), &(0x7f00000011c0)=0x0, &(0x7f0000001200)) sendmsg$unix(r8, &(0x7f00000012c0)={&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000c40)="a54409afd33d286e6b32f5a0d8de25944579e7d83b69de3a41c44e096fb6334db69ba4031b1ffffe644ff0d04fb25f72845897444ec0352a849899e93ca4049b6544fce17d225155be5c48ef030e02364d5aa56cc48619e7f18b184078d020ccf57a5378289980d4d49e4b6d7c456657499834906d7a9bbf3a9ef5e767f0cf7e7efb4a77444cf3799896d47232892bd3048f7fb1881e0363aee90d9289cc858c18098ef620e8fdfc6bfd815d14507f9a07efd1afdb5aa239e387ff3b125ffcdc306f0a98cb10a9f65da0afb87c82beb4c78dd382e9a926fc1e0c3a42d92f7343f8c94cb190bddf32dc", 0xe9}, {&(0x7f0000000d40)="0c624ed6e8692912b4271845314a1b6c719b3574bc6d75fba975aacd5cc840cfb14ccefdb8ce0aa721d388be172878a325205e8a3eee9d0467185f5b96fca21ce611f8b5417a", 0x46}, {&(0x7f0000000dc0)="593e50350ef43ff3b994b052378a7859ed4791ad01c98c84aaf7271674fa513d5230ee91e4542c370d3575279cd909d69d2d2839026df3082dd1291a75744784cf2f79bf14b676d55f9fc557701e028c87ff3e51caf2bbc70b1aa79c65374c65c4eb2f76a5dae82299837f7be028be7bc23e0774de5b482701675a4c9ff9d328cf9e8d9960185652869493e824ff62", 0x8f}, {&(0x7f0000000e80)="5db52037afb2f6f6d015c3b8e8cf5ad76b775d06d0f9a31777e9dea9efd6af30c996f31737a1f188f51a69e7b57d1123853f309d9fbe", 0x36}, {&(0x7f0000000ec0)="26cd7cf7a7c527c2e32574c32374d8c7450e1f9ee0b4947300e5a46ecb04c824c65d9740f8c3318506386a067c8a3542d45f536694d969503455ac50cb8868ad3697dce7e21d79c069bdcf441f7990dd", 0x50}, {&(0x7f0000000f40)="f39799a4b81a1b8c6ff89c949c6b1f23ce8e65c09b", 0x15}, {&(0x7f0000000f80)="2c0a5ca27bee0e741573b4d86fed880bdca93c7a87c4bf79906683cd93c8b0e4052834d2241eefb46cc2c2b283d7ebb32f60cca67fec9847b46fb619aa8cbf94ddf725cfd1da204ced4494a92f938c1ed41847ce5cd49f17226ca9a3732ce4cd959cb9dede2c1cb46dddd71871fcaa089ea0827575cc603bfc34c3d370014ccf385a25761c", 0x85}], 0x7, &(0x7f0000001240)=[@cred={0x20, 0x1, 0x2, r4, r5, r10}, @cred={0x20, 0x1, 0x2, r4, r5, r11}, @cred={0x20, 0x1, 0x2, r4, r9, r12}], 0x60, 0x80}, 0x10) 03:22:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8282, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/178) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000140)={0x800, 0x57f, 0x0, 0x7, 0x5, 0x6, 0x1000, 0x5, 0x26, 0x3}) socketpair$inet6(0xa, 0xa, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/243, 0xf3}], 0x3, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0x0, 0x1000, 0x8}, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001380)=""/4096) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000002380)=""/250, &(0x7f0000002480)=0xfa) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000024c0)={0x9, 0x5, 0xfffffffffffffffb, 0x1, 0xf37c, 0x80de00000000, 0xffffffff, 0x5, 0x7, 0x6, 0x7ff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002500)={0x0, 0x9610, 0x2, 0x1d75, 0x40, 0x1b0, 0xfffffffffffff948, 0x80, 0x0}, &(0x7f0000002540)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000002580)=@assoc_value={r4, 0x10000}, &(0x7f00000025c0)=0x8) r5 = syz_open_dev$admmidi(&(0x7f0000002600)='/dev/admmidi#\x00', 0x0, 0x8000) fcntl$getown(r0, 0x9) iopl(0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000002640)=[@in6={0xa, 0x4e22, 0x8, @local, 0x1000}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x1b}, 0x40}, @in={0x2, 0x4e23, @multicast2}], 0x58) pipe2(&(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$VT_ACTIVATE(r6, 0x5606, 0x100) r8 = syz_open_dev$mice(&(0x7f0000002700)='/dev/input/mice\x00', 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002740)={0x7, 0x2, 0x7d94, 0x53, 0x10, r6, 0xef}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000002780)={0x0, 0xfff, 0x1, 0x8000, 0x10, r8, 0xff}, 0x2c) ioctl$KDSETMODE(r6, 0x4b3a, 0x100000000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000027c0)={'bridge0\x00', 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000002a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002a00)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000002a80)={0x13, 0x10, 0xfa00, {&(0x7f0000002800), r9}}, 0x18) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000002ac0)={0x0, @rand_addr, @local}, &(0x7f0000002b00)=0xc) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000002b40)={r10, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000002bc0)=@add_del={0x2, &(0x7f0000002b80)='nr0\x00', 0x400}) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x0) 03:22:25 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x5, 0x6, 0x8, 0x3, 'syz0\x00', 0x37}) r1 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='syz0\x00', 0x0) keyctl$instantiate(0xc, r1, &(0x7f0000000140)="99b8f9b211b57f4a4d404db200d45573b1b2775ec8217fa13a9059c648d255f08469310e70a81a1fbb4d1d2a6333c235de1aa2d80855981ab45d8bce6cd902dde4e8fcf1952fbdfbbb4fc8553f31293ead0e757a465b4e0a281b699ea59a2914d8c765b74d236b03c5c572fa5fdf7b", 0x6f, 0xfffffffffffffffe) r2 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r2) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r3 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2f, 0x40000) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0x400080) ioctl$NBD_CLEAR_QUE(r0, 0xab05) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSYMLINK(r4, &(0x7f0000000280)={0x14, 0x11, 0x1, {0x4, 0x3, 0x6}}, 0x14) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000002c0)=""/100, &(0x7f0000000340)=0x64) readv(r4, &(0x7f0000001480)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/8, 0x8}, {&(0x7f0000001440)=""/17, 0x11}], 0x4) write$nbd(r0, &(0x7f00000014c0)={0x67446698, 0x0, 0x0, 0x3, 0x1, "80d98bc4f0cb52c4ae2a815387561ad7174e09548e799f60a02dfc7103e08ae6ed963ddfdef18dd0d9560efe870c307e580fd17b3b16507a2794cfd4f75b4d053a8a4f1eee92f59991563ce11b94c7d2a1db5fc27594fdf67a81b2bc4ec2b6503e505ff339f163590c41617605e610608b0b0260afbcc8667fb4aec7d701dec7"}, 0x90) syz_genetlink_get_family_id$fou(&(0x7f0000001580)='fou\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x6d78178f, 0x81, 0x8, 0x2}, 0x14) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000001600)={@rand_addr=0x7, @local, 0x1, 0x9, [@empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @multicast1, @rand_addr=0x2c27, @broadcast, @remote]}, 0x34) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001640)=r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001680)={0x100, 0x1, 0x800, 0xc6, 0x8}) syz_open_dev$audion(&(0x7f00000016c0)='/dev/audio#\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000001700)='attr/keycreate\x00') ioctl$TCXONC(r5, 0x540a, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000001740)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000001780)={0x1, 0x0, 'client0\x00', 0x0, "c475d51c86f730a3", "c67db6b4743bcbe695a763671dc2254490d0e53c181536ced0e7b2f578851d6b", 0x2, 0x5}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001880)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0x8c, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2aac}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000805) rename(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='./file0\x00') ioctl$NBD_DISCONNECT(r5, 0xab08) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001a80)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getgroups(0x9, &(0x7f0000001bc0)=[0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xee00, 0xee01, 0x0, 0xee00, 0xee01]) fchown(r4, r7, r8) 03:22:25 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 187.017537] IPVS: ftp: loaded support on port[0] = 21 [ 187.062299] IPVS: ftp: loaded support on port[0] = 21 [ 187.065089] IPVS: ftp: loaded support on port[0] = 21 [ 187.093771] IPVS: ftp: loaded support on port[0] = 21 [ 187.094434] IPVS: ftp: loaded support on port[0] = 21 [ 187.102441] IPVS: ftp: loaded support on port[0] = 21 [ 187.120664] IPVS: ftp: loaded support on port[0] = 21 [ 187.125853] IPVS: ftp: loaded support on port[0] = 21 [ 189.431299] ip (4934) used greatest stack depth: 53528 bytes left [ 191.279709] ip (5033) used greatest stack depth: 53224 bytes left [ 192.213023] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.219522] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.269999] device bridge_slave_0 entered promiscuous mode [ 192.287770] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.294293] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.328870] device bridge_slave_0 entered promiscuous mode [ 192.376835] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.383445] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.420233] device bridge_slave_0 entered promiscuous mode [ 192.439672] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.446154] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.477036] device bridge_slave_0 entered promiscuous mode [ 192.489670] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.496193] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.516535] device bridge_slave_0 entered promiscuous mode [ 192.532283] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.538740] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.561080] device bridge_slave_0 entered promiscuous mode [ 192.577064] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.583545] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.615078] device bridge_slave_0 entered promiscuous mode [ 192.653871] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.660329] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.687534] device bridge_slave_0 entered promiscuous mode [ 192.696296] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.702754] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.713920] device bridge_slave_1 entered promiscuous mode [ 192.725537] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.732031] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.744345] device bridge_slave_1 entered promiscuous mode [ 192.754182] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.760697] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.790788] device bridge_slave_1 entered promiscuous mode [ 192.808494] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.814960] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.840849] device bridge_slave_1 entered promiscuous mode [ 192.870030] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.876498] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.905038] device bridge_slave_1 entered promiscuous mode [ 192.919466] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.925947] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.943041] device bridge_slave_1 entered promiscuous mode [ 192.959385] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.965883] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.989019] device bridge_slave_1 entered promiscuous mode [ 193.016547] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.023111] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.065706] device bridge_slave_1 entered promiscuous mode [ 193.083465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.092230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.104342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.112271] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.161709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.208775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.309829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.359197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.372473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.383511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.416953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.433748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.458722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.521078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.607845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 193.676033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.255665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.360819] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.385317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.418868] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.488303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.503307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.527727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.586863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.619980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.640309] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.715327] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.738438] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.809818] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.857996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.869812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.906846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.934136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.941138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.966885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.973848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.017070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.024037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.072872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.079860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.157178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.164309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.203063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.210099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.231172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.238516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.272962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.279913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.301953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.315339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 195.326728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.362969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.415143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.423922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.457433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.469180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.509493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.518821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.545155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.554343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.561271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.581838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.681750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.688771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.262740] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.290791] team0: Port device team_slave_0 added [ 196.366670] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.382701] team0: Port device team_slave_0 added [ 196.435995] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.460494] team0: Port device team_slave_0 added [ 196.474062] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.487992] team0: Port device team_slave_0 added [ 196.532749] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.559308] team0: Port device team_slave_0 added [ 196.576930] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.603102] team0: Port device team_slave_0 added [ 196.620255] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.630481] team0: Port device team_slave_0 added [ 196.656747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.670560] team0: Port device team_slave_1 added [ 196.694148] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.712800] team0: Port device team_slave_1 added [ 196.738690] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.766750] team0: Port device team_slave_1 added [ 196.784989] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.808359] team0: Port device team_slave_0 added [ 196.829477] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.869892] team0: Port device team_slave_1 added [ 196.883420] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.898010] team0: Port device team_slave_1 added [ 196.920947] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.947793] team0: Port device team_slave_1 added [ 197.007803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.032691] team0: Port device team_slave_1 added [ 197.047119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.058061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.066654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.088153] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.119166] team0: Port device team_slave_1 added [ 197.136103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.150126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.192662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.217445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.245482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.275947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.330289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.337406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.346389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.362132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.370348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.393964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.414299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.422247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.429206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.438007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.464713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.473522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.493530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.501990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.517213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.536021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.559734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.582095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.614922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.621917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.637551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.668527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 197.676767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.694841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.711892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.719573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.746885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.787881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.811280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.839998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.864643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.882231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.891797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.924937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.932951] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.946967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 197.956994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.964577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.987523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.009831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.029393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.059957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.091553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.100910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.110713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.127033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.134317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.141867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.153741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.170439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.187720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.222237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.230151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.245916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.267208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.284812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.305200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.313204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.321396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.329995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.365997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.392543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.415333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.446295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.469934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.492288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.518970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.532445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.540679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.557446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.565261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.575005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.618472] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.632201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.640240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.653380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.682844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.709139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.739070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.747297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.763094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.804996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.848827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.872896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.928164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.941272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.976990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.765248] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.771777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.778719] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.785193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.854371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.860967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.976499] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.983008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.989916] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.996375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.043410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.052962] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.059416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.066287] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.072737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.132174] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.174698] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.181191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.188045] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.194501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.238772] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.246106] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.252558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.259470] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.265917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.315159] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.346208] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.352685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.359549] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.366039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.418136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.477485] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.483984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.490928] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.497423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.558246] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.582924] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.589374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.596242] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.602687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.678334] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.898762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.911759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.943174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.973969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.997386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.006555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.015914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.774028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.100855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.124780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.206215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.311421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.353717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.386133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.676794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.050095] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.251783] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.340709] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.399914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.462742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.625532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.666671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.843178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.275928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.282248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.302434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.368394] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.374775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.385469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.546807] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.553131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.567196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.681570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.692736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.701217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.741114] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.763306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.795708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.834321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.853230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.886882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.956293] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.962662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.977723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.145557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.151925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.166928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.596905] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.655807] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.818783] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.850524] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.985760] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.101958] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.184068] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.462201] 8021q: adding VLAN 0 to HW filter on device team0 03:23:06 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) 03:23:06 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) recvfrom$inet(r0, &(0x7f0000000840)=""/4096, 0x1000, 0x0, 0x0, 0x284) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x52, 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x8004e20}, 0x10) 03:23:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="0a5cc80700315f85715070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) unshare(0x20400) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4) 03:23:06 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:06 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 226.918464] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:23:07 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:07 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) recvfrom$inet(r0, &(0x7f0000000840)=""/4096, 0x1000, 0x0, 0x0, 0x284) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x52, 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x8004e20}, 0x10) 03:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000003c0)=0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) openat$cgroup_ro(r1, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) getpid() r2 = getpid() bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x8, 0x8}, 0xc) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6cff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffffffffffc, 0x7, 0x1, 0x949, 0x5, 0xa0, 0x9, 0x6a6, 0xffffffff00000001, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x79f7bf0a, 0x0, 0x1, 0x0, 0x0, 0x9d8}, r2, 0x9, r0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2000000000000000) 03:23:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec94242032ff07000000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/126, 0x2000027e}], 0x2, &(0x7f0000000740)=""/231, 0xe7}}], 0x1, 0x0, 0x0) 03:23:07 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x16}]}) 03:23:07 executing program 0: mkdir(&(0x7f0000278000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000abe000)='./file0\x00', &(0x7f00004daffa)='ramfs\x00', 0x10, &(0x7f000032a000)) r0 = creat(&(0x7f0000015ff4)='./file0/bus\x00', 0x0) r1 = open(&(0x7f0000002000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000aef000), 0xa8) 03:23:07 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 227.284462] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:23:07 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x280002, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/248) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xe, "c24e6dfd4d48b094b861f4d120d5"}, &(0x7f0000000180)=0x16) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r1, 0x100, 0x8001}, 0xfffffde4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='bdev\x00', 0x0, &(0x7f00000000c0)='/^bdev\x00') 03:23:07 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) memfd_create(0xfffffffffffffffe, 0x1) 03:23:07 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) 03:23:07 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:07 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x8c}}, 0xe8) write(r0, &(0x7f0000000000), 0x120) 03:23:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0xffffffff}) 03:23:07 executing program 2: socketpair(0x0, 0xb, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000280), &(0x7f0000000180)="a4", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300), &(0x7f0000000700)="848432503e1ac2bae9d92144eae8978bd4f065eadead9ca85fd3c49e925de4007488bf80a2152f25efb149bbddc4493ad0c625b2e5cfabf2f745b9a6586673f693fc49f3b2e10e38afb34f9befefa874c9e7033ccc0e967bec6de22d59ece236cb34ca95781888a02eb796e3342b40b123e5f81ff5e34b907efecba4cfbf634fd3fee4a929cea900837f546dba4cdcc4fe13ac83893eef8276820db8efd0e90729fb71a71d9add945238acddb8375d4b349d571748902d266efb9ab909b8b6e7", 0xc0, r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) getrlimit(0x0, &(0x7f0000000040)) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r2, r3}, &(0x7f0000000640)=""/155, 0x320, &(0x7f0000000600)={&(0x7f0000000580)={'wp256-generic\x00'}, &(0x7f0000000000)}) 03:23:07 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) 03:23:07 executing program 6: r0 = open(&(0x7f0000000140)='./bus\x00', 0x42, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000080)) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x5, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) [ 227.817912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:23:07 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 227.862347] hrtimer: interrupt took 29407 ns 03:23:07 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@l2={0x1f, 0x8}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000380)}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="b683", 0x2}], 0x1, &(0x7f0000001a00)}, 0x0) 03:23:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=' ', 0x1}], 0x1, &(0x7f00000006c0)}, 0x0) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x1, &(0x7f0000000580)=""/175, 0xaf, 0x1f}, 0x0) [ 228.041680] mmap: syz-executor6 (7026) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 03:23:08 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000a00bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000100)=""/63) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000000, 0xe, 0x29, &(0x7f0000000000)="b90703e6680d698cb89e40f086dd", &(0x7f00000000c0)=""/41, 0x100}, 0x28) 03:23:08 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:08 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) getpid() msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:08 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:08 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000080)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000500)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') pread64(r0, &(0x7f00000012c0), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/160, 0xa0, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) 03:23:08 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x400300, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001100000000000000000000000800120000000300000000000000000006000000000000000000000000000000e0000001000000000000000000ffffffff000000080000000000000000000000030006000400000002000000ac14ffbb0000000000000000030005000000000002000000ac14ffbb00000000000000000100180000000000"], 0x88}}, 0x0) 03:23:08 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:08 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)="2e2f6367726f75702e6e65742f73797a300f", 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x8000) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) memfd_create(0xfffffffffffffffe, 0x1) 03:23:08 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:08 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x847, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f0000000180)='vboxnet0\x00') 03:23:08 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)="6d656d6f72792e6d617800700b9882e1c7e6425608c90e4c7de3f896fd7ab964e2d38b2823a783a12d51d0816723c39ae38579ec8fc970d59af862d1fe496eeb84d147f6247a82ef1c4b90b1199948dfc3046104", 0x2, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_destroy(r2) sendfile(r1, r1, 0x0, 0x1000) write$cgroup_int(r1, &(0x7f0000000000)=0x2c6, 0x12) 03:23:08 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:08 executing program 3: pipe2(&(0x7f0000000180), 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:08 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 228.722736] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 228.733791] syz-executor1 cpuset=syz1 mems_allowed=0 [ 228.739158] CPU: 1 PID: 7095 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 228.746379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.755774] Call Trace: [ 228.758425] dump_stack+0x14b/0x190 [ 228.762120] dump_header+0x2c3/0x16f0 [ 228.765968] ? __msan_poison_alloca+0x173/0x1f0 03:23:08 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 228.770750] oom_kill_process+0x35b/0xfa0 [ 228.774995] ? mem_cgroup_scan_tasks+0x279/0x600 [ 228.779829] out_of_memory+0x14a4/0x1d00 [ 228.783949] memory_max_write+0x4b5/0x740 [ 228.788179] ? memory_max_show+0x1b0/0x1b0 [ 228.792486] cgroup_file_write+0x437/0x8c0 [ 228.796804] ? kernfs_get_active+0x183/0x1c0 [ 228.801294] ? cgroup_seqfile_stop+0x150/0x150 [ 228.805959] kernfs_fop_write+0x607/0x8a0 [ 228.810177] ? kernfs_fop_read+0xa30/0xa30 [ 228.814504] __vfs_write+0x1a8/0xa50 [ 228.818312] ? __sb_start_write+0x9f/0x2d0 03:23:08 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 228.822665] vfs_write+0x495/0x8e0 [ 228.826305] __se_sys_write+0x173/0x350 [ 228.830441] __x64_sys_write+0x4a/0x70 [ 228.834384] do_syscall_64+0xb8/0x100 [ 228.838248] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 228.843480] RIP: 0033:0x457099 [ 228.846716] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 228.865662] RSP: 002b:00007f9f34c1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:23:08 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 228.873435] RAX: ffffffffffffffda RBX: 00007f9f34c206d4 RCX: 0000000000457099 [ 228.880749] RDX: 0000000000000012 RSI: 0000000020000000 RDI: 0000000000000004 [ 228.888067] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 228.895377] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 228.903088] R13: 00000000004d7ec0 R14: 00000000004cab41 R15: 0000000000000000 [ 228.911354] Task in /syz1 killed as a result of limit of /syz1 [ 228.917500] memory: usage 2844kB, limit 0kB, failcnt 0 [ 228.922934] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 228.929779] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 228.936048] Memory cgroup stats for /syz1: cache:0KB rss:2084KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 228.956518] Tasks state (memory values in pages): [ 228.961471] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 03:23:08 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x16}]}) 03:23:09 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 228.970456] [ 4809] 0 4809 17552 8439 122880 0 0 syz-executor1 [ 228.979730] [ 7093] 0 7093 17585 8727 126976 0 0 syz-executor1 [ 228.988888] Memory cgroup out of memory: Kill process 7093 (syz-executor1) score 8758000 or sacrifice child [ 228.998930] Killed process 7093 (syz-executor1) total-vm:70340kB, anon-rss:2140kB, file-rss:32768kB, shmem-rss:0kB [ 229.012158] oom_reaper: reaped process 7093 (syz-executor1), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 03:23:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000001180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0xd16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000001140), 0x2}, 0x400, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:23:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4b98, 0x80000001, 0x0, 0x0, 0x0, 0x379b, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @local}}}, 0x90) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200), 0x1) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)) 03:23:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:23:09 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:09 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:09 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:09 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) 03:23:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000001180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0xd16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000001140), 0x2}, 0x400, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)) 03:23:09 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000600)=""/123) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:09 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:09 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:09 executing program 7: r0 = socket$packet(0x11, 0x800000003, 0x300) sendto$inet6(r0, &(0x7f00000001c0)="0404", 0x2, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000002, @remote}, 0x1c) 03:23:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @link_local}, 0x10) 03:23:09 executing program 6: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x2, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000c80)) connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) 03:23:09 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 229.597567] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 229.608705] syz-executor1 cpuset=syz1 mems_allowed=0 [ 229.613982] CPU: 1 PID: 4809 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 229.621211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.630614] Call Trace: [ 229.633285] dump_stack+0x14b/0x190 [ 229.636963] dump_header+0x2c3/0x16f0 [ 229.640827] ? __msan_poison_alloca+0x173/0x1f0 [ 229.645570] oom_kill_process+0x35b/0xfa0 [ 229.649768] ? mem_cgroup_scan_tasks+0x279/0x600 [ 229.654588] out_of_memory+0x14a4/0x1d00 [ 229.658744] try_charge+0x1a7b/0x2f80 [ 229.662635] mem_cgroup_try_charge+0x7c1/0xf20 [ 229.667305] mem_cgroup_try_charge_delay+0x7e/0x140 [ 229.672398] handle_mm_fault+0x471f/0x81b0 [ 229.676703] ? kmsan_set_origin_inline+0x6b/0x120 [ 229.681650] __do_page_fault+0xc8b/0x17e0 [ 229.685864] do_page_fault+0x98/0xd0 [ 229.689626] ? page_fault+0x8/0x30 [ 229.693214] page_fault+0x1e/0x30 03:23:09 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:09 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 229.696699] RIP: 0033:0x46fe6d [ 229.699947] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 229.718881] RSP: 002b:0000000000a3d610 EFLAGS: 00010246 [ 229.724286] RAX: 0000000000a3d730 RBX: 000000000070af00 RCX: 00000000ffffffff [ 229.731592] RDX: 0000000000a3fce0 RSI: 00000000004c27ef RDI: 000000000070af00 [ 229.738895] RBP: 0000000000a3fcb0 R08: 0000000000a44bd0 R09: 00000000004c27ef 03:23:09 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 229.746202] R10: 000000000146c940 R11: 0000000000000246 R12: 00000000004c27ef [ 229.753507] R13: 0000000000a3fce0 R14: 0000000000000004 R15: badc0ffeebadface [ 229.761068] Task in /syz1 killed as a result of limit of /syz1 [ 229.767199] memory: usage 452kB, limit 0kB, failcnt 20 [ 229.772625] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 229.779463] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 229.785684] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52KB inactive_file:0KB active_file:0KB unevictable:0KB [ 229.805505] Tasks state (memory values in pages): [ 229.810445] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 229.819446] [ 4809] 0 4809 17552 8439 122880 0 0 syz-executor1 [ 229.828732] Memory cgroup out of memory: Kill process 4809 (syz-executor1) score 8469000 or sacrifice child [ 229.838729] Killed process 4809 (syz-executor1) total-vm:70208kB, anon-rss:92kB, file-rss:33664kB, shmem-rss:0kB [ 229.855449] oom_reaper: reaped process 4809 (syz-executor1), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB 03:23:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xfffffef4}], 0x1, &(0x7f0000000080)}, 0x0) 03:23:10 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:10 executing program 5: socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:10 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x0, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1047ffd, &(0x7f0000597f1c), &(0x7f0000000280), &(0x7f0000000240), &(0x7f0000000240)) 03:23:10 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x13, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x378) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000040)=""/155}, 0x64) [ 230.251970] device bridge_slave_1 left promiscuous mode [ 230.257830] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:23:10 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:10 executing program 3: mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:10 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)) 03:23:10 executing program 5: socket$inet6(0xa, 0x80006, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:10 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x5, &(0x7f00000000c0)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0xffffffffffffffe1, 0x81, 0x8, 0x1000}) r4 = dup2(r3, r0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000240)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000001480)="6b889ac02dd6edd594fa95c054792c746925639edd32cef60e21291dd2923d742bc1611fdd412a16a6aa4b6d06f42cd1c04558c945984b983a3f9dfb53027e981e550a8f525b485b7e087d1462b31ef6875d5ffcb76bf104e9be2bbcbe9aedd63072abe561be3faa74edff68146fcf9512f686022fbf3e96786984ccc09847") 03:23:10 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 230.395202] device bridge_slave_0 left promiscuous mode [ 230.400958] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:10 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:10 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@loopback, @loopback, @mcast2, 0x2, 0xfffffffffffffffc, 0x8, 0x400, 0x5b78, 0x10000, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400974f00000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14003f6c377755f34b000000000000739bde8c31e74f9d7a5eedfbdba42d0010000002"], 0x3}}, 0x40) r3 = socket(0x8, 0x1, 0xfffffffffffffffe) sendmmsg$alg(r3, &(0x7f0000000180), 0x492492492492856, 0x20000000) 03:23:10 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:10 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 230.793267] team0 (unregistering): Port device team_slave_1 removed [ 230.879067] team0 (unregistering): Port device team_slave_0 removed [ 230.925214] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 231.025909] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 231.089933] bond0 (unregistering): Released all slaves 03:23:11 executing program 2: 03:23:11 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:11 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000a40), 0x8) write$binfmt_elf32(r0, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1f, 0x7, 0x1, 0x5, 0x0, 0x6, 0xff, 0xc7, 0x38, 0x156, 0xff, 0x3f, 0x20, 0x2, 0x200, 0x9, 0xe4a5}, [{0x4, 0x0, 0x4, 0x80000001, 0x42, 0x2, 0x8, 0x3}], "bc285973f8de9e279cf01f7858e5ad5ff42d48f02bc856a88187dedfee00c0cdb5306f098bf9e66083af36", [[], [], [], [], [], []]}, 0x683) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 03:23:11 executing program 3: pipe2(&(0x7f0000000180), 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:11 executing program 0: 03:23:11 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 231.446153] IPVS: ftp: loaded support on port[0] = 21 03:23:11 executing program 6: rt_sigaction(0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x3, 0x7f, 0xfb9f, 0x20, 0x3, 0x80000000, 0x6f8, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xffffffffffffff7f}}, 0x200, 0xfff, 0x1240000000000000, 0x1, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0xff, 0x7}, &(0x7f0000000380)=0x90) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x2, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000440)={0x25880c5, 0x4}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3, 0x144}, &(0x7f0000000140)=0x8) bind$bt_rfcomm(r3, &(0x7f00000003c0)={0x1f, {0x59, 0x8, 0x400, 0x20, 0x3, 0x5c60f10c}, 0x83be}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={r4, 0xc70}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='bcsh0\x00', 0x10) 03:23:11 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080), 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 232.914347] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.921521] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.929370] device bridge_slave_0 entered promiscuous mode [ 232.977339] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.983754] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.991288] device bridge_slave_1 entered promiscuous mode [ 233.036479] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.083245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.217476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.267353] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 233.481575] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.489275] team0: Port device team_slave_0 added [ 233.535798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.543436] team0: Port device team_slave_1 added [ 233.588852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.638389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.686789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.693954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.702753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.746222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.753510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.762246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.247030] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.253448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.260291] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.266700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.274872] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.675724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.067507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.236095] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.400652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.406868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.415297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.578080] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.573506] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 237.584520] syz-executor1 cpuset=/ mems_allowed=0 [ 237.589541] CPU: 0 PID: 7265 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 237.596776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.606127] Call Trace: [ 237.608728] dump_stack+0x14b/0x190 [ 237.612362] dump_header+0x2c3/0x16f0 [ 237.616178] oom_kill_process+0x35b/0xfa0 [ 237.620336] ? mem_cgroup_scan_tasks+0x279/0x600 [ 237.625103] out_of_memory+0x14a4/0x1d00 [ 237.629211] try_charge+0x1a7b/0x2f80 [ 237.633073] memcg_kmem_charge_memcg+0xd6/0x270 [ 237.637793] new_slab+0x83b/0x1b60 [ 237.641384] ? __msan_poison_alloca+0x173/0x1f0 [ 237.646086] ? __cpuset_node_allowed+0x60/0x4a0 [ 237.650761] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 237.656155] ___slab_alloc+0x15bf/0x1fa0 [ 237.660246] ? seq_open+0xce/0x390 [ 237.663823] kmem_cache_alloc+0x957/0xb20 [ 237.668019] ? seq_open+0xce/0x390 [ 237.671626] seq_open+0xce/0x390 [ 237.675040] ? cgroup_file_release+0xe0/0xe0 [ 237.679475] kernfs_fop_open+0xbf4/0x1790 [ 237.683663] ? kernfs_fop_mmap+0x6a0/0x6a0 [ 237.687926] do_dentry_open+0xce6/0x1740 [ 237.692035] ? kmsan_memcpy_origins+0x111/0x1b0 [ 237.696750] vfs_open+0xaf/0xe0 [ 237.700060] path_openat+0x1799/0x6870 [ 237.703977] ? __msan_poison_alloca+0x173/0x1f0 [ 237.708689] ? expand_files+0x57/0xe10 [ 237.712636] ? do_sys_open+0x630/0x940 [ 237.716531] do_filp_open+0x259/0x610 [ 237.720349] do_sys_open+0x630/0x940 [ 237.724070] __se_sys_open+0xad/0xc0 [ 237.727790] __x64_sys_open+0x4a/0x70 [ 237.731610] do_syscall_64+0xb8/0x100 [ 237.735422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 237.740622] RIP: 0033:0x410db0 [ 237.743819] Code: 01 f0 ff ff 0f 83 e0 17 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d dd 51 63 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff [ 237.762720] RSP: 002b:0000000000a3f178 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 237.770449] RAX: ffffffffffffffda RBX: 0000000000a3f1a1 RCX: 0000000000410db0 [ 237.777714] RDX: 0000000000a3f1a6 RSI: 0000000000080001 RDI: 0000000000a3fd10 [ 237.784981] RBP: 0000000000a3f1a0 R08: 0000000000000000 R09: 0000000000000001 [ 237.792261] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000a3fd10 [ 237.799527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.807340] Task in /syz1 killed as a result of limit of /syz1 [ 237.813671] memory: usage 388kB, limit 0kB, failcnt 32 [ 237.819050] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 237.825878] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 237.832103] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 237.851857] Tasks state (memory values in pages): [ 237.856777] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 237.865900] [ 7265] 0 7265 17553 8388 118784 0 0 syz-executor1 [ 237.874992] Memory cgroup out of memory: Kill process 7265 (syz-executor1) score 8417000 or sacrifice child [ 237.885061] Killed process 7265 (syz-executor1) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB [ 237.896761] oom_reaper: reaped process 7265 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:23:18 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080), 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:18 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:18 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:18 executing program 0: 03:23:18 executing program 2: 03:23:18 executing program 7: 03:23:18 executing program 6: 03:23:18 executing program 1: 03:23:18 executing program 4: pipe2(&(0x7f0000000180), 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:18 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:18 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:18 executing program 6: 03:23:18 executing program 2: [ 238.256305] device bridge_slave_1 left promiscuous mode [ 238.262086] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:18 executing program 7: 03:23:18 executing program 0: 03:23:18 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 238.339667] device bridge_slave_0 left promiscuous mode [ 238.345421] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:18 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:18 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:18 executing program 6: 03:23:18 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1}) 03:23:18 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 238.621164] team0 (unregistering): Port device team_slave_1 removed 03:23:18 executing program 0: 03:23:18 executing program 7: [ 238.703135] team0 (unregistering): Port device team_slave_0 removed [ 238.804251] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 238.880216] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 239.002105] bond0 (unregistering): Released all slaves [ 239.068721] IPVS: ftp: loaded support on port[0] = 21 [ 240.145944] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.152378] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.160030] device bridge_slave_0 entered promiscuous mode [ 240.207910] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.214344] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.221954] device bridge_slave_1 entered promiscuous mode [ 240.268755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.318145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.456463] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.506786] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.780377] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.788023] team0: Port device team_slave_0 added [ 240.835740] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.843470] team0: Port device team_slave_1 added [ 240.890358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.942427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.993024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.043116] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.050363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.058910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.544373] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.550788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.557727] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.564136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.572230] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.042756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.387716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.554527] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.727034] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.733300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.742123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.910930] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.899931] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 244.911183] syz-executor1 cpuset=syz1 mems_allowed=0 [ 244.916408] CPU: 1 PID: 7627 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 244.923610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.932965] Call Trace: [ 244.935576] dump_stack+0x14b/0x190 [ 244.939208] dump_header+0x2c3/0x16f0 [ 244.943016] ? __msan_poison_alloca+0x173/0x1f0 [ 244.947724] oom_kill_process+0x35b/0xfa0 [ 244.951897] ? mem_cgroup_scan_tasks+0x279/0x600 [ 244.956666] out_of_memory+0x14a4/0x1d00 [ 244.960738] try_charge+0x1a7b/0x2f80 [ 244.964568] ? __kprobes_text_end+0x207d8/0x207d8 [ 244.969454] mem_cgroup_try_charge+0x7c1/0xf20 [ 244.974072] mem_cgroup_try_charge_delay+0x7e/0x140 [ 244.979112] wp_page_copy+0x7ba/0x2670 [ 244.983033] ? __msan_poison_alloca+0x173/0x1f0 [ 244.987719] ? kmsan_set_origin_inline+0x6b/0x120 [ 244.992589] do_wp_page+0xe4e/0x2ff0 [ 244.996329] handle_mm_fault+0x3265/0x81b0 [ 245.000581] ? kmsan_set_origin_inline+0x6b/0x120 [ 245.005460] __do_page_fault+0xc8b/0x17e0 [ 245.009650] do_page_fault+0x98/0xd0 [ 245.013366] ? page_fault+0x8/0x30 [ 245.016906] page_fault+0x1e/0x30 [ 245.020358] RIP: 0033:0x43e471 [ 245.023550] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 245.042451] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 245.047835] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 245.055101] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 245.062366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 245.069634] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 245.076904] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 245.084858] Task in /syz1 killed as a result of limit of /syz1 [ 245.090960] memory: usage 392kB, limit 0kB, failcnt 41 [ 245.096332] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 245.103155] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 245.109378] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 245.129165] Tasks state (memory values in pages): [ 245.134098] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 245.143151] [ 7627] 0 7627 17553 8390 114688 0 0 syz-executor1 [ 245.152287] Memory cgroup out of memory: Kill process 7627 (syz-executor1) score 8418000 or sacrifice child [ 245.162262] Killed process 7627 (syz-executor1) total-vm:70212kB, anon-rss:72kB, file-rss:33488kB, shmem-rss:0kB [ 245.174355] oom_reaper: reaped process 7627 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:23:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x46) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/87, 0x57) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x0) 03:23:25 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1}) 03:23:25 executing program 2: 03:23:25 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:25 executing program 6: 03:23:25 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:25 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = epoll_create(0x2000024e6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x1ff, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1ffc}) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x301a, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0x401, 0xa6fe, 0x10001, 0x3ff, 0x8, 0xfffffffffffff001, 0x50e, 0xfff, 0x9, 0x2fe4}) 03:23:25 executing program 7: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x20002) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") ioctl(r2, 0x9, &(0x7f0000000040)="e9a3de85cd72d063b8a11473190474ee39117c180efb96c89dfa5e64b69f68034025b1e397d8f01b17c3b7bd2f43a57b2e76b28a2bfdeed70ebac65246286d127031257e4979a1c41574a5089957c6118208b725d8e0178cecfe21edc2bd4de3f9b64314c8423d1faec2a970850cbba2ba65d0380a263e44e53da69f6350bb8419f35db32947c399874e161d0a4a93e7a191ad8dc9cc5a5317e1b6703d2386d0f556788e38ee99e9a97e50cbc7fcfc5d03b4e3e821a655532d3d2b2e4b195cc5abab50110d4c684d83ff7044e514a1") ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000240)="d1eee25530fe7ebaeb7e4f9625b880c81c23967b5a0c201c2a2f0a78460d7350f4", &(0x7f0000000300)=""/35, 0x0, 0x0, 0x0, &(0x7f0000000340)}) r3 = memfd_create(&(0x7f00000001c0)='/dev/sg#\x00', 0x3) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x0) 03:23:25 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1}) 03:23:25 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 245.420185] sd 0:0:1:0: [sg0] tag#3262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 245.429079] sd 0:0:1:0: [sg0] tag#3262 CDB: opcode=0xd1 (vendor) [ 245.435444] sd 0:0:1:0: [sg0] tag#3262 CDB[00]: d1 ee e2 55 30 fe 7e ba eb 7e 4f 96 25 b8 80 c8 [ 245.444441] sd 0:0:1:0: [sg0] tag#3262 CDB[10]: 1c 23 96 7b 5a 0c 20 1c 2a 2f 0a 78 46 0d 73 50 [ 245.453438] sd 0:0:1:0: [sg0] tag#3262 CDB[20]: f4 03:23:25 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:25 executing program 6: request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280), &(0x7f00000002c0)='fuse\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) keyctl$setperm(0x17, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x20000) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0xffffffffffffffff) 03:23:25 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0xe1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000400)={0x5, 0x3, 0x0, 0x3f46a015, 0x2, 0x0, 0x1, 0xdf, 0x2}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x43732e53d8416f1a}) ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/6, 0x6}], 0x1) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000002c0), 0x2) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x3}}, 0x0) write$P9_RCREATE(r0, &(0x7f00000003c0)={0x18, 0x73, 0x2, {{0x89, 0x2}, 0x8}}, 0x18) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="52bc04260f86d772fc99d715a383932f55f207002b76f1"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000900)='./file0\x00', 0x0, 0x400000000000) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) memfd_create(&(0x7f0000000000)="23766d6e6574ffff0044ce4cd8641922be19f26b1445ef18e0aa4bcaa0cafcc89e5ee502f1f7a2a136d4eeff4d6a253771891d8ca63ed00dd9b25a4784be1facd00fcf0aecf42f24e532606a1d9f02b4b35100000000000000000000000000000000", 0x6) [ 245.573937] device bridge_slave_1 left promiscuous mode [ 245.579813] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:25 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:25 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x8002) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 245.662491] device bridge_slave_0 left promiscuous mode [ 245.668302] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:25 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1}) [ 245.776132] sd 0:0:1:0: [sg0] tag#3262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 245.785054] sd 0:0:1:0: [sg0] tag#3262 CDB: opcode=0xd1 (vendor) [ 245.791390] sd 0:0:1:0: [sg0] tag#3262 CDB[00]: d1 ee e2 55 30 fe 7e ba eb 7e 4f 96 25 b8 80 c8 [ 245.800467] sd 0:0:1:0: [sg0] tag#3262 CDB[10]: 1c 23 96 7b 5a 0c 20 1c 2a 2f 0a 78 46 0d 73 50 [ 245.809473] sd 0:0:1:0: [sg0] tag#3262 CDB[20]: f4 [ 245.936085] team0 (unregistering): Port device team_slave_1 removed [ 246.006889] team0 (unregistering): Port device team_slave_0 removed [ 246.040779] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 246.074626] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 246.134382] bond0 (unregistering): Released all slaves [ 246.152820] IPVS: ftp: loaded support on port[0] = 21 [ 247.327418] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.333880] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.341509] device bridge_slave_0 entered promiscuous mode [ 247.390203] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.396681] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.404285] device bridge_slave_1 entered promiscuous mode [ 247.450239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.495554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.633722] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.685250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.913516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.921136] team0: Port device team_slave_0 added [ 247.968742] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.976477] team0: Port device team_slave_1 added [ 248.025103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.074996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.123348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.172658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.664747] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.671206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.678043] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.684483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.692291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.299982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.536217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.701145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.878024] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.884209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.893241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.058864] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.049010] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 252.059993] syz-executor1 cpuset=syz1 mems_allowed=0 [ 252.066127] CPU: 1 PID: 7947 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 252.073340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.082911] Call Trace: [ 252.085540] dump_stack+0x14b/0x190 [ 252.089175] dump_header+0x2c3/0x16f0 [ 252.092985] ? __msan_poison_alloca+0x173/0x1f0 [ 252.097685] oom_kill_process+0x35b/0xfa0 [ 252.101858] ? mem_cgroup_scan_tasks+0x279/0x600 [ 252.106687] out_of_memory+0x14a4/0x1d00 [ 252.110785] try_charge+0x1a7b/0x2f80 [ 252.114636] ? __kprobes_text_end+0x207d8/0x207d8 [ 252.119542] mem_cgroup_try_charge+0x7c1/0xf20 [ 252.124166] mem_cgroup_try_charge_delay+0x7e/0x140 [ 252.129205] wp_page_copy+0x7ba/0x2670 [ 252.133112] ? __msan_poison_alloca+0x173/0x1f0 [ 252.137799] ? kmsan_set_origin_inline+0x6b/0x120 [ 252.142667] do_wp_page+0xe4e/0x2ff0 [ 252.146414] handle_mm_fault+0x3265/0x81b0 [ 252.150681] ? kmsan_set_origin_inline+0x6b/0x120 [ 252.155564] __do_page_fault+0xc8b/0x17e0 [ 252.159740] do_page_fault+0x98/0xd0 [ 252.163454] ? page_fault+0x8/0x30 [ 252.167014] page_fault+0x1e/0x30 [ 252.170462] RIP: 0033:0x43e471 [ 252.173969] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 252.193289] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 252.198657] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 252.205941] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 252.213231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 252.220499] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 252.227774] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 252.235879] Task in /syz1 killed as a result of limit of /syz1 [ 252.241991] memory: usage 392kB, limit 0kB, failcnt 50 [ 252.247346] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 252.254173] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 252.260398] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 252.280207] Tasks state (memory values in pages): [ 252.285114] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 252.294145] [ 7947] 0 7947 17553 8389 114688 0 0 syz-executor1 [ 252.303232] Memory cgroup out of memory: Kill process 7947 (syz-executor1) score 8417000 or sacrifice child [ 252.313217] Killed process 7947 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 252.324907] oom_reaper: reaped process 7947 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:23:32 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:32 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x100002, 0x4) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000080)={'syz_tun\x00', @ifru_map={0x4, 0xfffffffffffffff7, 0x7, 0x8001, 0x1}}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4f, 0x80000) 03:23:32 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0xc0000) clock_gettime(0x0, &(0x7f00000047c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004600)=[{{&(0x7f00000001c0)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/206, 0xce, 0xfff}, 0x80}, {{&(0x7f0000001440)=@ipx, 0x80, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/247, 0xf7}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x7ff}, 0x9}, {{&(0x7f00000025c0)=@pppol2tpin6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002640)=""/162, 0xa2}, {&(0x7f0000002700)=""/211, 0xd3}], 0x2, &(0x7f0000002800)=""/154, 0x9a, 0x6}, 0x10001}, {{&(0x7f00000028c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002940)=""/15, 0xf}, {&(0x7f0000002980)=""/207, 0xcf}, {&(0x7f0000002a80)=""/96, 0x60}, {&(0x7f0000002b00)=""/20, 0x14}, {&(0x7f0000002b40)=""/233, 0xe9}, {&(0x7f0000002c40)=""/37, 0x25}, {&(0x7f0000002c80)=""/210, 0xd2}], 0x7, 0x0, 0x0, 0x3}, 0x6}, {{&(0x7f0000002e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002e80)=""/4096, 0x1000}], 0x1, &(0x7f0000003ec0)=""/202, 0xca, 0xffffffffffffffff}, 0xae}, {{&(0x7f0000003fc0)=@in, 0x80, &(0x7f0000004100)=[{&(0x7f0000004040)=""/136, 0x88}], 0x1, &(0x7f0000004140)=""/112, 0x70, 0x2}, 0x2}, {{&(0x7f00000041c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004500)=[{&(0x7f0000004240)=""/40, 0x28}, {&(0x7f0000004280)=""/29, 0x1d}, {&(0x7f00000042c0)=""/224, 0xe0}, {&(0x7f00000043c0)=""/20, 0x14}, {&(0x7f0000004400)=""/251, 0xfb}], 0x5, &(0x7f0000004580)=""/84, 0x54, 0x10}, 0x7}], 0x7, 0x12000, &(0x7f0000004800)={r3, r4+10000000}) sendmsg$xdp(r2, &(0x7f0000004940)={&(0x7f0000004840)={0x2c, 0x0, r5, 0x31}, 0x10, &(0x7f0000004900)=[{&(0x7f0000004880)="8811bc9ce764c0d7a1fe33015b79bde68759907e1308508a1285c1d531c1c59e2f7498d6e3b6db0b2fb10c2bf86f2f143eb33352e3cf40e1699b9d1c187d5ea721e0627f55e526af5b5f194a130c5281b51272", 0x53}], 0x1, 0x0, 0x0, 0x4040}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x80, 0x3) bind$xdp(r7, &(0x7f0000000300)={0x2c, 0x0, r6}, 0x10) close(r7) 03:23:32 executing program 4 (fault-call:4 fault-nth:0): pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:32 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) fcntl$setstatus(r1, 0x4, 0x40c00) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2040, 0x102) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x2}, 0x4) shutdown(r0, 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xffff}}}, &(0x7f0000000280)=0x84) 03:23:32 executing program 2: r0 = socket$inet(0x2, 0x6, 0x7ff) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000540)=""/4096, &(0x7f0000000000)=0x1000) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x1ff00000000000}, 0x10) 03:23:32 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = socket$inet6(0xa, 0x1000000000005, 0x3) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) r4 = gettid() write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r5}}, 0x18) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x8, r4}) sendfile(r0, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) write$FUSE_LSEEK(r3, &(0x7f0000000280)={0x18, 0x0, 0x2000000000000000}, 0x18) dup3(r2, r3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r7 = getegid() fchown(r0, r6, r7) shutdown(r0, 0x1) 03:23:32 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 252.589176] FAULT_INJECTION: forcing a failure. [ 252.589176] name failslab, interval 1, probability 0, space 0, times 1 [ 252.600699] CPU: 0 PID: 8218 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #40 [ 252.607916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.617314] Call Trace: [ 252.619965] dump_stack+0x14b/0x190 [ 252.623675] should_fail+0xa98/0xaa0 [ 252.627474] __should_failslab+0x278/0x2a0 [ 252.631815] should_failslab+0x29/0x70 [ 252.635779] kmem_cache_alloc+0x127/0xb20 [ 252.640023] ? fcntl_setlk+0xce/0x1810 [ 252.643998] ? do_fcntl+0xdd5/0x25b0 [ 252.647812] fcntl_setlk+0xce/0x1810 [ 252.651623] ? kmsan_set_origin+0x93/0x150 [ 252.655974] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 252.661435] do_fcntl+0xdd5/0x25b0 [ 252.665082] __se_sys_fcntl+0x27b/0x390 [ 252.669109] __x64_sys_fcntl+0x4a/0x70 [ 252.673063] do_syscall_64+0xb8/0x100 [ 252.676912] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 252.682145] RIP: 0033:0x457099 [ 252.685383] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.704322] RSP: 002b:00007f8da55d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 252.712083] RAX: ffffffffffffffda RBX: 00007f8da55d96d4 RCX: 0000000000457099 [ 252.719389] RDX: 0000000020000040 RSI: 0000000000000007 RDI: 0000000000000003 [ 252.726687] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:23:32 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:32 executing program 6: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x5c831, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) mlock2(&(0x7f00008b1000/0x1000)=nil, 0x1000, 0x1000000000) mlock2(&(0x7f000032e000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') [ 252.734012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 252.741316] R13: 00000000004cbe60 R14: 00000000004c34be R15: 0000000000000000 03:23:32 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b8446) poll(&(0x7f0000000000)=[{r0, 0x2}], 0x1, 0x1000) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x400, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10000009}) shutdown(r0, 0x0) lookup_dcookie(0x5, &(0x7f0000000080)=""/135, 0x87) [ 252.854998] device bridge_slave_1 left promiscuous mode [ 252.860825] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:32 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 252.917024] device bridge_slave_0 left promiscuous mode [ 252.922816] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:33 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:33 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 253.061479] team0 (unregistering): Port device team_slave_1 removed [ 253.080133] team0 (unregistering): Port device team_slave_0 removed [ 253.098322] bond0 (unregistering): Releasing backup interface bond_slave_1 03:23:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000440)=0x40000000000008, 0x4) write(r2, &(0x7f0000000000)="c4e1f64e08c456a36447bc9e5c17326a", 0x10) [ 253.156310] bond0 (unregistering): Releasing backup interface bond_slave_0 03:23:33 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x1, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getpid() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:33 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 253.343745] bond0 (unregistering): Released all slaves [ 254.133832] IPVS: ftp: loaded support on port[0] = 21 03:23:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0xa7e7e1c1ebaf8fcd) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000040)) 03:23:34 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) write(r1, &(0x7f0000000200)="a3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677affff0000804ba4b2f8e1000000000020000000000000000000001920ed", 0x44) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x7f, &(0x7f0000000180)={0x7953f496}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000001c0)=0x3f) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@remote, @multicast2}, &(0x7f0000000100)=0x8) 03:23:34 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1}) 03:23:34 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 255.057786] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.064229] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.072010] device bridge_slave_0 entered promiscuous mode [ 255.117936] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.124397] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.131987] device bridge_slave_1 entered promiscuous mode [ 255.177429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 255.223119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 255.355380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.404050] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.618097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 255.625478] team0: Port device team_slave_0 added [ 255.671014] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 255.678369] team0: Port device team_slave_1 added [ 255.724096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.773239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.821830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.870394] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.878042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.886826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.368935] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.375388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.382217] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.388699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.396660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.850766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.188450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.359312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 258.527546] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.533825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.542979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.705258] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.701086] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 259.712015] syz-executor1 cpuset=syz1 mems_allowed=0 [ 259.717268] CPU: 1 PID: 8287 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 259.724476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.733825] Call Trace: [ 259.736426] dump_stack+0x14b/0x190 [ 259.740073] dump_header+0x2c3/0x16f0 [ 259.743876] ? __msan_poison_alloca+0x173/0x1f0 [ 259.748600] oom_kill_process+0x35b/0xfa0 [ 259.752800] ? mem_cgroup_scan_tasks+0x279/0x600 [ 259.757593] out_of_memory+0x14a4/0x1d00 [ 259.761677] try_charge+0x1a7b/0x2f80 [ 259.765643] ? __kprobes_text_end+0x207d8/0x207d8 [ 259.770554] mem_cgroup_try_charge+0x7c1/0xf20 [ 259.775195] mem_cgroup_try_charge_delay+0x7e/0x140 [ 259.780233] wp_page_copy+0x7ba/0x2670 [ 259.784140] ? __msan_poison_alloca+0x173/0x1f0 [ 259.788820] ? kmsan_set_origin_inline+0x6b/0x120 [ 259.793729] do_wp_page+0xe4e/0x2ff0 [ 259.797510] handle_mm_fault+0x3265/0x81b0 [ 259.801782] ? kmsan_set_origin_inline+0x6b/0x120 [ 259.806670] __do_page_fault+0xc8b/0x17e0 [ 259.810839] do_page_fault+0x98/0xd0 [ 259.814552] ? page_fault+0x8/0x30 [ 259.818115] page_fault+0x1e/0x30 [ 259.821571] RIP: 0033:0x43e471 [ 259.824780] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 259.843680] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 259.849050] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 259.856316] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 259.863606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 259.870882] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 259.878149] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 259.886251] Task in /syz1 killed as a result of limit of /syz1 [ 259.892415] memory: usage 392kB, limit 0kB, failcnt 59 [ 259.897776] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 259.904698] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 259.910892] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 259.930530] Tasks state (memory values in pages): [ 259.935428] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 259.944697] [ 8287] 0 8287 17553 8389 114688 0 0 syz-executor1 [ 259.953794] Memory cgroup out of memory: Kill process 8287 (syz-executor1) score 8417000 or sacrifice child [ 259.963777] Killed process 8287 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 259.975392] oom_reaper: reaped process 8287 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:23:40 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1}) 03:23:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000010, &(0x7f0000000140)="02000100020001b40000000207206548", 0xffffffffffffffb3) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8140, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'ip6_vti0\x00'}}, 0x1e) 03:23:40 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x91012300, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x110, r1, 0x0) 03:23:40 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@local, 0xd, r1}) r2 = socket$inet6(0xa, 0x800000016, 0x515c) ioctl(r2, 0x8912, &(0x7f0000000240)="02958ab9d2e775afeb3880c3ad6028e015979169f89d3af698cbb582034021a927798dfb9b8d1e5d26baab530c7e6690431d01") ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) prlimit64(0x0, 0x9, &(0x7f00000000c0), 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000100)={0x0, {{0xa, 0x4e22, 0x200, @loopback, 0xd0d}}, {{0xa, 0x4e21, 0x1, @empty, 0x3}}}, 0x108) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) 03:23:40 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@dev={0xfe, 0x80, [], 0x1c}, 0x4e21, 0x3, 0x4e22, 0x1, 0x2, 0x20, 0x20, 0x3f, r2, r3}, {0x4, 0x10001, 0x8, 0x2, 0x101, 0x0, 0x20000000}, {0x6, 0x7, 0xfffffffffffff0aa, 0x27}, 0x100, 0x0, 0x2, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x0, 0x4, 0x3, 0x100, 0x3ff, 0xd0, 0xffffffffffffff7f}}, 0xe8) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x0, [], [{0xdc5, 0x6, 0x7ff, 0x7fffffff, 0x7, 0x3ff}, {0x7f, 0x100000000, 0x8001, 0x1, 0xcf12, 0x4}], [[], [], [], [], [], [], []]}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000010ff0), 0x10) recvfrom(r5, &(0x7f0000000100)=""/56, 0x38, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r4}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 03:23:40 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:40 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x180, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000240)={0x8000, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e23}}}, 0x108) fsetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7573bde2293a85d0d474756d00"], &(0x7f00000001c0)='/dev/rtc0\x00', 0xa, 0x3) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000380)=""/43, &(0x7f0000000400)=0x2b) 03:23:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="01"]}) close(r2) 03:23:40 executing program 3 (fault-call:6 fault-nth:0): pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:40 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:40 executing program 7: unshare(0x20402) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000300000000000000000073797a5f74756e000000000000000000626a004700000000000000000000000076657468305f746f5f7465616d000000766574683000000000000000000000000180c20000000000000000000000000000000000000000000000a8020000a8020000f80200006270660000000000000000000000000000000000000000000000000000000001100200000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x400) [ 260.309949] device bridge_slave_1 left promiscuous mode [ 260.315826] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.377221] device bridge_slave_0 left promiscuous mode [ 260.383048] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:40 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:40 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) ioctl(r1, 0x3, &(0x7f0000000240)="be585c77892e85d76c3528d7ff748e12e725347b34663993476a8eaea5db40083c313dc6dd31df421b1224d7a72cc4b52f78c51159f8fb67ae67f1b61353572fee3777968aa6183c39cf695712f1afc30a7c515c7f4d12b58236386b20859759461d3f02031fe780608fc90c66116552d5a99f6a8b247cf701f319d318e7fdf68d1d180fcb955337a29e39ae8fc8360026113e58b971f75ebf27a765f3ef29f33d08b07ec116b15617f39880fa607878b3d78115be1cdfa5703c9dfd2a93cf") r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:40 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:40 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x6, {{0x2, 0x4e20, @multicast2}}}, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = dup3(r0, r0, 0x80000) ioctl$KDSETMODE(r1, 0x4b3a, 0x80f) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f00000000c0)={r0, r2, 0x7}) prctl$getreaper(0x1d, &(0x7f00000001c0)) [ 260.623177] team0 (unregistering): Port device team_slave_1 removed [ 260.705438] team0 (unregistering): Port device team_slave_0 removed 03:23:40 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) clone(0x20002102, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 260.786371] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 260.872360] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 260.989076] bond0 (unregistering): Released all slaves [ 261.686537] IPVS: ftp: loaded support on port[0] = 21 [ 262.458821] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.465250] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.472971] device bridge_slave_0 entered promiscuous mode [ 262.522311] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.528725] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.536372] device bridge_slave_1 entered promiscuous mode [ 262.584296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 262.633426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 262.771441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 262.822232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 263.045801] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 263.053498] team0: Port device team_slave_0 added [ 263.101326] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 263.109022] team0: Port device team_slave_1 added [ 263.159523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.210109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.260266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 263.267539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.276475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.320871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 263.328095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.337099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.825802] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.832259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.839169] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.845599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.853260] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.238859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.711433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.884375] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.057855] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.064066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.072713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.245133] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.272037] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 267.282979] syz-executor1 cpuset=syz1 mems_allowed=0 [ 267.288221] CPU: 1 PID: 8637 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 267.295424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.304791] Call Trace: [ 267.307438] dump_stack+0x14b/0x190 [ 267.311073] dump_header+0x2c3/0x16f0 [ 267.314878] ? __msan_poison_alloca+0x173/0x1f0 [ 267.319581] oom_kill_process+0x35b/0xfa0 [ 267.323759] ? mem_cgroup_scan_tasks+0x279/0x600 [ 267.328526] out_of_memory+0x14a4/0x1d00 [ 267.332603] try_charge+0x1a7b/0x2f80 [ 267.336434] ? __kprobes_text_end+0x207d8/0x207d8 [ 267.341320] mem_cgroup_try_charge+0x7c1/0xf20 [ 267.345942] mem_cgroup_try_charge_delay+0x7e/0x140 [ 267.351017] wp_page_copy+0x7ba/0x2670 [ 267.354940] ? __msan_poison_alloca+0x173/0x1f0 [ 267.359718] ? kmsan_set_origin_inline+0x6b/0x120 [ 267.364589] do_wp_page+0xe4e/0x2ff0 [ 267.368331] handle_mm_fault+0x3265/0x81b0 [ 267.372585] ? kmsan_set_origin_inline+0x6b/0x120 [ 267.377454] __do_page_fault+0xc8b/0x17e0 [ 267.381618] do_page_fault+0x98/0xd0 [ 267.385341] ? page_fault+0x8/0x30 [ 267.388884] page_fault+0x1e/0x30 [ 267.392344] RIP: 0033:0x43e471 [ 267.395567] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 267.414472] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 267.419836] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 267.427103] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 267.434369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 267.441638] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 267.448904] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 267.456649] Task in /syz1 killed as a result of limit of /syz1 [ 267.462960] memory: usage 392kB, limit 0kB, failcnt 68 [ 267.468311] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 267.475171] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 267.481397] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 267.501193] Tasks state (memory values in pages): [ 267.506110] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 267.515178] [ 8637] 0 8637 17553 8389 114688 0 0 syz-executor1 [ 267.524264] Memory cgroup out of memory: Kill process 8637 (syz-executor1) score 8417000 or sacrifice child [ 267.534233] Killed process 8637 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 267.545813] oom_reaper: reaped process 8637 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:23:47 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) recvfrom(r0, &(0x7f0000000240)=""/206, 0xce, 0x160, &(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0x100000001, 0x8, "a5f0d7aed2e7b298c3ab45eb86480a68faee4ee4c68f0cedc8a4209b60732cc156e62c7ffec9c48da88a822b08ac9294bb69c1d3ece39f320b917cfa462aa9", 0x3}, 0x80) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:47 executing program 7: set_mempolicy(0x3, &(0x7f0000000000)=0x80000000000003fd, 0x4) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800, 0x18500) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x8}, &(0x7f0000000140)=0x8) unshare(0x44060000) 03:23:47 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:47 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000380)) prctl$seccomp(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x8}, 0x2c9) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x70, 0x3, 0x8, 0x9cd1, 0x97a, 0x0, 0x0, 0x106, 0x4, 0x3ff6, 0xffffffff, 0x1, 0x6, 0x10000000000000, 0x3ff, 0x2, 0x8, 0x3, 0x1, 0x80000001, 0xff, 0xfffffffffffffff8, 0x7, 0x697, 0xe, 0x7ff, 0x7f, 0xb65, 0x1, 0x9, 0x1, 0xfffffffffffffffb, 0xa000000000, 0x81, 0x5e, 0xc98, 0x80000, 0x0, 0x2, 0x3, @perf_config_ext={0x200, 0xcd4}, 0x40, 0x2, 0x100, 0x5, 0xffff, 0x4, 0xf656}, r0, 0x3, r0, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(0xffffffffffffffff, r3, 0x0) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) sync() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x5, @thr={&(0x7f0000000600)="fe55b93bb5731df0687339ef1b5e12b19c32f64af01789f644b88d75ad394c92c35aebdbd001584e1aa110445c6057e016c45b6a93f261b5b7f21f3e5a5f2cd5b7e79af237fa2744966884f28fd51c164adc1562ebc725236e2c4704ee9ac2e1d2f5d2499812b73bac901cc6c29e28bbafe66c3eeb46f99079cbdb9e20a2ddb2ae673b764d32bca3e69abe5a67f2de96a3a43946abbb52e426beda421d18fde1d873aae37d123ced0bfe805d131c5a7acc06dbe2c4b97c45305ce6f53fe7be1867eed94728380b4b3e576ea5cd4014260bd1f914963f1ffb17188a257e01c14c0e7e5791", &(0x7f0000000700)="d912eab8558422b0e4a5883764beb674dc8b81ed4a3ea64587fc559aca2ecfe07523267cbbad480c5559574df35cda72684d9ba5516644f7350253c472f8dd42a5ea44c609affbc68069c46de9bfd3a72c429a2216b436fd5952bffcd79c57ba7ecbeb1e911392fba167a6d23091f19d7690ad1535d47b04cf91904c33f71e5b08e16e12e63af7fc168775f3853ece82c7e7559b47ac951a67b41ef74627fb1b76282f"}}, &(0x7f0000044000)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000540)={@dev}, &(0x7f0000000800)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 03:23:47 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) finit_module(r1, &(0x7f0000000000)='\x00', 0x2) 03:23:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x400, 0xc0) socket$pppoe(0x18, 0x1, 0x0) r1 = signalfd(0xffffffffffffff9c, &(0x7f00000000c0)={0x3b4}, 0x8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8000000032, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000001180)={'filter\x00'}, &(0x7f0000001200)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) inotify_add_watch(r4, &(0x7f0000001340)='./file0/file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000001240)='/dev/snd/controlC#\x00', 0x5, 0x200) madvise(&(0x7f00006ee000/0x4000)=nil, 0x4000, 0xb) write$binfmt_misc(r2, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 03:23:47 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000680), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000700)='proc\x00', 0x20, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x13, @mcast1, 0xfa2}}, 0xffff, 0xffff, 0x2, 0x5, 0x10000}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x5, 0x4, 0x200, 0x5, 0x7, 0x598e, 0xfdd8, 0x9, r2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xb0, "f260522cafc6c0c920211127663c3856efe4a088ff0ab87fc2dc47488993b3a16fdd33eb4b3dada0b18bfb2ccb11e575cd34d3b25078a66f57ea4f62e0bd222fa2175fe5a84ba51a9e45d28f97aa1acf849c999caa10d7169edeede7a9bc2e70603bf177fb444a20c57eab3f9bf5796e8192794dd7f988c5d23fa8621144e2c3691fe005564e5a48a5fd64a2b81b42aa25759eab09870483b9c9dbb41748081d67cc8a40287016013e0ae0eccc277767"}, &(0x7f0000000040)=0xb8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r3, 0x729}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r3, 0xd1, "1b12571a9603585b54b9eda1c9cb062aed8601c8864c7f900faf89046156246f02552f9c0cd9f35b5a54cbec1dc2b76a0e115348a2cd2a71eb8b3fadab268fd3433c71183c17d3833898cb5b120237283fbda08986cd33ca6092bd04ae7193b6092c75b854d4fe303f615c3c7f6036c322f3a91363396e6207b41880a59dac84a7f4a8af3f3587aa20ebb4afb11d50bfc181a0a2de9a06f31047ea375216cfef87831841fb7d14ee046a3bed616af3fe82056f0d701021f5c575cc399e2092a67060cdce728ccb6e9b585e7eb27b3a0c88"}, &(0x7f0000000300)=0xd9) 03:23:47 executing program 1: r0 = socket(0x400000000011, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000001540)={0xffffffffffffffff}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) ioctl(r0, 0x8915, &(0x7f00000001c0)="2bbddbbe00315f8571507003a43ba28ed4c48a91ba16c8b2f726019ee7be4ffd71a3bbc98dc8cd03851692928e5bf3cedef48f58e5f3006d0dac") getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001440)={0x0, 0x3}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x6}, &(0x7f00000000c0)=0xfffffd2b) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x208000, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001480)=0x0) fcntl$setown(r5, 0x8, r6) write$USERIO_CMD_REGISTER(r5, &(0x7f0000001400)={0x0, 0xf110}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0xde2, @mcast2, 0x853a}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x6}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @local}], 0x88) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r4, 0x4}, &(0x7f0000000140)=0x8) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @reserved}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000002c0)="707a56502754df36b92763653dc171010f514f9a4567719dffa7fec26d7b111071d46ef45edc16b478ebc83bc732130df5288da88805e2c99ed763e2aa6c3ddd29647c7136a84cd94c1fbf2fea136ce983d7c7609d2503b7e103a860ec56ee1ec69c4f3915aa22b81c57daca7f09aab92c17a1af7f12491d6c9e9d7c7512dbe205f570c7556a571be8317bb0368bbd31b4991763fe242bac378fc9faa45e341f3296f38ebcc607eb6d3818f7f66e1f52dbbd3b230a0bfc8d989142f99bfbc9497b43b35fe491f7fc740a02d77d0c0488d7995d4faa7c9ceaaa9c5441072a32", 0xdf) 03:23:47 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) setfsuid(r2) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @loopback}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r3}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001380)={@mcast1, 0x9, r4}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:47 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:47 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 267.863062] IPVS: ftp: loaded support on port[0] = 21 [ 267.921114] device bridge_slave_1 left promiscuous mode [ 267.926993] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:48 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 268.013404] device bridge_slave_0 left promiscuous mode [ 268.019321] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x305, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8}]}, 0x1c}}, 0x0) 03:23:48 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000080)={0xf8aa, 0x7fff, 0x100, 0x3, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:48 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x7000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x4000000000001, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x541b, &(0x7f0000000000)='em1:\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') 03:23:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x5, 0x84) 03:23:48 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='syzkaller1\x00') [ 268.292242] team0 (unregistering): Port device team_slave_1 removed [ 268.353353] team0 (unregistering): Port device team_slave_0 removed [ 268.412125] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 268.472989] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 268.562472] IPVS: ftp: loaded support on port[0] = 21 [ 268.566134] bond0 (unregistering): Released all slaves [ 268.744191] IPVS: ftp: loaded support on port[0] = 21 03:23:50 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4) 03:23:50 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:50 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = semget$private(0x0, 0x1, 0x180) semctl$IPC_RMID(r2, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x7d9c59ed) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{0xf, 0xf1f9}, {0xf, 0xfffffffffffffffd}, {0x2, 0x2}], 0x3) 03:23:50 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() tgkill(r1, r1, 0x3e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x24, 0x200500) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x4333204e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x58, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xb628}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0xf7, @local, 0xc5}]}, &(0x7f0000000280)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4001) [ 270.625321] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.631828] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.639826] device bridge_slave_0 entered promiscuous mode [ 270.717864] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.724360] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.732553] device bridge_slave_1 entered promiscuous mode [ 270.810201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 270.889657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 271.130031] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 271.210970] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 271.267965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 271.274972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.356863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 271.363846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.578890] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 271.586284] team0: Port device team_slave_0 added [ 271.633354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 271.641270] team0: Port device team_slave_1 added [ 271.688860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.739524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.789434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.796997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.806363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.851145] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.858416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.868012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.364310] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.370762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.377721] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.384137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.392007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 273.106731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.230781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.398788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 274.568883] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 274.575089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.583827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.749773] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.746262] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 275.757220] syz-executor1 cpuset=syz1 mems_allowed=0 [ 275.762548] CPU: 1 PID: 8968 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 275.769772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.779122] Call Trace: [ 275.781719] dump_stack+0x14b/0x190 [ 275.785351] dump_header+0x2c3/0x16f0 [ 275.789152] ? __msan_poison_alloca+0x173/0x1f0 [ 275.793834] oom_kill_process+0x35b/0xfa0 [ 275.797987] ? mem_cgroup_scan_tasks+0x279/0x600 [ 275.802770] out_of_memory+0x14a4/0x1d00 [ 275.806844] try_charge+0x1a7b/0x2f80 [ 275.810673] ? __kprobes_text_end+0x207d8/0x207d8 [ 275.815573] mem_cgroup_try_charge+0x7c1/0xf20 [ 275.820206] mem_cgroup_try_charge_delay+0x7e/0x140 [ 275.825244] wp_page_copy+0x7ba/0x2670 [ 275.829169] ? __msan_poison_alloca+0x173/0x1f0 [ 275.833856] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.838726] do_wp_page+0xe4e/0x2ff0 [ 275.842470] handle_mm_fault+0x3265/0x81b0 [ 275.846738] ? kmsan_set_origin_inline+0x6b/0x120 [ 275.851641] __do_page_fault+0xc8b/0x17e0 [ 275.855804] do_page_fault+0x98/0xd0 [ 275.859516] ? page_fault+0x8/0x30 [ 275.863053] page_fault+0x1e/0x30 [ 275.866501] RIP: 0033:0x43e471 [ 275.869693] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 275.888602] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 275.893977] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 275.901243] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 275.908523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 275.915789] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 275.923052] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 275.930802] Task in /syz1 killed as a result of limit of /syz1 [ 275.936891] memory: usage 392kB, limit 0kB, failcnt 77 [ 275.942252] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 275.949112] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 275.955334] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 275.975083] Tasks state (memory values in pages): [ 275.979976] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 275.989312] [ 8968] 0 8968 17553 8389 118784 0 0 syz-executor1 [ 275.998397] Memory cgroup out of memory: Kill process 8968 (syz-executor1) score 8418000 or sacrifice child [ 276.008399] Killed process 8968 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 276.020392] oom_reaper: reaped process 8968 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:23:56 executing program 1: clone(0x2102001fdc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000e40)="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", 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") 03:23:56 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:56 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x400001fffc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x77}}, 0x18) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f00000000c0)=""/200, &(0x7f00000001c0)=0xc8) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="e054f29a1f3e64b074229a68faa02ae7bcdf2afbb658a10cd85a10b6da45f4a1d04f19212c3b082ba392c4af774a7a7eaf450538d7dfdf9993711dbef7121b40426873900ac4673cae2b7b952271e17e3f2e0000000000000000", 0x5a}], 0x1, &(0x7f0000000140)}, 0x0) 03:23:56 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000140)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x10001}, 0x8) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000001c0)) 03:23:56 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000003040)=[{{&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002f80)}}], 0x4000000000001b9, 0x0) 03:23:56 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1691, 0x8) r2 = getpid() getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x4]}, &(0x7f00000000c0)=0x6) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:56 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x10b) 03:23:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000280), &(0x7f0000000180)="a4", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300), &(0x7f0000000700)="848432503e1ac2bae9d92144eae8978bd4f065eadead9ca85fd3c49e925de4007488bf80a2152f25efb149bbddc4493ad0c625b2e5cfabf2f745b9a6586673f693fc49f3b2e10e38afb34f9befefa874c9e7033ccc0e967bec6de22d59ece236cb34ca95781888a02eb796e3342b40b123e5f81ff5e34b907efecba4cfbf634fd3fee4a929cea900837f546dba4cdcc4fe13ac83893eef8276820db8efd0e90729fb71a71d9add945238acddb8375d4b349d571748902d266efb9ab909b8b6e7", 0xc0, r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r2, r3}, &(0x7f0000000640)=""/155, 0x320, &(0x7f0000000600)={&(0x7f0000000580)={"77703235362d67656e6572696300fffffff900"}, &(0x7f0000000000)}) 03:23:56 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:56 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) r3 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="0090782de1cbd03c52c57259e45e216aac8751504a7b8b3ea1b46de993af25f20681f26086834959426aced879a5d3dbedfcad86517c8574bc30d6f1132470b3b52e68b25a17c98de3d2a4dd8a40c0bc2e3dd6c840512b7b30b97761515213c6395d1a68779f41ba54fabbb8bc852a435d60cb", 0x73, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000140)='\x00') msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000003c0)={0xd96, 0x7, 0x5, 0x20, 0x2, 0xc07}) 03:23:56 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x40004002) getpid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000), 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:56 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:23:56 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="300afe2a4055b6cc865106e8"], 0xc) [ 276.415025] device bridge_slave_1 left promiscuous mode [ 276.420841] bridge0: port 2(bridge_slave_1) entered disabled state 03:23:56 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 03:23:56 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) socket$kcm(0x29, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x80000000}) [ 276.498715] device bridge_slave_0 left promiscuous mode [ 276.504505] bridge0: port 1(bridge_slave_0) entered disabled state 03:23:56 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x1, 0x9}}, 0x28) write$P9_RSTAT(r1, &(0x7f0000000380)={0x69, 0x7d, 0x1, {0x0, 0x62, 0x800, 0x5, {0x4, 0x2, 0x8}, 0x8000000, 0x98b, 0x3, 0x113f, 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00', 0x0, "", 0x1b, "5ebf2676626f786e6574306e6f6465767d6d696d655f7479706540"}}, 0x69) r2 = getpid() ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000140)={0x4, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0xce4, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x3, 0x2, 0xd94, 0x8, r2}) ioctl$TIOCNOTTY(r0, 0x5422) r3 = msgget(0x1, 0x309) msgrcv(r3, &(0x7f0000000300)={0x0, ""/26}, 0x22, 0x3, 0x1800) getdents(r1, &(0x7f0000000340)=""/32, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x101000, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:23:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac730000000000ec973f820f7c4000", 0x102}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r1, r2, &(0x7f0000000100), 0x80000001) [ 276.757183] team0 (unregistering): Port device team_slave_1 removed [ 276.770321] team0 (unregistering): Port device team_slave_0 removed [ 276.841331] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 276.894005] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 276.954532] bond0 (unregistering): Released all slaves [ 277.033567] IPVS: ftp: loaded support on port[0] = 21 [ 278.180176] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.186717] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.195217] device bridge_slave_0 entered promiscuous mode [ 278.244683] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.251132] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.258835] device bridge_slave_1 entered promiscuous mode [ 278.306873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 278.354806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 278.493282] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 278.544020] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 278.775661] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 278.783301] team0: Port device team_slave_0 added [ 278.830862] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 278.838310] team0: Port device team_slave_1 added [ 278.887466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.939866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.990369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 278.997936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.008123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.055376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.576036] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.582513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.589362] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.595840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.603730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 280.146736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.456830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.683787] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 281.856486] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 281.862868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.871401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.044939] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.099048] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 283.110242] syz-executor1 cpuset=syz1 mems_allowed=0 [ 283.115663] CPU: 1 PID: 9328 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 283.122926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.132288] Call Trace: [ 283.134924] dump_stack+0x14b/0x190 [ 283.138574] dump_header+0x2c3/0x16f0 [ 283.142391] ? __msan_poison_alloca+0x173/0x1f0 [ 283.147111] oom_kill_process+0x35b/0xfa0 [ 283.151300] ? mem_cgroup_scan_tasks+0x279/0x600 [ 283.156130] out_of_memory+0x14a4/0x1d00 [ 283.160217] try_charge+0x1a7b/0x2f80 [ 283.164105] ? __kprobes_text_end+0x207d8/0x207d8 [ 283.169001] mem_cgroup_try_charge+0x7c1/0xf20 [ 283.173665] mem_cgroup_try_charge_delay+0x7e/0x140 [ 283.178726] wp_page_copy+0x7ba/0x2670 [ 283.182672] ? __msan_poison_alloca+0x173/0x1f0 [ 283.187377] ? kmsan_set_origin_inline+0x6b/0x120 [ 283.192264] do_wp_page+0xe4e/0x2ff0 [ 283.196018] handle_mm_fault+0x3265/0x81b0 [ 283.200285] ? kmsan_set_origin_inline+0x6b/0x120 [ 283.205231] __do_page_fault+0xc8b/0x17e0 [ 283.209419] do_page_fault+0x98/0xd0 [ 283.213152] ? page_fault+0x8/0x30 [ 283.216856] page_fault+0x1e/0x30 [ 283.220392] RIP: 0033:0x43e471 [ 283.223626] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 283.242564] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 283.247969] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 283.255247] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 283.262524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 283.269806] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 283.277140] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 283.284532] Task in /syz1 killed as a result of limit of /syz1 [ 283.290696] memory: usage 392kB, limit 0kB, failcnt 86 [ 283.296064] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 283.302911] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 283.309132] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 283.329034] Tasks state (memory values in pages): [ 283.333958] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 283.343293] [ 9328] 0 9328 17553 8388 118784 0 0 syz-executor1 [ 283.352385] Memory cgroup out of memory: Kill process 9328 (syz-executor1) score 8417000 or sacrifice child [ 283.362450] Killed process 9328 (syz-executor1) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB [ 283.374236] oom_reaper: reaped process 9328 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:03 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:24:03 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000280), &(0x7f0000000180)="a4", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300), &(0x7f0000000700)="848432503e1ac2bae9d92144eae8978bd4f065eadead9ca85fd3c49e925de4007488bf80a2152f25efb149bbddc4493ad0c625b2e5cfabf2f745b9a6586673f693fc49f3b2e10e38afb34f9befefa874c9e7033ccc0e967bec6de22d59ece236cb34ca95781888a02eb796e3342b40b123e5f81ff5e34b907efecba4cfbf634fd3fee4a929cea900837f546dba4cdcc4fe13ac83893eef8276820db8efd0e90729fb71a71d9add945238acddb8375d4b349d571748902d266efb9ab909b8b6e7", 0xc0, r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r2, r3}, &(0x7f0000000640)=""/155, 0x320, &(0x7f0000000600)={&(0x7f0000000580)={"77703235362d67656e657269630000fdffffff00"}, &(0x7f0000000000)}) 03:24:03 executing program 7: 03:24:03 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() socket$inet6(0xa, 0x80004, 0x3) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x16) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000000)=0xfffffffffffffffe) 03:24:03 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x800, 0x3, 0x4, 0x80, 0x0, 0x7, 0x10, 0x2, 0x6, 0x80000000, 0x1ff, 0xfffffffffffffff9, 0x7fff, 0x5, 0xffffffffffffffe1, 0x0, 0x6, 0x8000, 0x77, 0x400, 0x2, 0xffffffff, 0x6, 0xb0, 0x91b0, 0x9, 0x401, 0x1, 0x0, 0x4, 0x4, 0x2bd8e4a9, 0x8, 0x3ff, 0x8097, 0x100000000000, 0x0, 0x1ff, 0x1, @perf_config_ext={0x4, 0x7fff}, 0x8000, 0x0, 0x6, 0x6, 0x3, 0x3, 0x6}, r2, 0xd, r0, 0x9) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140)=0x5, 0x4) 03:24:03 executing program 0: 03:24:03 executing program 2: 03:24:03 executing program 1: 03:24:03 executing program 5: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:24:03 executing program 2: 03:24:03 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x3, {0x7, 0x1b, 0x3f, 0x800, 0x9, 0x2b2c, 0x2, 0xff}}, 0x50) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a4000000300000002bbd7000ffdbdf2515000000f189595f8295a64eef6f0570846a49148f84b55d6808d53920e11bf4e529d1ea9cc6561d1e74a2691a92c65eeea1230becb5ca0ac1bffd29528df86457363e947f2bb4f1f11a93a16e6e7213c8b1668ac4215ac14e58b3ef25b9bc5ae59f5f688ff8b735c7207776ffcb6c9620d6c1d34c926a7fde7c12267782ba87fb234a1679fd654f23eff0ce9fde84eaf46166f46e00"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4044805) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)="fb1636dd2c5f605178b56e74b6fcd1f97a65dc14a3a6e3cc3518796e23ae1c75d5ea535e591ab59e25953531483483eddef52ac69b494cce9d17848ae44922d06a3c8317771b0005867cff04908b482fa0da7374395a4b121506ffedb701d85d458be109756ceccd4d0e2c5d9e220fb86a2270a5bf3bd2c4e96b1f25fa4f96191626f875a1a1d0c6b9b11ee0772f34b33f300a0f717f8c7deda541cd033a11b904deca88474aaf3c531aa294a167ae3617cc0b04023407c15a4a512a9e7be2a4db30360c79e18c4f6159396fea8d92652e0179a546a866484d86f3c469c71b9626871e55205a6bd80477128a3b61a9513123e4311c1aaa", 0xf7, 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000ac0)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000b40)="77a5ea11d7e5ba563a498148dbc63c91da683ba11425bd0b7ab85e0463b88113b705c3b60826b8c5dd260c2c1ba41f78e39fff7a0ed610b230243cf413695280255970ff2b01d44efe0932a91145920d7c1bd49aa9ce3df580237e0953a161731473918df015697236f4c87575d34cf4768ef0a097", 0x75, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000a00)=[{&(0x7f00000004c0)="daf522d642a18b62b56014cc45bbe224d8b05c8dc32d4557b790b210e7b7a6df5090e3c48241e8d13d6b1e9ed5ad36610633e509b9636dd9be4b442cc47d44166e2ae5730f747086f9a476257fc75358b41145e3ddfb235d3e7d16a0172f127d32804a243ddbd757ae5c0d11ab52007249cf2e92179a80616d6dc8455477501be4d011162fc0c724b22f91e91f5ef887e88bafd7c32d7b8615cd29cd0bf497b7b6c0fb98cbdf0f1394f3313c09aa96234ef3590cfda717452954c375bd918020b492622221a8a92a74dc17888d1d06b0c8e601163ba08a78", 0xd8}, {&(0x7f00000005c0)="d341c4d0faad2d2e9737c2f9eabbf566d731798121eba879176fb31fc72a31cfe5200009b9c11c9c66e33b21a711cc32630f", 0x32}, {&(0x7f0000000600)="256c60a1b5bfb4b2d9381b9bc86805f89dd616acb0b31d13f795159c05481d9a4de6684248b4e55a10c217061f5b0a21304edd3ea474134d00db0cdaa8d7897f0e58d4968a1c77cf07475f2d2276c26a8e913ea5432f74d9cbb333137210a978594624f1080a11f0d01d80bb2d2028eac5a8284948b6bf15979fb5fcc941554646ab6b5a62fe5edfa83d14db0bf0c8350bff03cbd8c9b3f7851a5db5153b94712a2bf956e4ddf4151281aa321566f021055869c6f9caf4267286f2e68475fba29159519df4e592154a99d7671fa6332da93d87a2e7025a3b96", 0xd9}, {&(0x7f0000000700)="08f5030104bd9fad23b5b09e2c88f8a0e9eb7e60eb74f0c3c6ac073a6abed336935618d5c5c61fd06da5956bf83b6bae46b4d0a20f31e6412e04200dec4922a92e2d960772431cbf12f900a406bbfeddb89c6fa4b9a207c3ae20b85d6d9bfd78af", 0x61}, {&(0x7f0000000780)="06626bf7e8d5861413cdca2a8baeaf6375302e1638167e2c2f1b13a4e8049b9b1beb1f02d388862b697ec31bca18", 0x2e}, {&(0x7f00000007c0)="3c0aa733f0db4f5b", 0x8}, {&(0x7f0000000800)="6964822e1dabb2e1acb58f7e60dbcc7a790d58c3702b1e7acfd28557831f6293a25f487c4751e3e0c6fc26f2759cba75e428b8c7f2754f3732bc35a2721f92568515d83af134eb8060792c61933acc475dd590e072", 0x55}, {&(0x7f0000000880)="5ebc0a4544dc83f7c5172e1cb859154acf62886f09c06269559facbac1ff556b8c33c844915ec5014b7f0fcc534580ed6adef1318f2d3390c81377cc6727e9407917d00a4810c4f8cb4c659988104822e2b87dd5f41e1c646dfe274434a1da54810be4bc996c9330563abd5a4d32b97776cee8e28e3c801d78b82a4f4aa2c84f32", 0x81}, {&(0x7f0000000940)="e14630d91ffd87d5d0d5d1e3d6ecc958654ab7db0deefd39713297d0b6f19c7ec07f1ac963e8b23de0717f535c184aec1173f5dbb17485b27dfbe95656c00290596cb67451028d671b44c1a99746a28d9fe34d850a65cad70e85f626103ad5f1a5a9af2c858ea0110e1767574144ac06bff2dbc076ad009ee21a7d33361f8ec30149369589b31bd68bdefdd280bc9cb38359b88fe78e4d39", 0x98}], 0x9, r3) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:03 executing program 0: 03:24:03 executing program 7: [ 283.805856] device bridge_slave_1 left promiscuous mode [ 283.811783] bridge0: port 2(bridge_slave_1) entered disabled state 03:24:03 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() waitid(0x1, r2, &(0x7f0000000000), 0xc, &(0x7f0000000240)) pwrite64(r0, &(0x7f00000000c0)="16a3b25335f2ff9f285fd0b1ed627fb0ae29296e18c0fd39f701073ea66bd7c25c918aac351fd1c93d86dd3af9588b16c0d8af230c5418e49760800dda", 0x3d, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 03:24:03 executing program 5: [ 283.901031] device bridge_slave_0 left promiscuous mode [ 283.907054] bridge0: port 1(bridge_slave_0) entered disabled state 03:24:04 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 03:24:04 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000000c0), 0x5, &(0x7f0000011000/0x2000)=nil, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 284.197472] team0 (unregistering): Port device team_slave_1 removed 03:24:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 03:24:04 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4c, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2f}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb8292ead748eacaa}, 0x4000) ptrace$getsig(0x4202, r1, 0xfffffffffffffffb, &(0x7f00000001c0)) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:04 executing program 0: clone(0x2102001fdc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000e40)="0000000000007225f78380807dde5053601841a0d0f82b74374852b01f125997622dc4a5e71d2ce5ac32ff90824fa25e59073487cf36ad576e32926b04894da740f7e9c0ffb42c356a1f285bfc8f0b8c6f72ef151dab4c5c2a5a751f04bfc69ac5c3b5168a6d13d826b1ed0c7527d58f54adc12fca1f25c8fc2586ea4d90f84dabcdec291fb780a39a117d12b0893b182098dceed33b222a1d413709ae355d4d297fe42c5d4e9d8bbd9d0c709cae47e88f8aa22a505b3e995b501f0d3753cd3510e87436612b401305f316177f6d4d4c70fd9d2621c3707ad88da7852596d89a59cb74505e675ac6ebc03faa3ee99889176b571135031afc973c52c5f6437b8143002b30d8fb92011c4994cc024e40497b2daeb06ad5308af486d0178a418f6bdb6940f07dc6e5cf1a3c852b401e3ecec45d22fd687928411b83f68bf7be4b21fdf0033cf949b8a76aa65d68ad885967c2cc3c2d60ec74fcf5de162c94ffe3e15775c1a1cfd9818d4c17a2f8d0a7302538f079e7b128ef123c8bb909000000000000003814c2aea86c35fbf4244a64635d32ff12e4dcb3df56e5d5d3882a9984993f8a7fef72d875d21c1e3bb2bc3e6e79a2b6d322f710f0378abc2095d32139e39f3223db9961309295e4c3c8e1b0001dd757aa000000000000000000000000000008eca80c7b0c", 0x0) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1000) 03:24:04 executing program 7: mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)) 03:24:04 executing program 5: r0 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:24:04 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000e40)=""/39, 0x27}, {&(0x7f0000000e80)=""/160, 0xa0}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/237, 0xed}], 0x5, &(0x7f00000041c0)=""/105, 0x69}, 0x40) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000004280)=0x800, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105518, &(0x7f0000001000)) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7ff, 0x410000) [ 284.262021] team0 (unregistering): Port device team_slave_0 removed [ 284.342679] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 284.439975] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 284.609689] bond0 (unregistering): Released all slaves [ 284.773942] IPVS: ftp: loaded support on port[0] = 21 [ 285.911859] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.918411] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.926106] device bridge_slave_0 entered promiscuous mode [ 285.975791] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.982242] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.990191] device bridge_slave_1 entered promiscuous mode [ 286.039145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 286.088449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 286.233976] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.287437] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.520452] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 286.528420] team0: Port device team_slave_0 added [ 286.577204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 286.584986] team0: Port device team_slave_1 added [ 286.634009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.684482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.734147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.741982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.750817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.795725] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.802994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.811822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.316296] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.322925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.329816] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.336292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.344198] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 287.714777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.251734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.426270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 289.599469] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 289.605811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.614456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.786782] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.798681] syz-executor1 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 290.812285] syz-executor1 cpuset=syz1 mems_allowed=0 [ 290.817557] CPU: 0 PID: 9684 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 290.824944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.834483] Call Trace: [ 290.837146] dump_stack+0x14b/0x190 [ 290.840851] dump_header+0x2c3/0x16f0 [ 290.844741] oom_kill_process+0x35b/0xfa0 [ 290.849024] ? mem_cgroup_scan_tasks+0x279/0x600 [ 290.853979] out_of_memory+0x14a4/0x1d00 [ 290.858146] try_charge+0x1a7b/0x2f80 [ 290.861991] memcg_kmem_charge_memcg+0xd6/0x270 [ 290.866841] new_slab+0x83b/0x1b60 [ 290.870428] ? __msan_poison_alloca+0x173/0x1f0 [ 290.875182] ? __cpuset_node_allowed+0x60/0x4a0 [ 290.879985] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 290.885475] ___slab_alloc+0x15bf/0x1fa0 [ 290.889648] ? iget_locked+0x552/0x11c0 [ 290.893703] kmem_cache_alloc+0x957/0xb20 [ 290.897918] ? iget_locked+0x552/0x11c0 [ 290.901951] iget_locked+0x552/0x11c0 [ 290.905776] kernfs_get_inode+0x8f/0x740 [ 290.909905] kernfs_iop_lookup+0x25c/0x3f0 [ 290.914231] ? kernfs_create_empty_dir+0x4f0/0x4f0 [ 290.919192] __lookup_hash+0x26c/0x510 [ 290.923102] filename_create+0x302/0xa90 [ 290.927257] do_mkdirat+0x10c/0x670 [ 290.930927] __se_sys_mkdir+0x76/0x90 [ 290.934746] __x64_sys_mkdir+0x3e/0x60 [ 290.938670] do_syscall_64+0xb8/0x100 [ 290.942493] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.947701] RIP: 0033:0x4564d7 [ 290.950927] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad c0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8d c0 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.969845] RSP: 002b:0000000000a3f688 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 290.977741] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004564d7 [ 290.985032] RDX: 0000000000a3fce3 RSI: 00000000000001ff RDI: 0000000000a3fcd0 [ 290.992327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 290.999618] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000010 [ 291.007185] R13: 0000000000412a80 R14: 0000000000000000 R15: 0000000000000000 [ 291.014719] Task in /syz1 killed as a result of limit of /syz1 [ 291.020903] memory: usage 392kB, limit 0kB, failcnt 97 [ 291.026275] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 291.033157] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 291.039388] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 291.059195] Tasks state (memory values in pages): [ 291.064262] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 291.073814] [ 9684] 0 9684 17553 8390 118784 0 0 syz-executor1 [ 291.082943] Memory cgroup out of memory: Kill process 9684 (syz-executor1) score 8419000 or sacrifice child [ 291.092981] Killed process 9684 (syz-executor1) total-vm:70212kB, anon-rss:72kB, file-rss:33488kB, shmem-rss:0kB [ 291.104687] oom_reaper: reaped process 9684 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x24, 0x200500) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x4333204e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x58, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0xb628}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0xf7, @local, 0xc5}]}, &(0x7f0000000280)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x4}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4001) 03:24:11 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 03:24:11 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x5, 0xfffffffffffffffe, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000140), 0x7}]) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xb5, "fac5b2804ea3c9b3b85be6a1f67ff7957ca21019ddd46af4651c891cf44e6ddd1182ca0fa71ea519ad69d94067cf18fe333f7c4664ce53efac882ada04501873bb4fd89ede0ef2687feb5d8d3f1ca38268ca903bef44f09f098193d0ca9014da53052d5fdd4dbbc6ca19c6469bc3e23fc174426cb6192b1c25b2b36d4f9ccb6143d9bcab3675c20dd3aaa735def7412011da66084c6e82138a713c10ce64583b6ac663a5d3c9f40c381b43e6b693f3811d9feb4dbd"}, &(0x7f00000000c0)=0xbd) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x7}, &(0x7f0000000240)=0x8) 03:24:11 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:24:11 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x155556ab, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:11 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x4200, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000440)={0xfffffffffffffffd, 0x11, 0xc8b4}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000300)=""/237) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaad30f0000ffff86dd60c22df700103b00fe800000000000000000000000000000fe8000000000000000000000000000aa0000000004019078000087ae00ca8345cd990c4b"], &(0x7f0000000080)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x4, ""/4}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x36, 0x2, 0x8}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000400)=r0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x401, 0x2, "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", 0xe7, 0x7, 0x7, 0x400, 0x5, 0x100000001, 0x3}, r2}}, 0x120) 03:24:11 executing program 1: socketpair(0xe, 0x7, 0x507b, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xb46) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x3b, 0x0, @dev, @local, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000080)) 03:24:11 executing program 2: r0 = socket$inet6(0xa, 0x20000000080006, 0x7ffffd) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() kcmp(r2, r2, 0x4, r1, r1) sched_setscheduler(r2, 0x5, &(0x7f0000000080)) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000200)={0x3, 0x1, 0x2, 0x798, 0x80000001}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000058020000180100005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000001200007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000c97305fde6a4cc20c5df1c9d78e05f43673b01ed106fd67942fe5777b828d30f7d627e9e0a4785e19e6a256028a3ead9bcd084656d37434c"], 0x4d0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x9e, 0x323, 0x7}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r3, 0x3}, 0x8) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x7}}, 0x18) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000002c0)) 03:24:11 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:11 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) fgetxattr(r1, &(0x7f00000000c0)=@random={'trusted.', '\x00'}, &(0x7f0000000240)=""/139, 0x8b) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0xffffffffffffffff) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000140)={@broadcast, @rand_addr=0x8000, @loopback}, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:11 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000058020000180100005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000d800000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000000000007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) 03:24:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sync_file_range(r0, 0x0, 0x57, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x12d) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x68bc432, 0x2000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0x6, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @local}, r3}}, 0x1ff) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) 03:24:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000001c00120004000100626f6e64000000000c00020008000f0000000000"], 0x1}}, 0x0) 03:24:11 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x2102000ff9, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/pid_for_children\x00') 03:24:11 executing program 6: clone(0x48000000, &(0x7f0000000080)="18b1f4b0bc6bc33192478ba69d7db55af15f6bb693d7146a2770beef3d59ac43b641b6c8a5dd8a6e0c90d862807b129ccdd42e003417568253e7a7b8795c5cbc3bad236ff5adee242d4fcef3c923cb66303965a9c05a8314837ce4f4b00c8438e96562e448", &(0x7f00000010c0), &(0x7f00000011c0), &(0x7f0000000100)="e2b7983b58d0e33180d9a9e8cde1873a5247f8e90ff139ee6b0cfe5eb0fa6ac85b25ed") r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) write$binfmt_aout(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0000091f0b000000a20000009200000095000000789200000000000000000000d7a5db8311c42b569f4602bdd9014fc8dec9564e54dce7f7ace904a6629b5ded988dd3af4faced291905af2f6993139784d30ba65e8e52c80c0d0674099b6ba74c489045fed8536a86c8360beaf1f91c03590fc8b664182cc4e76ab92291473d69cad2c68f7e11593ed4a403238136b20f0b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8960000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b38b4b06676ae1294b68c38e0281c99ff0258afa6ad7b174e0e5505a7023e3c5640ccd89b34f638a6ffe337eacde8e426e0c141eb76e2bdec600c62c9ec42d1632c8cb724"], 0x892) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x8) [ 291.624308] device bridge_slave_1 left promiscuous mode [ 291.630318] bridge0: port 2(bridge_slave_1) entered disabled state 03:24:11 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x4000, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00'}, &(0x7f0000000740)=0x44) getsockname(r1, &(0x7f0000000080)=@hci={0x1f, 0x0}, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snapshot\x00', 0x8000, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in6, 0x4e23, 0x2a5, 0x4e23, 0x0, 0xa, 0x80, 0xa0, 0x16, r2, r3}, {0x7d, 0x1f, 0x6, 0x3, 0x401, 0x0, 0x8001}, {0xffffffffffffffff, 0x100000000, 0x7f, 0x4}, 0x6, 0x6e6bb8, 0x0, 0x1, 0x1, 0x2}, {{@in6=@remote, 0x4d2, 0xff}, 0xa, @in6=@loopback, 0x3504, 0x1, 0x2, 0x6, 0x409, 0x8, 0xfffffffffffffff8}}, 0xe8) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000500)=""/99) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x6, {{0xa, 0x4e24, 0x10000, @loopback, 0xb300}}}, 0x88) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ptrace$getregs(0xe, 0x0, 0x7, &(0x7f0000000580)=""/158) 03:24:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80003, 0xc) acct(0x0) write(r1, &(0x7f0000000000)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 03:24:11 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 291.697522] device bridge_slave_0 left promiscuous mode [ 291.703324] bridge0: port 1(bridge_slave_0) entered disabled state 03:24:11 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x50a84501, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8, 0x5e, 0x3, 0x6, 0x3e, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x2c) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000058020000180100005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000170000000000000000000000000000000000000000000000000000000000000000d40e000000000000000002000000000000000014000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000000000007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) 03:24:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x400, 0x400) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x40000, 0x0, 0x12, r2, 0x0) write$nbd(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="67446698010000000000020004000000f140f39efa8b1e9fa51051576e8cd8df137d8f1cd696de716497e67fa118b9c133e2e24d1ada47a4c10d9ddfb9d7907836ea1ab7f4a24ef73b4a197b3bb6b046a8884dffa8c3c3f726a0e3bfe983e0ad61246562ff205aacc4179528c70799c86601e8104a"], 0x75) clone(0x0, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000100), &(0x7f00000007c0)) 03:24:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sync_file_range(r0, 0x0, 0x57, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x12d) r2 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x68bc432, 0x2000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0x6, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @local}, r3}}, 0x1ff) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) 03:24:12 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1555555555555813, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 292.029950] team0 (unregistering): Port device team_slave_1 removed [ 292.047035] IPVS: ftp: loaded support on port[0] = 21 [ 292.112144] team0 (unregistering): Port device team_slave_0 removed [ 292.176652] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 292.224803] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 292.320162] bond0 (unregistering): Released all slaves [ 292.407389] IPVS: ftp: loaded support on port[0] = 21 [ 292.616831] IPVS: ftp: loaded support on port[0] = 21 [ 293.794154] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.800829] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.809084] device bridge_slave_0 entered promiscuous mode [ 293.886130] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.892677] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.900524] device bridge_slave_1 entered promiscuous mode [ 293.977331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 294.053294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.286252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.368760] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 294.518702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 294.525691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.677716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 294.685425] team0: Port device team_slave_0 added [ 294.732175] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 294.739797] team0: Port device team_slave_1 added [ 294.786511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.836994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.885997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 294.893218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.901896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.947067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 294.954688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.963420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.466430] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.472938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.479828] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.486328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.494766] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 295.506801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.361084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.535063] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 297.704477] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 297.710755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.718823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.886859] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.862491] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 298.873433] syz-executor1 cpuset=syz1 mems_allowed=0 [ 298.878700] CPU: 1 PID: 10047 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 298.885984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.895330] Call Trace: [ 298.898192] dump_stack+0x14b/0x190 [ 298.901846] dump_header+0x2c3/0x16f0 [ 298.905657] ? __msan_poison_alloca+0x173/0x1f0 [ 298.910354] oom_kill_process+0x35b/0xfa0 [ 298.914532] ? mem_cgroup_scan_tasks+0x279/0x600 [ 298.919329] out_of_memory+0x14a4/0x1d00 [ 298.923404] try_charge+0x1a7b/0x2f80 [ 298.927231] ? __kprobes_text_end+0x207d8/0x207d8 [ 298.932111] mem_cgroup_try_charge+0x7c1/0xf20 [ 298.936715] mem_cgroup_try_charge_delay+0x7e/0x140 [ 298.941736] wp_page_copy+0x7ba/0x2670 [ 298.945633] ? __msan_poison_alloca+0x173/0x1f0 [ 298.950318] ? kmsan_set_origin_inline+0x6b/0x120 [ 298.955187] do_wp_page+0xe4e/0x2ff0 [ 298.958926] handle_mm_fault+0x3265/0x81b0 [ 298.963176] ? kmsan_set_origin_inline+0x6b/0x120 [ 298.968074] __do_page_fault+0xc8b/0x17e0 [ 298.972237] do_page_fault+0x98/0xd0 [ 298.975954] ? page_fault+0x8/0x30 [ 298.979493] page_fault+0x1e/0x30 [ 298.982942] RIP: 0033:0x43e471 [ 298.986167] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 299.005406] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 299.010767] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 299.018030] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 299.025297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 299.032569] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 299.039853] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 299.047664] Task in /syz1 killed as a result of limit of /syz1 [ 299.053774] memory: usage 396kB, limit 0kB, failcnt 106 03:24:19 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x16}]}) 03:24:19 executing program 6: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffb) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) keyctl$search(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180), 0x0) socketpair(0x2, 0x4, 0x81, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat(r3, &(0x7f0000000240)='./file0\x00', 0x28, 0x800) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x2, r3}) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000003c0)={0x7a, 0x5ac, 0x100000000, 0x11, 0x8, 0xfffffffffffffffd, 0x80000000, 0x1, 0x7, 0x170}) r6 = syz_open_procfs(r1, &(0x7f00000000c0)='mounts\x00') accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', r7}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0x7, 0x6, 0x80000000, 0xffff}) 03:24:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:24:19 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x4) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:19 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = getuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', r1, r2, 0x1000) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x2) getpid() msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x10000) 03:24:19 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x3, 0x7}) r1 = socket$inet(0x10, 0x3, 0x2) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000240007031dfffd946f61830020200a000900000000008568f1ffffff0400ff7e", 0x24}], 0x1}, 0x0) 03:24:19 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000536e07000000040000008004000058020000180100005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000000000007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) 03:24:19 executing program 7: io_setup(0x80000000, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x8000) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x30f, 0x8, 0x6, 0x0, 0x2, 0xa29b, 0x7, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x1000, @ipv4={[], [], @multicast2}, 0x3}}, 0x1, 0x4, 0x80000001, 0x22e5, 0x8}, &(0x7f0000000280)=0x98) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0xfff, 0x8000) r7 = getgid() setgroups(0x5, &(0x7f00000004c0)=[r3, r4, r5, r6, r7]) [ 299.059277] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 299.066122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 299.072404] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 299.092204] Tasks state (memory values in pages): [ 299.097175] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 299.106360] [ 10047] 0 10047 17553 8389 118784 0 0 syz-executor1 [ 299.115462] Memory cgroup out of memory: Kill process 10047 (syz-executor1) score 8418000 or sacrifice child [ 299.125513] Killed process 10047 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 299.137581] oom_reaper: reaped process 10047 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:19 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @in6={0xa, 0x4e23, 0x9, @local}}}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:24:19 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:19 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) dup2(r0, r1) 03:24:19 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x7, &(0x7f0000000000)=0x9) sched_setscheduler(r2, 0x5, &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x7, 0x1000, 0x1}) 03:24:19 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000600)=0x4, 0x4) r1 = socket$inet6(0xa, 0x80006, 0x0) r2 = fcntl$dupfd(r1, 0xfffffffffffffffe, r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 299.558042] device bridge_slave_1 left promiscuous mode [ 299.563930] bridge0: port 2(bridge_slave_1) entered disabled state 03:24:19 executing program 0: socketpair(0x0, 0x80f, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x3, "e81a3a"}, &(0x7f0000000100)=0xb) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x0, 0x101}, &(0x7f0000000180)=0x8) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000700ff3f0300000045000107000000140800005d14dfb51571a448c03d1a1639062498e067ae4f79d9", 0x39}], 0x1) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)={0x3, 0xe9, 0x8, 0x10000000000000}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x100000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x61d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008081) 03:24:19 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x10, 0x5, 0x6}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r3, 0x101, 0x20}, 0xc) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:19 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x3, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07e9a63b6b9f314aa2c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2cbc6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421476d8ead8882947ffa1fb4c050727beb12c57e06ff5900000000000000000000000000000000000000000000") bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$SG_GET_NUM_WAITING(r1, 0x40086602, &(0x7f0000000000)) [ 299.641955] device bridge_slave_0 left promiscuous mode [ 299.647904] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.845420] Unknown ioctl 1074310930 [ 299.871668] team0 (unregistering): Port device team_slave_1 removed [ 299.887428] Unknown ioctl 1074310930 [ 299.908389] team0 (unregistering): Port device team_slave_0 removed [ 299.950295] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 299.995450] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 300.081208] bond0 (unregistering): Released all slaves [ 300.204332] IPVS: ftp: loaded support on port[0] = 21 [ 301.356504] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.362934] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.370524] device bridge_slave_0 entered promiscuous mode [ 301.417224] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.423692] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.431377] device bridge_slave_1 entered promiscuous mode [ 301.477660] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 301.524849] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 301.665476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 301.715414] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 301.940692] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 301.948373] team0: Port device team_slave_0 added [ 301.994862] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 302.002280] team0: Port device team_slave_1 added [ 302.050114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.100984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.151936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.201127] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 302.208393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.217045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.712215] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.718677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.725568] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.732023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.740505] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 303.195115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.576840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.753461] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 304.923233] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 304.929487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.939884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.106253] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.330959] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 306.341875] syz-executor1 cpuset=syz1 mems_allowed=0 [ 306.347096] CPU: 1 PID: 10385 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 306.354383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.363732] Call Trace: [ 306.366331] dump_stack+0x14b/0x190 [ 306.369966] dump_header+0x2c3/0x16f0 [ 306.373769] ? __msan_poison_alloca+0x173/0x1f0 [ 306.378477] oom_kill_process+0x35b/0xfa0 [ 306.382658] ? mem_cgroup_scan_tasks+0x279/0x600 [ 306.387430] out_of_memory+0x14a4/0x1d00 [ 306.391513] try_charge+0x1a7b/0x2f80 [ 306.395343] ? __kprobes_text_end+0x207d8/0x207d8 [ 306.400232] mem_cgroup_try_charge+0x7c1/0xf20 [ 306.404851] mem_cgroup_try_charge_delay+0x7e/0x140 [ 306.409895] wp_page_copy+0x7ba/0x2670 [ 306.413808] ? __msan_poison_alloca+0x173/0x1f0 [ 306.418515] ? kmsan_set_origin_inline+0x6b/0x120 [ 306.423397] do_wp_page+0xe4e/0x2ff0 [ 306.427157] handle_mm_fault+0x3265/0x81b0 [ 306.431411] ? kmsan_set_origin_inline+0x6b/0x120 [ 306.436290] __do_page_fault+0xc8b/0x17e0 [ 306.440451] do_page_fault+0x98/0xd0 [ 306.444168] ? page_fault+0x8/0x30 [ 306.447708] page_fault+0x1e/0x30 [ 306.451161] RIP: 0033:0x43e471 [ 306.454382] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 306.473314] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 306.478691] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 306.485958] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 306.493228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 306.500501] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 306.507774] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 306.515699] Task in /syz1 killed as a result of limit of /syz1 [ 306.521780] memory: usage 396kB, limit 0kB, failcnt 115 [ 306.527223] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 306.534088] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 306.540305] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 306.560088] Tasks state (memory values in pages): [ 306.565018] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 306.574446] [ 10385] 0 10385 17553 8389 114688 0 0 syz-executor1 [ 306.583518] Memory cgroup out of memory: Kill process 10385 (syz-executor1) score 8417000 or sacrifice child [ 306.593649] Killed process 10385 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 306.605399] oom_reaper: reaped process 10385 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100, &(0x7f0000000040)="c9b7050077ebe6c47e9fdc0d7fd39114a9a204f577e568901d915124d066628b5e16c61924e4c15c6b65c5e9d6559b3444086d88bd4685835c6c8d43bd779aa99c3f3fe3981d0bc081fa8440b4bbc6") r1 = syz_open_procfs(0x0, &(0x7f0000000580)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r1, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x80086603, &(0x7f0000000000)) munlock(&(0x7f0000000000/0x1000)=nil, 0x1000) 03:24:26 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000008c0), 0xffffffffffffff3c) getsockname(r0, &(0x7f0000000080)=@hci, &(0x7f0000000140)=0x80) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x1}, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) listen(r0, 0x3) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000900)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x9c7}, 0x8) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:24:26 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='/dev/loop', 0xfffffffffffffff8) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="cd54cca4b8408d131ac656936f97a2f0a81a1f49c6165fd34de5b47a7a7f1c089ba8ffa5679c67fda70c938c1aeb27c4d699e5554eb0c779e6b139dfbadc64192840171108bf0e3cb626e8d3ab5a30083ed60d319f2b948b4644875a3c824132000e92305c89f7a64af4e6ebc8c8fd68d31b3c158c1046725d51e301d53654ec44d92d97b1af5d1672972908fa1e98cdcf5a7756dbed1e7f7a56846c0142200d4601d8613e272c6d56f21fcaa304f75770fc228c255b6b8e275c7fa5b5901eaa72b74a268829", 0xc6, r0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6c6f6f7030805ef8eaeca8423d5cde7f444549e2db00"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='btrfs\x00', 0x0, 0x0) 03:24:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote}, 0x2b1) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x6a000) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) 03:24:26 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x13, 0x10}, 0x2c) unshare(0x20403) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x7, 0x7ff}, {0x3, 0x7}, 0x6, 0x6, 0x3a}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000001c0)}, 0x20) getrusage(0x0, &(0x7f00000001c0)) 03:24:26 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) getrusage(0xffffffffffffffff, &(0x7f0000000240)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) sched_setscheduler(r1, 0x0, &(0x7f0000000000)) 03:24:26 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x57, 0x9, 0x2, {0x7fffffff, 0x6}, {0x401, 0x2}, @ramp={0x0, 0x80, {0x7, 0x0, 0x100000001, 0x80000001}}}) 03:24:26 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000240)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x585}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r2, 0x15}, 0x8) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:26 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/net/pfkey\x00', 0x6800, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000800)=0xc2f, 0x4) r1 = socket$inet6(0xa, 0x80006, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6tnl0\x00', 0x600}) 03:24:26 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000340)=""/101) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() r3 = semget$private(0x0, 0x3, 0x10) semctl$GETZCNT(r3, 0x7, 0xf, &(0x7f0000000240)=""/254) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:26 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000f80600000000000000000000400100004001000040010000280600002806000028060000280600002806000005000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000002d63000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5e70000000000000000"], @ANYBLOB="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"], 0x758) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0xfffffffffffffffd, 0x0, 0xa}) 03:24:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffe14) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1, &(0x7f0000000240)=""/174, 0xae, 0x13d727ab}, 0x10000) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 306.890223] device bridge_slave_1 left promiscuous mode [ 306.896568] bridge0: port 2(bridge_slave_1) entered disabled state 03:24:27 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x20800000000, r0) r2 = fcntl$getown(r1, 0x9) getpgid(r2) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 307.007287] device bridge_slave_0 left promiscuous mode [ 307.013060] bridge0: port 1(bridge_slave_0) entered disabled state 03:24:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x801, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xa0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080)) sendto$unix(r1, &(0x7f0000000040), 0x0, 0x81, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) 03:24:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000280)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x4000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xa3, "68fa7dc97e9c2392a4f1935282e52f1861dc4751130dfff52f9fcf7da29dca9198ba3c6a07c24f02025721436aad086dfb53f145ca5cbefc118331e3ab3d3ba0795dd8e34df01b20578051171da1ddbea2c933d308fdd9320934032489bdda63030cce9e1242e40ddb8ed8222cdb8f01f58bdb8ed51915c10900669f858e942aa58c6c0ececc66a57142e572d543f21cee52612483a54b4554f2f1af76b20e13219346"}, &(0x7f0000000140)=0xab) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, [], 0xf}, 0x3}}}, &(0x7f0000000240)=0x84) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800010300000000f1ff00000008001500070000000800160004000000"], 0xfffffffffffffd42}, 0x1, 0x0, 0x0, 0x80000000000000}, 0x4000000) 03:24:27 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000016c0)=0x8, 0x4) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() r2 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)='+system\x00', 0xffffffffffffffff) r3 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)="296e6f6465765b626465761c2d73656c6600", 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="1e490150048ca7e041deeff0691728e03e0f601045983919f65bff0804c9f550ee4ee51b5d99faf06392524ffde030294b91b26790a4375b36c0410d061830bf01b41bf39764161934e0dd2bbc120687193b", 0x52, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r4}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001540)={&(0x7f0000001440)={'speck64-generic\x00'}, &(0x7f0000001480)="3ed3b7d772eabdd9da4ed55260ac7a5ff41a3e019f0f29eca9f02d3b2971468fa584bc349b336dd960760ec0f356b8bab80aa62ed7dc92378b77c5a87abd657c42a5e4be73da2a456e0b89078134a7970a17d63e093187d8e966bdc77ffc16ebe306188da3079e1be701770249ebd79ef43b78b1da706a4d94dc13abe3ac4d01fc2ba84a", 0x84}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) syz_execute_func(&(0x7f0000001580)="8fc850eea30000000001660f1b47012664400f740ac422f108b48900100002c441f8776542300ac4e15c155d0066450f3a618ac18029df00650f0302f083960000000000") fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2, 0x4]) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001600)={0x0, 0x4865, 0x6, 0xffffffffffffff85}, &(0x7f0000001640)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001680)={r5, 0x100000001}, 0x8) [ 307.331933] team0 (unregistering): Port device team_slave_1 removed [ 307.412479] team0 (unregistering): Port device team_slave_0 removed [ 307.446494] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 307.495207] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 307.619135] bond0 (unregistering): Released all slaves [ 307.742776] IPVS: ftp: loaded support on port[0] = 21 [ 308.870931] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.877355] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.884976] device bridge_slave_0 entered promiscuous mode [ 308.933432] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.939881] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.947684] device bridge_slave_1 entered promiscuous mode [ 308.995159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.042820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 309.180596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 309.232869] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 309.459303] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 309.466947] team0: Port device team_slave_0 added [ 309.514322] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 309.522045] team0: Port device team_slave_1 added [ 309.571109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.621454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.672213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.722316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.729730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.738709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.238044] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.244493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.251391] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.257798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.265817] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 310.682807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.098083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.272100] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 312.451196] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 312.457440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.466141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.642990] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.667430] syz-executor1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 313.679330] syz-executor1 cpuset=syz1 mems_allowed=0 [ 313.684726] CPU: 0 PID: 10722 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 313.692047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.701431] Call Trace: [ 313.704046] dump_stack+0x14b/0x190 [ 313.707686] dump_header+0x2c3/0x16f0 [ 313.711535] oom_kill_process+0x35b/0xfa0 [ 313.715725] ? mem_cgroup_scan_tasks+0x279/0x600 [ 313.720501] out_of_memory+0x14a4/0x1d00 [ 313.724637] try_charge+0x1a7b/0x2f80 [ 313.728473] memcg_kmem_charge_memcg+0xd6/0x270 [ 313.733203] new_slab+0x83b/0x1b60 [ 313.736752] ? __msan_poison_alloca+0x173/0x1f0 [ 313.741458] ? __cpuset_node_allowed+0x60/0x4a0 [ 313.746134] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 313.751510] ___slab_alloc+0x15bf/0x1fa0 [ 313.755627] ? sk_prot_alloc+0xf3/0x520 [ 313.759679] kmem_cache_alloc+0x957/0xb20 [ 313.763860] ? __msan_poison_alloca+0x173/0x1f0 [ 313.768557] ? sk_prot_alloc+0xf3/0x520 [ 313.772580] sk_prot_alloc+0xf3/0x520 [ 313.776448] sk_alloc+0xf0/0xbb0 [ 313.779887] inet_create+0x780/0x1320 [ 313.783711] ? ipip_gro_complete+0x7e0/0x7e0 [ 313.788159] __sock_create+0x665/0xf30 [ 313.792110] __sys_socket+0x175/0x650 [ 313.795925] __se_sys_socket+0x8d/0xb0 [ 313.799844] __x64_sys_socket+0x4a/0x70 [ 313.803866] do_syscall_64+0xb8/0x100 [ 313.807681] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 313.812875] RIP: 0033:0x459bc7 [ 313.816072] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ba 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.835002] RSP: 002b:0000000000a3f688 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 313.842738] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000459bc7 [ 313.850019] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 313.857324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 313.864634] R10: 0000000000000064 R11: 0000000000000202 R12: 0000000000000010 [ 313.871913] R13: 0000000000412a80 R14: 0000000000000000 R15: 0000000000000000 [ 313.879279] Task in /syz1 killed as a result of limit of /syz1 [ 313.885552] memory: usage 396kB, limit 0kB, failcnt 126 [ 313.891008] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 313.897907] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 313.904121] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 313.923865] Tasks state (memory values in pages): [ 313.928785] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 313.938285] [ 10722] 0 10722 17553 8389 122880 0 0 syz-executor1 [ 313.947358] Memory cgroup out of memory: Kill process 10722 (syz-executor1) score 8419000 or sacrifice child [ 313.957470] Killed process 10722 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 313.969392] oom_reaper: reaped process 10722 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:34 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf, &(0x7f0000000080), &(0x7f0000000040)=0x4) socket$netlink(0x10, 0x3, 0x12) 03:24:34 executing program 7: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc}, 0x48) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000002c0)) unshare(0x20400) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000100)=ANY=[@ANYBLOB="010001000000000001000000000000000600000008000000ff010000000000000300000000000000ff040209000000000000000000000000000000000000000000000000000000000000000000000000e9c55463bc1855d56a23cb568e1d72d41f6a2caeb57d365849edc723a5b05637a996f6d5aeda5ce1ca7e7165072bd522a780c332153498ab4cb505f6da1b476a87ca3e730b3795606059ae78f9e674b295fc1fc09912b2ae392555ccdd5270d74eb26ad035e094ef8d2c86075f1b1790d27d08"]) fcntl$getflags(r1, 0x7) 03:24:34 executing program 6: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @local, [{[], {0x8100, 0x101}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @rand_addr}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x3, 0x14, [0xff, 0x2, 0x7, 0x1ff, 0x7]}) 03:24:34 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) r2 = msgget$private(0x0, 0x200) msgctl$IPC_RMID(r2, 0x0) 03:24:34 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000000)={0x6, 0xfffffffffffffffa, 0x7}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:34 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x3, r2) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x75) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x4, 0x0, [{0xf000, 0x0, &(0x7f0000000600)}, {0x4000, 0x44, &(0x7f0000000640)=""/68}, {0xf000, 0xd, &(0x7f00000006c0)=""/13}, {0x4004, 0x71, &(0x7f0000000700)=""/113}]}) 03:24:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x0, 0x0, 0x3}, 0x8, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0x100, 0x0, 0xcfb, 0x2}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) fstat(r1, &(0x7f0000000100)) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') ioctl$VT_RELDISP(r2, 0xb701) 03:24:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x10}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 03:24:34 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f00000000c0)=0x5) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 314.186007] netlink: 'syz-executor0': attribute type 16 has an invalid length. [ 314.206625] Unknown ioctl -2147199699 03:24:34 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xd1, "20982fc5a4e33f2e44dd395ef6630e01bd1e340891b5fb119dc5a826f8adbcdce2fa8d4c2457feeff73d5f4be28c5adf23643e1bf6e6714deea99612aca884ac6815559fd2df6917c4025fd038ed8f143a2ac73813a71bdfa686fbd85adaf6cddaa9d42dc4e80eb190dc82b129b69914550dca8b2a1e91e53ee0bb4a2d99a303ea6a55c277470460e88ba0f98eb8b931f61e35bc9ada3be187cddf6ec114917c10fad7accc3e59dc0b725c87a44100896b22e7d87583f3bbfbb0f4e22399d860f6a7e8ecb4386ca670e6ceb86baf8d5f99"}, &(0x7f00000001c0)=0xd9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r2, 0x1ff, 0xd8, "6847a50cdf84d6d9c09912785ecbef6315cf257ebeeac4f504b8d1f7ab65b304b4091de5d2d80e3e0c68947c28e58c64e22809fea95358adf5b878776d8cf79cfb3efb747a37b2e471483b0db1341c76d32c6d93514c1d38fcb4a4fa0e6e8bac6d7328d617eb32e15e1c2dec7842a32ab7c43a37aa4d7d3dc41e0fcf3e5a7c94a968afdfd8be4e03dd3817f982cd169c553279261af8189849fee8ff70be6fb65534ae21cd08d1f515dcc62e1dc2132c5c3467dc54b539c1554c29146f85a0cd6782a03cbd2bf0d452a600e91505344d5ab0bea1dc678e74"}, 0xe0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x6, @loopback}}, 0x401, 0x9}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0x2, 0x25}, 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x100, 0x7fffffff}, &(0x7f0000000140)=0xc) [ 314.229564] Unknown ioctl -1073195750 03:24:34 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x22000200, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000000)=""/20) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xa68) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$TIOCEXCL(r0, 0x540c) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 314.254444] Unknown ioctl -2147199699 03:24:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x4, 0x40, 0x1000, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff0105000000000000000000000000"], &(0x7f0000000200)=0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x20) [ 314.372681] netlink: 'syz-executor0': attribute type 16 has an invalid length. 03:24:34 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.ima\x00') ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0xd359, 0x5, 0x0, 0x8, 0x800, 0xba84, 0x80, 0x1, 0x1, 0x3}, 0xb) chroot(&(0x7f0000000240)='./file0\x00') 03:24:34 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x80000001) sched_setattr(r2, &(0x7f0000000600)={0x30, 0x1, 0x1, 0x276, 0x5, 0xff, 0x5}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x80, 0x8) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000000000007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) 03:24:34 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xfc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r3 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) getgroups(0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0xee00, 0xee00]) syz_open_dev$dmmidi(&(0x7f0000000540)='/dev/dmmidi#\x00', 0x0, 0x400000) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000580)="22ea94f698c111d1b9fff1ad786605aff63efcbdd83394baf2a4ae9e372b4d602fa68fee46b3e2b1397a8d75e3a198bf355cf9c3efca0509e735dbf637e81be13c20ef19452dff8f149bee186eac2d58cd9ca00189ebeea0722bb9614fdca2ae0ca3668891df6e45bf153c2e55c3ddb360e34256020791523078fbb320756bedc4cdc83b637507"}, {&(0x7f0000000640)="86512654d25453d2a6a94d4bf4dd25fd542299aa58dd52cd4e9296e7ebe265c6b9829d352eb7233c17d66d0e9574d87b859b2c8081374789854fe1f06d464ad7333f21b2a4de70d376e4171ed11991fbdc19276e397649d2a720cbe06f0be53f052bbe482a9178f3a598c3d4392189532801a3f162a8ba0bcaa325f23b7e1654cdb2c60b3b67964d280b2ef0e9d90fed70ba50b732ed805d404dba34ecb777e51899b83dc48ea61ad09d4baee876bd841f39b9c4b13a260a7aa34a06dc4731731efcfdae87d491887c768b9d8a269d732339fcc722193d6dd3f6d8a2145e7b09650b7ca5d74519712c3f073f0c1a3422b5f9b9386961"}, {&(0x7f0000000740)="7d5a1663ec9e5195cd0df7b1253c5884620f4dfd377e0497ccd80ddf898280189f7bff6bbe7303a7e67ff3c30a9464ac1fedb913bad95f13c3f9f9795443e22c052e8163f1769303e57937078a8678a5761ff8d3bea9a13c57c6d5018d0bed23322d0ad8dc267dc396a46bac412b5b039a002a069899fc84f13b63dc446b12cdbec920ded58984d0fff9d14d181e15642cff9829fab05bc038147637358a52c61f900ab00a1f179f7ea5859bef69a44729cecff1822084ec9a84c773fc9e6aa7987439afd84633d68735ffa918fed14b44563e19417c9fc965dc0035aabe267f14389d6e44268e209c9f01771958392aab2a6d5d07032a"}, {&(0x7f0000000840)="ca0606eca96072f2e9f04594c298999b51f89ebe84bce748601f4b217948cdb629d8ee462c72ca900edc11d26c1c05780565ac262282a2"}, {&(0x7f0000000880)="dee92d65f6c321a2d0adfaed3efe5cffd2cf168d6886d6acd93786382f0dc0d493697147235ae424cc584eb308ec27978fb430f262ac9829545fb296707d21e8fdd97ba05d40fd49fe0e7aee9982ec0d6b5e537e2226691bff8082e93bcd5e94b7510e20fd807b0995a1a364461d6cde74d1e39be1eab854a7080137de3e62234106fb31c6ecdffce5c210c4120a3edbd6c126b0aae3ae59ecf044026b6cae"}, {&(0x7f0000000940)="6f35797897a76323c875703792bd3096495190701867ccf7e731ad0421777e3197497054d1eff7779986e5"}], 0x226, &(0x7f0000000a00)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r0, r2, r1, r1, r2]}], 0x70, 0x2000c084}, 0x20000084) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 03:24:34 executing program 5: r0 = socket$inet_sctp(0x2, 0x80000000005, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x306, @dev={[], 0xd}}, 0x4, {0x2, 0x4e22, @remote}, 'bridge_slave_1\x00'}) sendmmsg$inet_sctp(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@authinfo={0x18}], 0x18}], 0x1, 0x0) [ 314.553021] device bridge_slave_1 left promiscuous mode [ 314.558910] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.649117] device bridge_slave_0 left promiscuous mode [ 314.654941] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.876578] team0 (unregistering): Port device team_slave_1 removed [ 314.923943] team0 (unregistering): Port device team_slave_0 removed [ 314.962956] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 314.981042] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 315.036971] bond0 (unregistering): Released all slaves [ 315.061208] IPVS: ftp: loaded support on port[0] = 21 [ 316.210340] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.216775] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.224528] device bridge_slave_0 entered promiscuous mode [ 316.271336] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.277771] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.285537] device bridge_slave_1 entered promiscuous mode [ 316.332986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 316.381652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 316.519291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 316.570378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 316.791476] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 316.799125] team0: Port device team_slave_0 added [ 316.846301] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 316.853912] team0: Port device team_slave_1 added [ 316.900765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.951458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.003038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.054965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.551555] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.558052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.564918] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.571331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.579241] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 318.098819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.412913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.588888] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.763930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 319.770154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.778893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.952500] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.937947] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 320.948999] syz-executor1 cpuset=syz1 mems_allowed=0 [ 320.954220] CPU: 1 PID: 11053 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 320.961558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.970927] Call Trace: [ 320.973524] dump_stack+0x14b/0x190 [ 320.977158] dump_header+0x2c3/0x16f0 [ 320.980961] ? __msan_poison_alloca+0x173/0x1f0 [ 320.985660] oom_kill_process+0x35b/0xfa0 [ 320.989944] ? mem_cgroup_scan_tasks+0x279/0x600 [ 320.994706] out_of_memory+0x14a4/0x1d00 [ 320.998774] try_charge+0x1a7b/0x2f80 [ 321.002641] ? __kprobes_text_end+0x207d8/0x207d8 [ 321.007551] mem_cgroup_try_charge+0x7c1/0xf20 [ 321.012363] mem_cgroup_try_charge_delay+0x7e/0x140 [ 321.017402] wp_page_copy+0x7ba/0x2670 [ 321.021310] ? __msan_poison_alloca+0x173/0x1f0 [ 321.025999] ? kmsan_set_origin_inline+0x6b/0x120 [ 321.030871] do_wp_page+0xe4e/0x2ff0 [ 321.034630] handle_mm_fault+0x3265/0x81b0 [ 321.038882] ? kmsan_set_origin_inline+0x6b/0x120 [ 321.043761] __do_page_fault+0xc8b/0x17e0 [ 321.047923] do_page_fault+0x98/0xd0 [ 321.051639] ? page_fault+0x8/0x30 [ 321.055180] page_fault+0x1e/0x30 [ 321.058645] RIP: 0033:0x43e471 [ 321.061838] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 321.080761] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 321.086124] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 321.093389] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 321.100656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 321.107922] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 321.115190] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 321.123136] Task in /syz1 killed as a result of limit of /syz1 [ 321.129697] memory: usage 400kB, limit 0kB, failcnt 135 [ 321.135148] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.141974] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.148182] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 321.167939] Tasks state (memory values in pages): [ 321.172840] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 321.182306] [ 11053] 0 11053 17553 8389 114688 0 0 syz-executor1 [ 321.191387] Memory cgroup out of memory: Kill process 11053 (syz-executor1) score 8417000 or sacrifice child [ 321.201471] Killed process 11053 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 321.213346] oom_reaper: reaped process 11053 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:41 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa0600000000000000aa08004500002800000003d70000009078ac141400ac1423bb8902907800000000000000000000000000000000"], &(0x7f0000000040)={0x1, 0x0, [0x0, 0x0, 0x0, 0x752]}) 03:24:41 executing program 0: r0 = socket$inet6(0xa, 0x1002000000002, 0x8) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc807ff315f85715070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40000101000, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000180)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFCONF(r0, 0x8983, &(0x7f0000000240)=@buf={0x5f, &(0x7f0000000300)="911ba5845a73ecbc2b88924b49ec25c2d02ad1c9509af562a3f4ac26d56ff63e9bbd1ee4ac0b79d82eaf1a7ca7677a373b8ba2d70f2fb05d485528ae4f09ced03c199be60cbad86eb494087f930d25731adc6b3995e5269e44b9bc8ac1960a"}) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 03:24:41 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000001a0000000000000000000700000004000000800400005a020000180100005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000000000007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) 03:24:41 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ptrace$pokeuser(0x6, r0, 0xfffffffffffffff8, 0x3f) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) quotactl(0x9, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000340)="cabbb52882766854d7d94595d2dcc95507dd137853c53012513d036c7bc46ad9c27401a527841a632c3c7e53a13fa6b0e6f5f897d8c049e9b57a5e78ff1f5b5b58d19461a7230a737ff1f58c85f8cb4e4b934e312631ed8b5b7e1791a3302346ae74f449e68a10115e74b81032d1f8d3d618386478183ea4bdee7d2f2ad5e49896bcd5e307db01c1da1f8fdb706a7ed8044fd3b823483b") setsockopt$inet6_tcp_int(r2, 0x6, 0xd, &(0x7f00000001c0)=0x3967, 0x4) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:41 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sched\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @loopback, 0x3ff}, {0xa, 0x4e20, 0x6, @ipv4={[], [], @rand_addr=0x3}}, r1, 0x4b3c}}, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)="2b5dd273797374656d62646576656d317070703165746830a100"}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r4 = socket$inet(0x2, 0x200000002, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r1}}, 0x18) getsockname(r5, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f00000000c0)=0xffffffff00000026) 03:24:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x30000, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r2 = dup(r1) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x1300, 0x0, &(0x7f0000004dc0)={0x77359400}) 03:24:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200001, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000006, 0x1ff) ioctl(r2, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x5}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x8, @empty, 0xa5}, @in={0x2, 0x4e20, @broadcast}], 0x78) 03:24:41 executing program 2: socket$inet6(0xa, 0x80006, 0x0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) userfaultfd(0x80800) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:24:41 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000240)=""/203, &(0x7f0000000000)=0xcb) [ 321.442844] tls_set_device_offload_rx: netdev lo with no TLS offload 03:24:41 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4000) ioctl$TIOCSBRK(r0, 0x5427) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 321.535981] device bridge_slave_1 left promiscuous mode [ 321.541942] bridge0: port 2(bridge_slave_1) entered disabled state 03:24:41 executing program 7: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x2, 0x4d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000080), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x12, 0x88db, 'veth1_to_bond\x00', 'syzkaller0\x00', 'bcsf0\x00', 'veth0_to_team\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x148, 0x1b0, 0x2e0, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x5, 0x3f8b}}}, @physdev={'physdev\x00', 0x70, {{'lo\x00', {}, 'eql\x00', {}, 0x8, 0x14}}}]}, [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}, @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:dhcpd_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0xb, 0x0, 'erspan0\x00', 'ip6gre0\x00', 'eql\x00', 'ip6tnl0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x100, 0x138, 0x168, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x8, 0x2}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@dev={0xfe, 0x80, [], 0x14}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], 0x4e23, 0x6e, 0x7, 0x4e20, 0x13, 0xf}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}]}, 0x550) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000080), 0xd000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x7f}, 0x1c) [ 321.626368] device bridge_slave_0 left promiscuous mode [ 321.632114] bridge0: port 1(bridge_slave_0) entered disabled state 03:24:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x45b0, 0x400880) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x4d5, @ipv4={[], [], @local}}}, 0x1d, 0x3ff, 0xfffffffffffffb9b, 0x7, 0x2}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r5, 0x4) ioctl$TIOCCONS(r4, 0x541d) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r5, 0x100000001, 0x8}, 0x8) close(r2) read$FUSE(r1, &(0x7f00000005c0), 0x1000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x9, [0x4540000000000000, 0x7b1, 0x80, 0x1, 0x8, 0xe24, 0x4, 0xfffffffffffffeff, 0xfffffffffffffff9]}, 0x16) 03:24:41 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'veth0_to_team\x00', 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') getsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000100)='-', 0x1}], 0x1, 0x0) 03:24:41 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) dup2(r1, r1) 03:24:41 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x7, 0x3f, 0xfffffffffffffff7, 0x5, 0x9, 0x3, 0x1, {0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @local, 0x4}}, 0x4, 0x5, 0x6, 0x5, 0x3}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value={r1, 0x7}, 0x8) r2 = socket$inet6(0xa, 0x80006, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74e572000000000000000000000000000000000000000000000000000007000000040000008004000058020000180100005802000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000000000000000000007f000001e0000001000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000069705f767469300000000000000000007369743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ffffffffffff00000000000000000000e0000002000000000000000000000000e0000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0f86bf6b57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000726f736530000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aae000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) 03:24:41 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x7}, 0x18) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 321.917094] team0 (unregistering): Port device team_slave_1 removed 03:24:42 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 321.990743] team0 (unregistering): Port device team_slave_0 removed 03:24:42 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) prlimit64(r2, 0x7, &(0x7f00000000c0)={0x10000, 0x8}, &(0x7f0000000600)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 322.032978] bond0 (unregistering): Releasing backup interface bond_slave_1 03:24:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8d12, &(0x7f0000000080)="0a5cc80700315f85715070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() set_robust_list(&(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)}, 0x18) sched_setscheduler(r1, 0x5, &(0x7f0000000140)) getitimer(0x3, &(0x7f0000000100)) r2 = dup(r0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000000c0)=0xb13) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) 03:24:42 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) seccomp(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x80000000, 0x1, 0x7, 0x80000}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xd6a4, 0x1ff, r2}) [ 322.126833] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 322.207041] tls_set_device_offload_rx: netdev lo with no TLS offload 03:24:42 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/52) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 322.331031] bond0 (unregistering): Released all slaves 03:24:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x7fe, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000100)=""/19) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0x4e) close(r0) [ 322.690447] IPVS: ftp: loaded support on port[0] = 21 [ 323.727067] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.733542] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.741639] device bridge_slave_0 entered promiscuous mode [ 323.787945] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.794363] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.801901] device bridge_slave_1 entered promiscuous mode [ 323.846393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 323.891995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 324.029578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.080323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.297987] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 324.305350] team0: Port device team_slave_0 added [ 324.351930] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 324.359323] team0: Port device team_slave_1 added [ 324.404800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.453230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.501926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.552205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 324.559535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.572755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.052848] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.059943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.066858] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.073283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.081501] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 325.522722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.874474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.049332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 327.216290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 327.222485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.231051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.400837] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.406872] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 328.417791] syz-executor1 cpuset=syz1 mems_allowed=0 [ 328.423049] CPU: 0 PID: 11436 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 328.430366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.439727] Call Trace: [ 328.442339] dump_stack+0x14b/0x190 [ 328.445971] dump_header+0x2c3/0x16f0 [ 328.449774] ? __msan_poison_alloca+0x173/0x1f0 [ 328.454485] oom_kill_process+0x35b/0xfa0 [ 328.458664] ? mem_cgroup_scan_tasks+0x279/0x600 [ 328.463432] out_of_memory+0x14a4/0x1d00 [ 328.467530] try_charge+0x1a7b/0x2f80 [ 328.471373] ? __kprobes_text_end+0x207d8/0x207d8 [ 328.476274] mem_cgroup_try_charge+0x7c1/0xf20 [ 328.480902] mem_cgroup_try_charge_delay+0x7e/0x140 [ 328.485949] wp_page_copy+0x7ba/0x2670 [ 328.489860] ? __msan_poison_alloca+0x173/0x1f0 [ 328.494549] ? kmsan_set_origin_inline+0x6b/0x120 [ 328.499439] do_wp_page+0xe4e/0x2ff0 [ 328.503180] handle_mm_fault+0x3265/0x81b0 [ 328.507435] ? kmsan_set_origin_inline+0x6b/0x120 [ 328.512318] __do_page_fault+0xc8b/0x17e0 [ 328.516487] do_page_fault+0x98/0xd0 [ 328.520201] ? page_fault+0x8/0x30 [ 328.523742] page_fault+0x1e/0x30 [ 328.527196] RIP: 0033:0x43e471 [ 328.530392] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 328.549300] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 328.554678] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 328.561951] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 328.569238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 328.576521] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 328.583804] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 328.591972] Task in /syz1 killed as a result of limit of /syz1 [ 328.598068] memory: usage 400kB, limit 0kB, failcnt 144 [ 328.603510] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 328.610360] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 328.616614] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 328.636412] Tasks state (memory values in pages): [ 328.641307] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 03:24:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}) ppoll(&(0x7f0000000040)=[{r1, 0x80}, {r0, 0x2000}, {r1, 0x400}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x8e90}, 0x8) sendto(r1, &(0x7f0000000100), 0x8dffffff00000000, 0x0, &(0x7f0000000240)=@generic={0x0, "99b409e36444d93aac384fc9a10c980c5cfa663b1afa79b1b82306e15f748a4f80032652cccb3def44c36b0c521ead013a8c2a30cf67a32edd72e2550805f347fdacbd9681ed36a80961d2441276c1f62eb6e0d41f78d53c858252549dd3d003a5a6d40c22e71858a2021b6e77e5a58be598bed1065add74fde2e9f913be"}, 0x80) 03:24:48 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x8000, 0x4) 03:24:48 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) 03:24:48 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @multicast1}}, [0x7fffffff, 0x80000001, 0x3f, 0x2, 0x9, 0xefa7, 0x0, 0x0, 0x20, 0x8, 0xf7, 0x7fff, 0xffffffffffffff99, 0x3ad, 0x82]}, &(0x7f0000000440)=0x100) write$FUSE_OPEN(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) ioctl$UI_DEV_CREATE(r0, 0x5501) creat(&(0x7f0000000480)='./file0\x00', 0xc) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {&(0x7f00000001c0)=""/181, 0xb5}, &(0x7f0000000000), 0x1}, 0xa0) getpid() fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:48 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xfffffeed) socket$vsock_stream(0x28, 0x1, 0x0) set_tid_address(&(0x7f00000000c0)) 03:24:48 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x0, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) getpid() 03:24:48 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x2f, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x0, 0x100]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0xf980, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) memfd_create(&(0x7f0000000080)='/dev/vcs\x00', 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) 03:24:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") unshare(0x44020000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [], @multicast1}, 0x8}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) [ 328.650976] [ 11436] 0 11436 17553 8389 114688 0 0 syz-executor1 [ 328.660054] Memory cgroup out of memory: Kill process 11436 (syz-executor1) score 8417000 or sacrifice child [ 328.670160] Killed process 11436 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 328.682117] oom_reaper: reaped process 11436 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:48 executing program 2: r0 = socket$inet6(0xa, 0x8000a, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = fcntl$getown(r1, 0x9) accept4(r1, &(0x7f0000000180)=@hci={0x1f, 0x0}, &(0x7f0000000540)=0x80, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000007c0)={{{@in6, @in6=@loopback, 0x4e24, 0x7, 0x4e23, 0xaf97, 0xa, 0xa0, 0xa0, 0x3f, r3, r4}, {0x1, 0x4, 0x8, 0x9, 0x6, 0x7, 0x6, 0x8}, {0x7, 0x0, 0xd961, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x0, @in6=@remote, 0x3506, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x3, 0xfffffffffffffffb}}, 0xe8) r5 = getpgid(r2) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r6 = getpid() ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000100)=0x91) sched_setscheduler(r6, 0x9, &(0x7f0000000640)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0), 0x10) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x9, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="3a15480498e7b7087896c23acb11eb76bb2a8351f1c3525d825af8dc6adcb0ca446f61c5ce9800bc386ac05a45582d8f36f0a74824891c2c04ab015db8fde9d5a8b5dd64ef6465119eda727d215042a617546900b1033e9b89ba8e7b122a625db4b0fe56c76f722dbd11b62ee18c013537f5", @ANYBLOB="ee5b762006671ed078ec825c5e400a9c085d041e22468832225a3fa248373de7ac31bebfd1666357823b77f24a0f2345d9517a464d90eaee7f36e3148737cfd38a54e1829a87b09405021e30760ebee5f59e759dd2a1a2a517ed7a8eb06fc73e251654d1a51733b3e13cc062305630027d12ee317d23b3f7e1481112c41d95228b2bbce32410fca9fcb384d1f61d5f74c17be8522d653d4c17b483bdf361309807ae32ead5cf1d6875c5ef48d9877bbc514efeab8cc07ddcc0cc071a42586c0cf4eb5c4cb45bdff5e2ecb0913883d1bcee6985611cda8c647636acd05aec2b67ef2501303661d6", @ANYRESOCT=r1, @ANYBLOB="eca40918c3501e30ca2a9c95ebd0e747cd13aa1a8dc1c120d1b8ff2ff5229601c2cfe9ae999eda603d46c3503784e34af85c63ccd8b788dc249191aa75fcf2428779e46ea3bdee2cf631b2525e038c99b804717334ec1287ac5d0c8f20a9b08302"], @ANYRES32=r2, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR, @ANYPTR, @ANYRESHEX=r5, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYPTR64], @ANYBLOB="61f8f5d125a01ca320f94d857f6c6d4e6a684fd094b1138d46c7d94aea2a9555d4295c37d00db791456be6ddd4fac9d8c9636a6eda66186847618559e41763f7679afad082af32eafca4b01dac68aea6e6a5f15aa0060cca8d9f5cd8276dbd23cbae3348f4febff1d94b2ad1e35c7ebc586089457a41b1b4f267ac56900de971c1185f85121ef89d97f3712cf0fb56018e25", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], @ANYRES64=r5], 0x3) [ 328.950804] IPVS: ftp: loaded support on port[0] = 21 03:24:49 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) creat(&(0x7f0000000000)='./file0\x00', 0x64a41ae3108a9d79) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0), 0xfffffdef) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) 03:24:49 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)) 03:24:49 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401201}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r2, 0x702, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl(r0, 0x8000000000009371, &(0x7f0000000540)="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") bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x7, 0x4) 03:24:49 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000240)="0bb88e198681f0e84fdb649fd0a0e45db2bf4969019540a1264c821a629b0a4682598b2ec2b8a6797713a60918e9c656c0f111ea133b6461c2a7cef7a204f39b55068ed9b534e973c5ebd060fff345ada638553f215bc084941f85ba211aaf014cf0abe1651bbe36b80774d4250c1c292dd4c3045d8acf8489aea40a19d126e7de38e1f2061a53381e4773e12d7a2cd586033d0ea89023f803b8703f701275056400056cca99a3901554ed5cd4f070669e3ce853909e12c03ba3381b408855742b69d398acbc2d0ee7") sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 329.204539] device bridge_slave_1 left promiscuous mode [ 329.210525] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.265331] device bridge_slave_0 left promiscuous mode [ 329.271259] bridge0: port 1(bridge_slave_0) entered disabled state 03:24:49 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80000, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) [ 329.385903] autofs4:pid:11748:validate_dev_ioctl: path string terminator missing for cmd(0x00009371) 03:24:49 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000640)={0xf, 0x8, 0xfa00, {r3, 0x8}}, 0x10) sched_setscheduler(r2, 0xfffffffffffffffe, &(0x7f0000000080)=0x1f5e) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 329.540690] team0 (unregistering): Port device team_slave_1 removed [ 329.619802] team0 (unregistering): Port device team_slave_0 removed [ 329.673841] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 329.718383] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 329.791647] IPVS: ftp: loaded support on port[0] = 21 [ 329.799455] bond0 (unregistering): Released all slaves [ 330.151106] IPVS: ftp: loaded support on port[0] = 21 [ 331.823794] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.830298] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.839048] device bridge_slave_0 entered promiscuous mode [ 331.919872] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.926418] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.935225] device bridge_slave_1 entered promiscuous mode [ 332.012726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 332.091188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 332.324939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 332.402988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 332.500230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 332.507147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.647947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 332.655388] team0: Port device team_slave_0 added [ 332.703916] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 332.711384] team0: Port device team_slave_1 added [ 332.764510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.816141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.867522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 332.875141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.884623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.930048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 332.937356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.948925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.454205] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.460670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.467519] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.473945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.482022] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 333.522741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.296902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.464985] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 335.631376] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 335.637754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.645692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.813514] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.810991] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 336.821901] syz-executor1 cpuset=syz1 mems_allowed=0 [ 336.827156] CPU: 1 PID: 11777 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 336.834461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.843811] Call Trace: [ 336.846437] dump_stack+0x14b/0x190 [ 336.850070] dump_header+0x2c3/0x16f0 [ 336.853874] ? __msan_poison_alloca+0x173/0x1f0 [ 336.858590] oom_kill_process+0x35b/0xfa0 [ 336.862777] ? mem_cgroup_scan_tasks+0x279/0x600 [ 336.867541] out_of_memory+0x14a4/0x1d00 [ 336.871626] try_charge+0x1a7b/0x2f80 [ 336.875450] ? __kprobes_text_end+0x207d8/0x207d8 [ 336.880333] mem_cgroup_try_charge+0x7c1/0xf20 [ 336.884975] mem_cgroup_try_charge_delay+0x7e/0x140 [ 336.890012] wp_page_copy+0x7ba/0x2670 [ 336.893920] ? __msan_poison_alloca+0x173/0x1f0 [ 336.898834] ? kmsan_set_origin_inline+0x6b/0x120 [ 336.903714] do_wp_page+0xe4e/0x2ff0 [ 336.907455] handle_mm_fault+0x3265/0x81b0 [ 336.911719] ? kmsan_set_origin_inline+0x6b/0x120 [ 336.916617] __do_page_fault+0xc8b/0x17e0 [ 336.920791] do_page_fault+0x98/0xd0 [ 336.924504] ? page_fault+0x8/0x30 [ 336.928041] page_fault+0x1e/0x30 [ 336.931489] RIP: 0033:0x43e471 [ 336.934680] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 336.953588] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 336.958971] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 336.966233] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 336.973507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 336.980772] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 336.988039] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 336.996659] Task in /syz1 killed as a result of limit of /syz1 [ 337.002794] memory: usage 400kB, limit 0kB, failcnt 153 [ 337.008673] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 337.015593] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 337.021866] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 337.041481] Tasks state (memory values in pages): [ 337.046371] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 337.055933] [ 11777] 0 11777 17553 8389 118784 0 0 syz-executor1 [ 337.064990] Memory cgroup out of memory: Kill process 11777 (syz-executor1) score 8418000 or sacrifice child [ 337.075072] Killed process 11777 (syz-executor1) total-vm:70212kB, anon-rss:68kB, file-rss:33488kB, shmem-rss:0kB [ 337.086930] oom_reaper: reaped process 11777 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:24:57 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x2) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:57 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x4) r4 = getpid() r5 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast1}, &(0x7f0000000540)=0xc) getsockname$packet(r0, &(0x7f0000001c40)={0x11, 0x0, 0x0}, &(0x7f0000001c80)=0x14) getpeername$packet(r1, &(0x7f0000001cc0)={0x11, 0x0, 0x0}, &(0x7f0000001d00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000001e40)=0xe8) accept4$packet(r0, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002040)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000002180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000021c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002200)={@local, 0x0}, &(0x7f0000002240)=0x14) accept4$packet(r0, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000022c0)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002300)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002400)=0xe8) recvmmsg(r1, &(0x7f0000005980)=[{{&(0x7f0000002440)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002680)=[{&(0x7f00000024c0)=""/250, 0xfa}, {&(0x7f00000025c0)=""/7, 0x7}, {&(0x7f0000002600)}, {&(0x7f0000002640)=""/12, 0xc}], 0x4, 0x0, 0x0, 0x7fffffff}, 0x1}, {{&(0x7f00000026c0)=@ax25, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002740)=""/6, 0x6}, {&(0x7f0000002780)=""/60, 0x3c}, {&(0x7f00000027c0)=""/251, 0xfb}, {&(0x7f00000028c0)=""/156, 0x9c}, {&(0x7f0000002980)=""/116, 0x74}, {&(0x7f0000002a00)=""/173, 0xad}, {&(0x7f0000002ac0)=""/177, 0xb1}, {&(0x7f0000002b80)=""/144, 0x90}], 0x8, &(0x7f0000002cc0)=""/201, 0xc9, 0x6}, 0xba}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002dc0)=""/206, 0xce}, {&(0x7f0000002ec0)=""/166, 0xa6}, {&(0x7f0000002f80)=""/87, 0x57}], 0x3, &(0x7f0000003040)=""/148, 0x94, 0x2}}, {{&(0x7f0000003100)=@can, 0x80, &(0x7f0000003200)=[{&(0x7f0000003180)=""/69, 0x45}], 0x1, 0x0, 0x0, 0x401}, 0x8}, {{&(0x7f0000003240)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005600)=[{&(0x7f00000032c0)=""/48, 0x30}, {&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/239, 0xef}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/84, 0x54}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/93, 0x5d}], 0x7, &(0x7f0000005680)=""/22, 0x16, 0x9}, 0x2}, {{&(0x7f00000056c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005740)=""/21, 0x15}, {&(0x7f0000005780)=""/146, 0x92}, {&(0x7f0000005840)=""/139, 0x8b}], 0x3, &(0x7f0000005940)=""/7, 0x7}}], 0x6, 0x0, &(0x7f0000005b00)={0x77359400}) getsockopt$inet6_mreq(r1, 0x29, 0xd13c69eb22f47823, &(0x7f0000005b40)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000005b80)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000005bc0)={@dev, @remote, 0x0}, &(0x7f0000005c00)=0xc) getpeername$packet(r1, &(0x7f0000005c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005c80)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000005cc0)={@local, @rand_addr, 0x0}, &(0x7f0000005d00)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005d40)={0x0, @rand_addr, @loopback}, &(0x7f0000005d80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000005dc0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000005ec0)=0xe8) getsockname$packet(r0, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006040)=0x14) accept$packet(r1, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000060c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000061c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000062c0)=0xe8) getsockname$packet(r3, &(0x7f0000007780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000077c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000007ac0)={@loopback, 0x0}, &(0x7f0000007b00)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000007b40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000007bc0)=0x80) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000008500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000084c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4080000", @ANYRES16=r5, @ANYBLOB="11002dbd7000ffdbdf250000000008000100", @ANYRES32=r6, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4c0202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400c400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000010008000100", @ANYRES32=r12, @ANYBLOB="6c0102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffffff08000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0f000008000100", @ANYRES32=r18, @ANYBLOB="3401020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400bf7a000008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r22, @ANYBLOB="f80102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff03000008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004004000000008000600", @ANYRES32=r25, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r26, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r30, @ANYBLOB="480102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040042ff6b0801000000400022050100000090dd0000ff0f000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400fdffffff08000600", @ANYRES32=r31, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400050000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r32], 0x8b4}}, 0x4000000) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:57 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendto$inet(r1, &(0x7f0000000600)="edfa1dcaa07d8e575b1ae7ec333290061e1a186c62820fd35941b85a610e3532ca7ae096ed5f63ffbf95611439ea07f4e45fbaa67e8d704df964f3ea9da887d9123b24fddd9957d06c37937a260e69a5eb403b0520fb3d7f4fc553f8441f14638bb2000efcc71cce976faab31de59a631f5e716567b18910d13cf9415ff4cba7bfaa4d872384bd42505bd244cd7041fcb0c883b183b7ed451996ad2f50fc94b7c94349fe3224456dc7d2ef8026af16dcc66a63de7a76beaa79e29e82b25e9fce21", 0xc1, 0x400c010, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000700)) 03:24:57 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3f}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @rand_addr}}, 0x1e) fcntl$setpipe(r1, 0x407, 0xd22) bind$pptp(r2, &(0x7f0000000240), 0x1e) 03:24:57 executing program 1: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x7, 0x5, 0x6, 0x0, 0x3, 0x0, 0x7, 0x1d}, 0xb) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e627d741b939021}) mq_unlink(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='irlan0\x00') write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000005, 0x202, 0x100003) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') fcntl$setstatus(r0, 0x4, 0x800) 03:24:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000140)) setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000180)="0db8eceaeba77e73a9bfd18f9ac58523eb01f1eb", 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040), 0x4) memfd_create(&(0x7f00000000c0)='\x00', 0x3) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) 03:24:57 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r0, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/199) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x2, 0x40) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xfffffffffffffffb) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x113, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r2}}, 0x18) msgsnd(r0, &(0x7f00000003c0)={0x1, "8ac709a17f44aa2a6ff6eddd3d366e5b7f6aca72aec88a77960ce1c16b"}, 0x25, 0x800) 03:24:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x100082) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x4740fd66) 03:24:57 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000680)=0x7, &(0x7f00000006c0)=0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={@loopback, @local, @mcast1, 0x10001, 0x54c, 0x4, 0x100, 0x4000000, 0x80, r3}) 03:24:57 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x8b, "ef444cd30e7c3b63a250ca84c3f6fccdac921bcd9902eb1bb314f2e2ceff6f88474fb137a10f838fa22b2e780c4085dd47e8817caa71aff4e48fe2786468cebeb2946d09121e9beb01a29451684067e77d26a521b5c1d49d686cf6308d07d5c60b1c814f96ca44ade45c68064e74333bdce4e8d2717f89c994bc0c73d4d99e30110453241f99cd23a22c67"}, &(0x7f00000000c0)=0x93) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2, 0xfffffffffffffffe, 0x400, 0x0, 0x3}, &(0x7f00000001c0)=0x14) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000300)={r1, 0x800, 0x800, "e5f797db9f4973efbab27a576416d5589f1fbe5beb2b36bc5984f73fc72971f3c9578b4c29bc23da722dc5f4a5e0a32f61603267bce40d36e1e9ad966d26cb09c874b62affff290a3046a258079e0c0146272406f8bd2dcc5d48481cccc96b56b056"}) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/net\x00') fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:57 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xe0, "7247244d5e491ec45f55de0e62e635329664bda5da396762c5692f36eeb3abc8f70a628bd621e1ff815b333de9ea7f4ad903b3a3c70a6c6d8cca1a8cf8bcee79b33ccd46a0610ac6ba0da1181087d1ab6cf698e672203b9909c719a1666a8e5f77d9b8750bf734ac50e74dfa3390078e8ac43bdbd30d95a7ef9cacf557d640cfdcfbe4142dc253bd68e4463ea65166e9371ebb9d8036f26a1f49c26491fb3ae6bfc04e6d7892ac702deb8739e12dbf2d2d08a7ad36828b299129f6bd77eb40281ca57f9ad57a12dda43132763a60e1704c1cec2611860b8457ea9cd1dfd351bc"}, &(0x7f00000001c0)=0x104) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) 03:24:57 executing program 6: getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180), &(0x7f0000000080)=0xb) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) [ 337.466023] device bridge_slave_1 left promiscuous mode [ 337.471942] bridge0: port 2(bridge_slave_1) entered disabled state 03:24:57 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_init() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e20, 0x4, @remote, 0x7}}, 0x5, 0x3ff, 0x1f, 0x10000, 0x94}, &(0x7f0000000300)=0x98) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)="a4"}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x8f, 0x8) [ 337.553250] device bridge_slave_0 left promiscuous mode [ 337.559092] bridge0: port 1(bridge_slave_0) entered disabled state 03:24:57 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r2, 0x4) r4 = getpid() r5 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @multicast1}, &(0x7f0000000540)=0xc) getsockname$packet(r0, &(0x7f0000001c40)={0x11, 0x0, 0x0}, &(0x7f0000001c80)=0x14) getpeername$packet(r1, &(0x7f0000001cc0)={0x11, 0x0, 0x0}, &(0x7f0000001d00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000001e40)=0xe8) accept4$packet(r0, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002040)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000002180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000021c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002200)={@local, 0x0}, &(0x7f0000002240)=0x14) accept4$packet(r0, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000022c0)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002300)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002400)=0xe8) recvmmsg(r1, &(0x7f0000005980)=[{{&(0x7f0000002440)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002680)=[{&(0x7f00000024c0)=""/250, 0xfa}, {&(0x7f00000025c0)=""/7, 0x7}, {&(0x7f0000002600)}, {&(0x7f0000002640)=""/12, 0xc}], 0x4, 0x0, 0x0, 0x7fffffff}, 0x1}, {{&(0x7f00000026c0)=@ax25, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002740)=""/6, 0x6}, {&(0x7f0000002780)=""/60, 0x3c}, {&(0x7f00000027c0)=""/251, 0xfb}, {&(0x7f00000028c0)=""/156, 0x9c}, {&(0x7f0000002980)=""/116, 0x74}, {&(0x7f0000002a00)=""/173, 0xad}, {&(0x7f0000002ac0)=""/177, 0xb1}, {&(0x7f0000002b80)=""/144, 0x90}], 0x8, &(0x7f0000002cc0)=""/201, 0xc9, 0x6}, 0xba}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002dc0)=""/206, 0xce}, {&(0x7f0000002ec0)=""/166, 0xa6}, {&(0x7f0000002f80)=""/87, 0x57}], 0x3, &(0x7f0000003040)=""/148, 0x94, 0x2}}, {{&(0x7f0000003100)=@can, 0x80, &(0x7f0000003200)=[{&(0x7f0000003180)=""/69, 0x45}], 0x1, 0x0, 0x0, 0x401}, 0x8}, {{&(0x7f0000003240)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005600)=[{&(0x7f00000032c0)=""/48, 0x30}, {&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/239, 0xef}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/84, 0x54}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/93, 0x5d}], 0x7, &(0x7f0000005680)=""/22, 0x16, 0x9}, 0x2}, {{&(0x7f00000056c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005740)=""/21, 0x15}, {&(0x7f0000005780)=""/146, 0x92}, {&(0x7f0000005840)=""/139, 0x8b}], 0x3, &(0x7f0000005940)=""/7, 0x7}}], 0x6, 0x0, &(0x7f0000005b00)={0x77359400}) getsockopt$inet6_mreq(r1, 0x29, 0xd13c69eb22f47823, &(0x7f0000005b40)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000005b80)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000005bc0)={@dev, @remote, 0x0}, &(0x7f0000005c00)=0xc) getpeername$packet(r1, &(0x7f0000005c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005c80)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000005cc0)={@local, @rand_addr, 0x0}, &(0x7f0000005d00)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005d40)={0x0, @rand_addr, @loopback}, &(0x7f0000005d80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000005dc0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000005ec0)=0xe8) getsockname$packet(r0, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006040)=0x14) accept$packet(r1, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000060c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000061c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000062c0)=0xe8) getsockname$packet(r3, &(0x7f0000007780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000077c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000007ac0)={@loopback, 0x0}, &(0x7f0000007b00)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000007b40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000007bc0)=0x80) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000008500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000084c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4080000", @ANYRES16=r5, @ANYBLOB="11002dbd7000ffdbdf250000000008000100", @ANYRES32=r6, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4c0202003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400c400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000000010008000100", @ANYRES32=r12, @ANYBLOB="6c0102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffffffff08000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0f000008000100", @ANYRES32=r18, @ANYBLOB="3401020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400bf7a000008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r22, @ANYBLOB="f80102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff03000008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004004000000008000600", @ANYRES32=r25, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r26, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r30, @ANYBLOB="480102004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040042ff6b0801000000400022050100000090dd0000ff0f000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400fdffffff08000600", @ANYRES32=r31, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400050000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r32], 0x8b4}}, 0x4000000) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:57 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c506f6f746d6f64653d30303030308100000030304330310f304841ae6499b33e92757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x6}, 0x8) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20, @local}, {0x306, @random="4d63282a3ad6"}, 0x24, {0x2, 0x4e22, @rand_addr=0x8}, 'teql0\x00'}) 03:24:57 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() r2 = semget(0x3, 0x2, 0x501) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000000)=0x3) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:24:57 executing program 0: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x200000000000081, 0x0) unshare(0x20400) ioctl$int_in(r1, 0x80000000005000, &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 03:24:57 executing program 5: r0 = memfd_create(&(0x7f0000000240)="2d6e6f64657670707031766d6e6574306574683024706f7369785f61636c5f616363657373ba6d643573756d6367726f757000", 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x9, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t'], 0x1) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, [], 0x1b}, 0x3}, {0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}, 0x80000000}, 0x4, [0x3ff, 0x1fc000000, 0x6, 0x1ff, 0x6, 0x7f, 0x20, 0x2]}, 0x5c) rmdir(&(0x7f00000001c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23}}, 0xda, 0xa36b, 0x5, 0x6, 0x100000001}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @rand_addr=0x375}}, 0xffffffffffffff95, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0xafde, 0x81, 0x2, 0x7ff, 0xffffffff, 0x20, 0x4, 0x0, r1}, 0x20) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000340), 0x1000) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x7ff, 0x200000) [ 337.874402] team0 (unregistering): Port device team_slave_1 removed 03:24:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000400)) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000007700)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/134, 0x86}], 0x1, &(0x7f0000000280)=""/243, 0xf3}}], 0x1, 0x0, &(0x7f0000007900)={0x0, 0x989680}) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x210000, 0x11a) write$P9_RLERROR(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000007020003006c6f0091f25117e8170a3c2d11622a855aec7591e609efc76b054fc211ad4d6c083f1a1abff2de7cf724b9382f"], 0xc) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000380)=0x3, 0x4) 03:24:57 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x8000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) splice(r1, &(0x7f00000003c0), r1, &(0x7f00000000c0)=0x200000000, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x800, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x3, @local, 0x28}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x4738}, &(0x7f0000000300)=0x8) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x9}) [ 337.930483] team0 (unregistering): Port device team_slave_0 removed [ 338.010742] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 338.093911] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 338.263579] bond0 (unregistering): Released all slaves [ 338.447915] IPVS: ftp: loaded support on port[0] = 21 [ 339.539127] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.545548] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.553164] device bridge_slave_0 entered promiscuous mode [ 339.601221] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.607710] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.615433] device bridge_slave_1 entered promiscuous mode [ 339.663263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 339.710938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 339.850045] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 339.900421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 340.126632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 340.134341] team0: Port device team_slave_0 added [ 340.180646] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 340.188458] team0: Port device team_slave_1 added [ 340.235887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.288234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.339351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 340.346685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.355422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.401736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 340.408925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.418496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.901855] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.908290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.915130] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.921577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.929309] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 341.330717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.734351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.905546] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 343.074640] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 343.080863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.089467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.256464] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.254678] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 344.265664] syz-executor1 cpuset=syz1 mems_allowed=0 [ 344.270933] CPU: 0 PID: 12129 Comm: syz-executor1 Not tainted 4.19.0-rc1+ #40 [ 344.278229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.287610] Call Trace: [ 344.290220] dump_stack+0x14b/0x190 [ 344.293854] dump_header+0x2c3/0x16f0 [ 344.297660] ? __msan_poison_alloca+0x173/0x1f0 [ 344.302365] oom_kill_process+0x35b/0xfa0 [ 344.306564] ? mem_cgroup_scan_tasks+0x279/0x600 [ 344.311347] out_of_memory+0x14a4/0x1d00 [ 344.315417] try_charge+0x1a7b/0x2f80 [ 344.319243] ? __kprobes_text_end+0x207d8/0x207d8 [ 344.324128] mem_cgroup_try_charge+0x7c1/0xf20 [ 344.328744] mem_cgroup_try_charge_delay+0x7e/0x140 [ 344.333794] wp_page_copy+0x7ba/0x2670 [ 344.337702] ? __msan_poison_alloca+0x173/0x1f0 [ 344.342386] ? kmsan_set_origin_inline+0x6b/0x120 [ 344.347257] do_wp_page+0xe4e/0x2ff0 [ 344.351003] handle_mm_fault+0x3265/0x81b0 [ 344.355257] ? kmsan_set_origin_inline+0x6b/0x120 [ 344.360145] __do_page_fault+0xc8b/0x17e0 [ 344.364304] do_page_fault+0x98/0xd0 [ 344.368050] ? page_fault+0x8/0x30 [ 344.371612] page_fault+0x1e/0x30 [ 344.375067] RIP: 0033:0x43e471 [ 344.378266] Code: 8d 15 f3 18 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 344.397185] RSP: 002b:0000000000a3f688 EFLAGS: 00010202 [ 344.402552] RAX: 00000000007050c8 RBX: 0000000000705140 RCX: 0000000000000066 [ 344.409835] RDX: 0000000000000007 RSI: 00000000004c9606 RDI: 00000000007050c8 [ 344.417103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 344.424372] R10: 0000000000000064 R11: 0000000000000202 R12: 00000000007050c8 [ 344.431639] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 344.439327] Task in /syz1 killed as a result of limit of /syz1 [ 344.445657] memory: usage 400kB, limit 0kB, failcnt 162 [ 344.451107] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.457928] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 344.464175] Memory cgroup stats for /syz1: cache:0KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 344.483909] Tasks state (memory values in pages): [ 344.488812] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 344.498392] [ 12129] 0 12129 17553 8388 118784 0 0 syz-executor1 [ 344.507451] Memory cgroup out of memory: Kill process 12129 (syz-executor1) score 8417000 or sacrifice child [ 344.517534] Killed process 12129 (syz-executor1) total-vm:70212kB, anon-rss:64kB, file-rss:33488kB, shmem-rss:0kB [ 344.529377] oom_reaper: reaped process 12129 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 03:25:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x8000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x2000000}, {0x6}]}, 0x10) connect(r0, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80) r3 = shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f00000000c0)=""/102) 03:25:04 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() fcntl$setown(r0, 0x8, r1) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000080)="4c41f1fdb437ce5a3c2e9266b59786f5240e0a3e7ae4c7be7c9a54a400ddaf0a0f12eacc125a1a059cbca2b816c69534332cff077e7a7a25784bfe976af79f8f6c7ce0ce6a586f3814f3bf7c40422ae8d9feda62bf6f30ddd626a525d9c4484488e967eadff1b3584a61a540da5236ac3fc2484e1dc6514c2b07797b4648780735241852ee2373823cd5ae4c56dec8958693edce28051064d103c2d4425466019b28cc3fd353107dcfa61a053cd586952e855d4e8a95799bcd78269bbbcd376813874d756a76b59e994733fb328a31159d9c1dc3") setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x8, [0x200, 0x3a, 0x2, 0xfc, 0x9, 0x6, 0xffffffff, 0x0]}, 0x14) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:25:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x2, @rand_addr}]}}}]}, 0x38}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x4) 03:25:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400040, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x10, 0x1, 0x7}, 0x1}}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000300)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) lseek(r0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r0, 0x0, 0x34, &(0x7f00000000c0), 0x4) 03:25:04 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) fsync(r1) 03:25:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x80000003) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x9, 0x0, 0x3, 0xd1, 0x7f, 0x7, 0x4, 0x20, 0x8, 0x7}, 0xb) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) keyctl$get_security(0x13, 0x0, &(0x7f0000000340)=""/183, 0x204) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) 03:25:04 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = gettid() migrate_pages(r1, 0xfff, &(0x7f0000000000)=0x40, &(0x7f00000000c0)=0xc02) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:25:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f00000023c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/148, 0x94}], 0x2, &(0x7f00000036c0)=[{&(0x7f0000002440)=""/111, 0x6f}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @multicast1}, &(0x7f0000000280)=0xc) set_thread_area(&(0x7f0000000080)={0x89, 0x20000800, 0x1fff, 0x1, 0x1, 0x10003, 0x907, 0x80, 0x1}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000763000/0x1000)=nil, 0x1000}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) 03:25:04 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x205, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:25:04 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x8000002102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x8) r2 = getpid() ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)=ANY=[@ANYBLOB="05000000000000000030000000000000a200000000000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000fbffffff00000000040000a32e8bfca5daee40001034", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000030000000000000b700000000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000030000000000000a200000000000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000440000000000000de00000000000000", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) sched_setscheduler(r2, 0x200000000005, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:25:04 executing program 6: futex(&(0x7f0000000100), 0xc, 0x0, 0x0, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 03:25:04 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0xfffffffffffffffc, 0x1, 0x0, r2}) [ 344.748847] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 344.812525] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 344.950920] device bridge_slave_1 left promiscuous mode [ 344.956884] bridge0: port 2(bridge_slave_1) entered disabled state 03:25:05 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x4002001, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) r2 = getpid() setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="05090000001e0000ed66fef791"], 0xe) io_setup(0x75, &(0x7f0000000040)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f0000000680)=[{}, {}, {}, {}], &(0x7f0000000700)={0x0, 0x989680}) sched_setscheduler(r2, 0x5, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000600)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x7, @empty, 0x5}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0xa64, @empty, 0x3}], 0x58) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x21, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, @mac, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 'ip_vti0\x00', 'sit0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr}}}, {{@arp={@multicast2, @multicast2, 0x0, 0x0, @empty, {}, @mac=@random="a0f86bf6b57a", {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'rose0\x00', 'tunl0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 03:25:05 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0xfffffffffffffffd) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:25:05 executing program 4: syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200000000000000, 0x400) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0xff, 0x59}], 0x18) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x9, 0x3, 0x401, 0x1000, 'syz1\x00', 0x4}, 0x1, 0x400, 0x56b71956, r2, 0x7, 0x6, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x00', 'em0vboxnet0self[\x00', '\x00', 'proc\x00', '\x00'], 0x1b, [], [0x1, 0x7fff, 0x9, 0x9998]}) 03:25:05 executing program 7: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000100), &(0x7f0000000140)="91", 0xfffffffffffffc6c, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0, r0}, &(0x7f0000000280)=""/169, 0xa9, &(0x7f0000000080)={&(0x7f0000000040)={'wp512\x00'}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x840, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x1f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x4}}, 0x2, 0x1200000}, 0x90) [ 345.032282] device bridge_slave_0 left promiscuous mode [ 345.038075] bridge0: port 1(bridge_slave_0) entered disabled state 03:25:05 executing program 5: socketpair$inet(0x2, 0x80800, 0x8c, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x81, 0x2, 0x8, 0x3, 0xffff, 0x6, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x6}}, 0xfffffffffffffffd, 0x6, 0x0, 0x1000, 0xc20}}, &(0x7f0000000100)=0xb0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xf0, 0x40) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x1}, 0x8) 03:25:05 executing program 0: unshare(0x20400) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x101000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/255, &(0x7f0000000140)=0xff) 03:25:05 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[{}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x0, @local}}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000003c0)=""/4096) pkey_alloc(0x0, 0x3) kcmp(r1, r1, 0x0, r0, r0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x80, 0x0, 0x3ff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @multicast2}, &(0x7f0000000380)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@loopback, r4}, 0xfffffffffffffc7e) 03:25:05 executing program 4: r0 = socket(0x19, 0x2, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x5, 0x4}, 0xc) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) 03:25:05 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e21, @rand_addr=0x7}}) mlock(&(0x7f0000011000/0x2000)=nil, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xfffffffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) msync(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x101, 0x0, 0x1, 0x4}) [ 345.340429] team0 (unregistering): Port device team_slave_1 removed 03:25:05 executing program 6: rt_sigreturn() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x6, 0xc1bd, 0x100}) r3 = dup2(r1, r1) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7) dup2(r2, r0) [ 345.399734] team0 (unregistering): Port device team_slave_0 removed 03:25:05 executing program 7: r0 = socket$inet6(0xa, 0xfffffffffffe, 0x7) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, 0x27, 0x101, 0x0, 0x0, {0x9}, [@typed={0x8, 0x4, @u32}]}, 0x1c}}, 0x0) [ 345.508433] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 345.555989] PANIC: double fault, error_code: 0x0 [ 345.560819] CPU: 1 PID: 12490 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #40 [ 345.568111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.577497] RIP: 0010:get_cpu_entry_area+0x0/0x30 [ 345.582363] Code: a4 00 45 85 e4 79 ad e9 61 ff ff ff 49 89 d6 44 89 ff e8 93 82 a4 00 89 c0 48 89 c1 48 c1 e1 20 48 09 c1 49 89 0e eb a0 90 90 <55> 48 89 e5 53 89 fb e8 74 91 49 00 48 63 c3 48 69 c8 00 b0 03 00 [ 345.601292] RSP: 0018:fffffe000003d000 EFLAGS: 00010093 [ 345.606685] RAX: 000000000003d150 RBX: 0000000000000088 RCX: 000000000000002e [ 345.613970] RDX: 0000780000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 345.621267] RBP: fffffe000003d038 R08: 00000000009300ac R09: 00000000009300a0 [ 345.628559] R10: ffffffff89000f48 R11: ffffffff89000f48 R12: 0000000000000001 [ 345.635940] R13: fffffe000003d150 R14: 0000000000000001 R15: 0000000000000001 [ 345.643231] FS: 00007f9bf1e5b700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 345.651475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.657367] CR2: fffffe000003cff8 CR3: 000000008e486000 CR4: 00000000001406e0 [ 345.664649] Call Trace: [ 345.667249] [ 345.670567] ? kmsan_get_shadow_address+0x1b6/0x3d0 [ 345.675616] kmsan_memmove_shadow+0x87/0xe0 [ 345.679970] __msan_memmove+0xaa/0x130 [ 345.683888] fixup_bad_iret+0x85/0x110 [ 345.687814] error_entry+0xe6/0xf0 [ 345.691367] RIP: 0000: (null) [ 345.695286] Code: Bad RIP value. [ 345.698673] RSP: a3fb9f:00007f9bf1e5b9c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 345.706589] RAX: 0000000000000000 RBX: ffffffff89000f48 RCX: 00000000004083dc [ 345.713880] RDX: c4bf060d034ffb00 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.721167] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000009300a8 [ 345.728451] R10: 00000000009300a0 R11: 00000000009300ac R12: 0000000000000000 [ 345.735747] R13: 00000000009300a8 R14: 00000000009300a0 R15: 00000000009300ac [ 345.743047] ? general_protection+0x8/0x30 [ 345.747312] ? general_protection+0x8/0x30 [ 345.751578] [ 345.754962] Kernel panic - not syncing: Machine halted. [ 345.760349] CPU: 1 PID: 12490 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #40 [ 345.767637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.776996] Call Trace: [ 345.779593] <#DF> [ 345.780002] IPVS: ftp: loaded support on port[0] = 21 [ 345.781773] dump_stack+0x14b/0x190 [ 345.781809] panic+0x35d/0x8cb [ 345.781863] ? show_regs+0xcc/0x100 [ 345.781898] df_debug+0xa6/0xb0 [ 345.800833] do_double_fault+0x302/0x410 [ 345.804938] double_fault+0x1e/0x30 [ 345.808589] RIP: 0010:get_cpu_entry_area+0x0/0x30 [ 345.813450] Code: a4 00 45 85 e4 79 ad e9 61 ff ff ff 49 89 d6 44 89 ff e8 93 82 a4 00 89 c0 48 89 c1 48 c1 e1 20 48 09 c1 49 89 0e eb a0 90 90 <55> 48 89 e5 53 89 fb e8 74 91 49 00 48 63 c3 48 69 c8 00 b0 03 00 [ 345.832366] RSP: 0018:fffffe000003d000 EFLAGS: 00010093 [ 345.837748] RAX: 000000000003d150 RBX: 0000000000000088 RCX: 000000000000002e [ 345.845036] RDX: 0000780000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 345.852322] RBP: fffffe000003d038 R08: 00000000009300ac R09: 00000000009300a0 [ 345.859608] R10: ffffffff89000f48 R11: ffffffff89000f48 R12: 0000000000000001 [ 345.866892] R13: fffffe000003d150 R14: 0000000000000001 R15: 0000000000000001 [ 345.874200] ? general_protection+0x8/0x30 [ 345.878455] ? general_protection+0x8/0x30 [ 345.882709] [ 345.884952] [ 345.888281] ? kmsan_get_shadow_address+0x1b6/0x3d0 [ 345.893830] kmsan_memmove_shadow+0x87/0xe0 [ 345.898184] __msan_memmove+0xaa/0x130 [ 345.902109] fixup_bad_iret+0x85/0x110 [ 345.906023] error_entry+0xe6/0xf0 [ 345.909572] RIP: 0000: (null) [ 345.913484] Code: Bad RIP value. [ 345.916868] RSP: a3fb9f:00007f9bf1e5b9c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 345.924784] RAX: 0000000000000000 RBX: ffffffff89000f48 RCX: 00000000004083dc [ 345.932069] RDX: c4bf060d034ffb00 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.939363] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000009300a8 [ 345.946643] R10: 00000000009300a0 R11: 00000000009300ac R12: 0000000000000000 [ 345.947084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 345.953949] R13: 00000000009300a8 R14: 00000000009300a0 R15: 00000000009300ac [ 345.953976] ? general_protection+0x8/0x30 [ 345.954000] ? general_protection+0x8/0x30 [ 345.954028] [ 345.954321] Dumping ftrace buffer: [ 345.954328] (ftrace buffer empty) [ 345.954334] Kernel Offset: disabled [ 345.992551] Rebooting in 86400 seconds..