25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80}, 0x4084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) pipe2(0x0, 0x0) socket(0x1e, 0x0, 0x0) close(0xffffffffffffffff) getsockname$packet(r0, 0x0, &(0x7f0000000380)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x8, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)) 16:08:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) 16:08:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x53a, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x40000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000140), 0xfffffffffffffe88) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x30a, 0x0, 0x0, 0x7}, 0x10) fcntl$getown(r1, 0x9) read(r0, &(0x7f0000000400)=""/168, 0x41c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="2b000004030000000000000000000000020267908e59e863b3d0dab4000000006d643573756d73656c6600"], 0x2b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x4}}}]}, 0x34}}, 0x0) r5 = mq_open(&(0x7f0000000300)='\x04\x00\x00\x00\x92\r\x00\x00\x10\x00.\x16\xe8\xc2p\x12v\xc5\x92\xbf\xbd\xca\x19\x1bw|E\xb7m\xd2', 0x6eb3ebbbcc0884f2, 0x0, 0x0) mq_notify(r5, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4000) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000003, 0x0, 0xc8f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000110c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)}, &(0x7f0000002a80)=0xc) syz_extract_tcp_res(&(0x7f0000000340), 0x20000000000005, 0x1f) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000200)=""/208}, 0x18) mq_notify(r5, &(0x7f0000002940)={0x0, 0x2000003f, 0x0, @thr={&(0x7f0000002800)="af66bfe98e95b8cc6a3dced16eb4f5f7e6490cfed992463a3a03faeae42fd6c34280bb44a5e1e56ec8fa0c59ad9a3baa971b39a11fd6c410d7b51bec30ca0523dbebed287de315c9ffb166a5aba7ade4d4df4f26cdeeda59bd7da10798a29832f9de04b603b3c1421976ca57f56ac67df7d67bf9e5da6560ed2ee1132032", 0x0}}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, 0x0, 0x0) 16:08:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80}, 0x4084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) pipe2(0x0, 0x0) socket(0x1e, 0x0, 0x0) close(0xffffffffffffffff) getsockname$packet(r0, 0x0, &(0x7f0000000380)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x8, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)) [ 406.868023] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 16:08:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x49, 0x1]}) 16:08:45 executing program 3: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 16:08:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80}, 0x4084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) pipe2(0x0, 0x0) socket(0x1e, 0x0, 0x0) close(0xffffffffffffffff) getsockname$packet(r0, 0x0, &(0x7f0000000380)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x8, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)) 16:08:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) 16:08:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) 16:08:46 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 16:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 16:08:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@fwd, @int, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002e40)=""/4096, 0x4c, 0x1000, 0x1}, 0x20) 16:08:46 executing program 3: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 407.397765] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 16:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) 16:08:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@fwd, @int, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002e40)=""/4096, 0x4c, 0x1000, 0x1}, 0x20) 16:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 16:08:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) [ 407.577015] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 16:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) 16:08:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@fwd, @int, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002e40)=""/4096, 0x4c, 0x1000, 0x1}, 0x20) [ 407.672333] overlayfs: workdir and upperdir must reside under the same mount 16:08:46 executing program 3: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 16:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 16:08:46 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) [ 407.773513] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 16:08:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@fwd, @int, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002e40)=""/4096, 0x4c, 0x1000, 0x1}, 0x20) 16:08:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) 16:08:46 executing program 3: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 16:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) 16:08:46 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 16:08:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) [ 408.091726] overlayfs: workdir and upperdir must reside under the same mount 16:08:46 executing program 0: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 16:08:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x8, 0x8, [0x0, 0x0]}) 16:08:47 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) [ 408.228834] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 408.238772] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 16:08:47 executing program 3: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x8, 0x8, [0x0, 0x0]}) 16:08:47 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) [ 408.412309] overlayfs: conflicting lowerdir path 16:08:47 executing program 0: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 16:08:47 executing program 3: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="000005000000000006000000080001007533320088080200240105000cff080000058000a30ee30000000000000000010000003f0800000006000000ffffffff0000000308000000020000000000000200000004ff0700001f00000000000400000000018b0700008800000000000001000000020100000005000000000000020000080006000000ea00000000000060000000000002000000000000000000040000000300010000000100000000000600000006000509000000ffff00000000000700000001010000000700000026d9c9ac005c540208000000aaed000000000003fffffffd05000000010000000000000000000000dc000000000001000000ffff000000012a6a000001000000000000090000000140000000080000000000076600000005fcffffffe203000004040500028b070066520100050001000000000300000003000000040200000006000000fffffff7ffffffc0040000000300000000000020000001ffa80c000000000000000000020000000508000000d3000000000005f90000007f7d574e6d0700000000000009339e00007104000001f8ffff0000003f0000000000100000000000000000000000006b806200000014000000000046d9fffffff901040000070000000000000700000000ad000000010000000000000900000006000000004020000000000ea100006d430700000009000000000001870000003f070000000500000000000006ffff0000090000007f0000000000002000000001000000000600000000000400000000070000000050000000000000c600000007ffffffff030000000000000200000009faffffff0008000000000efc00000000010000000000010000000080000000066e00000004000000000000020000002200000000800000000000010000000006ff7f00000900000000000001fffffffd01000000030000000000003f0000000008000000150f0000000000be000006c7010400000100010000000003ffffffff0800000009000000000000600000000605000000080000000000000300000006010100000400000000008001000001010000000004000000ffff000000000003030000002e000000000007ff00000007ff0f0000ca00000000008001ffffffff0400000000000000000000010000c384050000006800000000000fff0000007f07000000030000000000000200000000010100000800000000000005000000030000000009000000ffffffff000007ff02000000010001000000f19000000065080000000300000000000000000002440400000000100000000005d10000000601010000050000000000008100007fff000200000800000000000000000000071901000028b100000000003f000002d200000000030000000000008000000004740c000001040000000000060000072103000000080000000000000700000008000200000800000000000065000000bf0500000022000000fffffffd000000037f0000000200000000000008000000090104000001000000000000000000000401000000080000000000000000000001070000000600000000000005000000070100000002100000000000070001000104000000b9000000000000040000000603000000030000000000000700000002030000007f0e000000000005000000090600000000000000ffffffff000000d1690000004d5700000000000800000001ffffffff0900000000000000000000a17f000000080000005485bb1a0000000581ffffff490700002800000000000008f7090000ffff000000000e910000003004000000e0ffffff00000001fffff0007f00000001000100a4010500100103000007030004005ec900000008000000070000000700000000e3a60000000000000000002004000000fffffffffffffff7000000200900000000000000000000010000000307000000380400000000000300000001070000000000000000000003000000070900000000000000000000ff0000010001000100070000000000000300000008dc320000030000008000000100001f1a060000000100008000000003ffffffff07000000ffffffff0000000100000005030000000800000000000000000000030100000000000000000000010000ffff000100000700000000000bb200000008070000000180000000000800000100010000000092000000000000da0000443307000000280d00000000000100000020020000000700000000008000000063e93b00000003000000000000040000077e0500000004000000fffffffd000080000101000000000100000080017fffffff1f000000010400000000000400000008fffbffff0008000000007750000000ff670000000200000000000008fffffffe0300000005000000000000cc0000007f0800000000000000140008006e6c6d6f6e3000000000000000000000a40105000d07010001ff0600001b000003ff80000001000002000200000001fcffff000032e50000010000000000020000000000001d00010000020000007f000000ffffe728000009c3080000009ae7ffff000000040000000400000100ffff00000000095900000001080000003b000000000000ff00000009ffffff7f01"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 16:08:47 executing program 3: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x8, 0x8, [0x0, 0x0]}) 16:08:47 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 0: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x91) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 408.664001] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 16:08:47 executing program 3: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x8, 0x8, [0x0, 0x0]}) [ 408.783503] overlayfs: conflicting lowerdir path 16:08:47 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b40300002c000107f1ff58984800000000000000", @ANYRES32, @ANYBLOB="000005000000000006000000080001007533320088080200240105000cff080000058000a30ee30000000000000000010000003f0800000006000000ffffffff0000000308000000020000000000000200000004ff0700001f00000000000400000000018b0700008800000000000001000000020100000005000000000000020000080006000000ea00000000000060000000000002000000000000000000040000000300010000000100000000000600000006000509000000ffff00000000000700000001010000000700000026d9c9ac005c540208000000aaed000000000003fffffffd05000000010000000000000000000000dc000000000001000000ffff000000012a6a000001000000000000090000000140000000080000000000076600000005fcffffffe203000004040500028b070066520100050001000000000300000003000000040200000006000000fffffff7ffffffc0040000000300000000000020000001ffa80c000000000000000000020000000508000000d3000000000005f90000007f7d574e6d0700000000000009339e00007104000001f8ffff0000003f0000000000100000000000000000000000006b806200000014000000000046d9fffffff901040000070000000000000700000000ad000000010000000000000900000006000000004020000000000ea100006d430700000009000000000001870000003f070000000500000000000006ffff0000090000007f0000000000002000000001000000000600000000000400000000070000000050000000000000c600000007ffffffff030000000000000200000009faffffff0008000000000efc00000000010000000000010000000080000000066e00000004000000000000020000002200000000800000000000010000000006ff7f00000900000000000001fffffffd01000000030000000000003f0000000008000000150f0000000000be000006c7010400000100010000000003ffffffff0800000009000000000000600000000605000000080000000000000300000006010100000400000000008001000001010000000004000000ffff000000000003030000002e000000000007ff00000007ff0f0000ca00000000008001ffffffff0400000000000000000000010000c384050000006800000000000fff0000007f07000000030000000000000200000000010100000800000000000005000000030000000009000000ffffffff000007ff02000000010001000000f19000000065080000000300000000000000000002440400000000100000000005d10000000601010000050000000000008100007fff000200000800000000000000000000071901000028b100000000003f000002d200000000030000000000008000000004740c000001040000000000060000072103000000080000000000000700000008000200000800000000000065000000bf0500000022000000fffffffd000000037f0000000200000000000008000000090104000001000000000000000000000401000000080000000000000000000001070000000600000000000005000000070100000002100000000000070001000104000000b9000000000000040000000603000000030000000000000700000002030000007f0e000000000005000000090600000000000000ffffffff000000d1690000004d5700000000000800000001ffffffff0900000000000000000000a17f000000080000005485bb1a0000000581ffffff490700002800000000000008f7090000ffff000000000e910000003004000000e0ffffff00000001fffff0007f00000001000100a4010500100103000007030004005ec900000008000000070000000700000000e3a60000000000000000002004000000fffffffffffffff7000000200900000000000000000000010000000307000000380400000000000300000001070000000000000000000003000000070900000000000000000000ff0000010001000100070000000000000300000008dc320000030000008000000100001f1a060000000100008000000003ffffffff07000000ffffffff0000000100000005030000000800000000000000000000030100000000000000000000010000ffff000100000700000000000bb200000008070000000180000000000800000100010000000092000000000000da0000443307000000280d00000000000100000020020000000700000000008000000063e93b00000003000000000000040000077e0500000004000000fffffffd000080000101000000000100000080017fffffff1f000000010400000000000400000008fffbffff0008000000007750000000ff670000000200000000000008fffffffe0300000005000000000000cc0000007f0800000000000000140008006e6c6d6f6e3000000000000000000000a40105000d07010001ff0600001b000003ff80000001000002000200000001fcffff000032e50000010000000000020000000000001d00010000020000007f000000ffffe728000009c3080000009ae7ffff000000040000000400000100ffff00000000095900000001080000003b000000000000ff00000009ffffff7f01"], 0x3}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 16:08:47 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x400008, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 16:08:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) 16:08:47 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:47 executing program 2: tkill(0x0, 0x0) select(0x236, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:08:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) [ 409.129284] audit: type=1400 audit(1574870927.845:410): avc: denied { write } for pid=17939 comm="syz-executor.4" path="socket:[79997]" dev="sockfs" ino=79997 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 409.166976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:08:47 executing program 2: tkill(0x0, 0x0) select(0x236, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 409.181020] overlayfs: conflicting lowerdir path 16:08:48 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000080000000000000000000ffffffff020000000d000000000000000000697036677265300000cd000000000000677265300000000000000000000000006272696467655f736c6176655f31000076657468315f746f5f62726964676500aaaaaa05aabb000000000000aaaaaaaaaabb0000000000000000b0000000b0000000e800000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000006d61726b0000000600020000000000000000000000000000000000000000000010000000000000000000000000000000dfffffff000000001700000000000000000069705f7674693000000000000000000073797a5f74756e00000000000000000073697430000000000000000000000000626f6e64300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000c0000000c0000000f000000068656c7065720000000000000000000000128affff00000000000000000000002800000000000000000000005241530000000000000000000000000000000000000000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:48 executing program 2: tkill(0x0, 0x0) select(0x236, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:08:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) 16:08:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:48 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:48 executing program 2: tkill(0x0, 0x0) select(0x236, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:08:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) [ 409.483142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.508061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:08:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:48 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:48 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) [ 409.745751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:08:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) [ 409.820396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:08:48 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010801"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) 16:08:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000080000000000000000000ffffffff020000000d000000000000000000697036677265300000cd000000000000677265300000000000000000000000006272696467655f736c6176655f31000076657468315f746f5f62726964676500aaaaaa05aabb000000000000aaaaaaaaaabb0000000000000000b0000000b0000000e800000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000006d61726b0000000600020000000000000000000000000000000000000000000010000000000000000000000000000000dfffffff000000001700000000000000000069705f7674693000000000000000000073797a5f74756e00000000000000000073697430000000000000000000000000626f6e64300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000c0000000c0000000f000000068656c7065720000000000000000000000128affff00000000000000000000002800000000000000000000005241530000000000000000000000000000000000000000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) [ 410.047651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:08:48 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) [ 410.101399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:08:48 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00008a7fe4)={0x5, 0x1, 0x6, 0x28}, 0x1b) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00002ff000)={r0, 0x28, &(0x7f00007dc000)}, 0x10) 16:08:49 executing program 4: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:49 executing program 4: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/121, 0x200002f9) 16:08:49 executing program 0: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:49 executing program 3: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) r3 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 16:08:49 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:49 executing program 0: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 4: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 3: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) [ 410.741283] audit: type=1400 audit(1574870929.465:411): avc: denied { ioctl } for pid=18076 comm="syz-executor.1" path="socket:[80237]" dev="sockfs" ino=80237 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 16:08:49 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:49 executing program 0: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:49 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="fa0c000016008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf6a01f2cd9ebf19724a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c407ec58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:49 executing program 4: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 3: capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x107, 0x0}) 16:08:49 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:49 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:49 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:49 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:49 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:49 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:49 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:50 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:50 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:50 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:50 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) 16:08:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:50 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0x161}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40}}]}, 0x5c}}, 0x0) 16:08:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x83, 0x0, 0x6c}, @mpls={[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote}, @udp={0x0, 0x0, 0x8}}}}, 0x26) 16:08:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) [ 412.293776] syz-executor.3 (18199) used greatest stack depth: 23024 bytes left 16:08:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:51 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 16:08:51 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:52 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r1, 0x40047452, &(0x7f0000d1df52)=""/174) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000040)=""/246) ioctl$EVIOCGREP(r3, 0x40047452, &(0x7f0000d1df52)=""/174) 16:08:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:52 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:52 executing program 4: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) 16:08:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:08:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) [ 413.776563] protocol 88fb is buggy, dev hsr_slave_0 [ 413.781730] protocol 88fb is buggy, dev hsr_slave_1 [ 413.858872] protocol 88fb is buggy, dev hsr_slave_0 [ 413.866110] protocol 88fb is buggy, dev hsr_slave_1 16:08:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:08:52 executing program 4: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="14be1519cbadc73050e32edbd47efd676987a6716a741a33c8957714fbfe696a8930600438ca34510bd90bbd6f787f487b52d80fc15b8d41cb077ea172fbcbcd66c1278422573df982a20a9d92c21c7baeba610f9434380cbb5703e5397d6efd14fd2dfcbae47a1f2cc5cf639af66b732c89bfe97beac2d371530a12a22bc9248afd660de0e1cb6c00eeb4b58ba317790404feba733321930c9547340100ac5735542b3f99ba8a43539694db25353582812e74ea5a921adcfa28976866de3d421cfa4ead88c15faa496c4e55842be34edf91e0b6bf1db52a0787294c346257e8c1becbbdac6ebda017ca36fe16193e43f5815962b9d4b57f27b4cd15fefb45c6a9a35c3b9381824d6edca23aa39c4b050c09d7925c462f590d0a7fbcd3564a2c7f82505803dabc207faaa92d4e2cb110266a444ab0c69173965070fffbc700272dfce09dce051adbbc75b1ed23f16e0b30e384478a7aabc260758f63744a460d02b7fd7ad6981c5b187a80d50c78dfb791d9148d8f636e077c90b71fecebbdd17d12bc9e9735e074727b251a78e096d798d9d32a81e8aac51911c5f630741a1a10c292d5a3e3cb4171a49627a23d7c1406fa0340a69675927d2eee402834cddca5a55049a2fbd5d038713fba6716e0f6b77bd158cb17ef491f4f99cad70cae96"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) [ 413.936535] protocol 88fb is buggy, dev hsr_slave_0 [ 413.941697] protocol 88fb is buggy, dev hsr_slave_1 16:08:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) socket(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0) 16:08:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) 16:08:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:08:52 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:53 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:08:54 executing program 4: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) 16:08:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) 16:08:54 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:54 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 415.456581] protocol 88fb is buggy, dev hsr_slave_0 [ 415.461747] protocol 88fb is buggy, dev hsr_slave_1 [ 415.466954] protocol 88fb is buggy, dev hsr_slave_0 [ 415.472048] protocol 88fb is buggy, dev hsr_slave_1 16:08:54 executing program 4: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) 16:08:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) 16:08:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:54 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:56 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:57 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:08:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:57 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 419.056995] net_ratelimit: 16 callbacks suppressed [ 419.057020] protocol 88fb is buggy, dev hsr_slave_0 [ 419.067442] protocol 88fb is buggy, dev hsr_slave_1 16:08:58 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 419.697012] protocol 88fb is buggy, dev hsr_slave_0 [ 419.702616] protocol 88fb is buggy, dev hsr_slave_1 16:08:58 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 420.336831] protocol 88fb is buggy, dev hsr_slave_0 [ 420.342520] protocol 88fb is buggy, dev hsr_slave_1 16:08:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:08:59 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 421.136995] protocol 88fb is buggy, dev hsr_slave_0 [ 421.142525] protocol 88fb is buggy, dev hsr_slave_1 16:09:00 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f0000002700)=""/116, 0x74}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f00000010c0)=0x916, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 16:09:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) [ 421.456567] protocol 88fb is buggy, dev hsr_slave_0 [ 421.461724] protocol 88fb is buggy, dev hsr_slave_1 16:09:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:09:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) 16:09:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:09:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:09:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) 16:09:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f00000045c0)=""/4087, 0xff7) getdents64(r0, 0x0, 0x10000048c) 16:09:01 executing program 2: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) 16:09:01 executing program 2: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) 16:09:02 executing program 2: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0x124, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0xfffffffffffffcfc, 0xfffffffffffffd82, &(0x7f0000000000), &(0x7f00000003c0)="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"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) 16:09:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:09:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:09:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1c7d9, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x800) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) 16:09:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:09:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:09:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:09:03 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 16:09:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 1: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 0: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 2: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 1: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 0: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 2: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 3: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 16:09:04 executing program 1: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 2: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 0: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 3: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 4: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 1: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 2: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 0: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 3: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 4: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 1: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 2: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 3: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 0: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 5: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 4: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 1: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 2: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 3: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 0: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:05 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:05 executing program 1: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:05 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) 16:09:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 3: timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) io_submit(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @window, @sack_perm], 0x3) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 16:09:06 executing program 1: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) [ 427.345147] audit: type=1400 audit(1574870946.065:412): avc: denied { bind } for pid=18650 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:09:06 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) 16:09:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) 16:09:06 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) 16:09:06 executing program 1: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:06 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) 16:09:06 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f00000003c0)={0x40000000003, @win={{0x2}, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}}) 16:09:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 1: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:06 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:06 executing program 5: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:07 executing program 2: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 16:09:07 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:07 executing program 5: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 2: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:07 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 4: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0400000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x38}]) 16:09:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001b003a000000", 0x24) 16:09:07 executing program 5: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 2: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 428.801419] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 16:09:07 executing program 4: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 16:09:07 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b2071") r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0x4) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001680)="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", 0x4000}, {&(0x7f0000000840)="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", 0xfe}, {&(0x7f0000002680)="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", 0x138}], 0x3, 0x0, 0x0, 0x1a0}, 0x0) 16:09:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001b003a000000", 0x24) 16:09:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000340)={[{@norecovery='norecovery'}]}) [ 429.063306] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 16:09:07 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x5, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x135}, 0x48) 16:09:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001b003a000000", 0x24) 16:09:07 executing program 4: setreuid(0xee00, 0x0) r0 = getuid() mknod(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', r0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 429.176416] gfs2: not a GFS2 filesystem 16:09:07 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b2071") r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0x4) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001680)="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", 0x4000}, {&(0x7f0000000840)="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", 0xfe}, {&(0x7f0000002680)="34dac44c0475ac553dbafe0a0a9874ab4c69b98d6cf67a2416048365cc77b474e86a8d819c71ddd87a0c35c80c6a9f1c0d185e6bf14858310358b1941a943dd19943b11c164d9c0274f641d8ffb386a678d6a946c2d1bf97e0395b74b4dd96a58d954e3b449bdcb016663932fbfe164e3b56e1918a2c929a4c5a0b95fba94f1b2d3d4bc18a34749255bf6cdb155414abfd9a1c9493ae501687f6950d56659b2ddcc32784d3eb56497a09af97944e33d92c623abdcfb465618d140f6c4e379c5a3dfbcf9a1c2b9caf8435b9713036b9c2f22df0dd4400f0818e7f036813ffa596341de6d62c9861a76f5d533054cea71e0c99f53d100c5b32fcadef5ed3025233e7fa647fe968e25eaf2a68dbb063232fa669e0854a4c799b7861daad853b436036e6359503f5f4920858c37bbbce8c66e1b412a6ac9107dc", 0x138}], 0x3, 0x0, 0x0, 0x1a0}, 0x0) 16:09:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x5, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x135}, 0x48) [ 429.301722] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 16:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000340)={[{@norecovery='norecovery'}]}) 16:09:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001b003a000000", 0x24) 16:09:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) [ 429.449137] gfs2: not a GFS2 filesystem 16:09:08 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b2071") r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0x4) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001680)="84843600fb2b08233e496d5671dc71ff04291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2a34be964b8c1b95638607b2e7ec7fda28fea4caada028a39bf259538214e80b9b5c9b58b1cb36a933d64a25324566f7733ea93fc91c98fec268cb1e2148198e2ccf2463d2ae56c61ac436c336b2d421c6b512a600955c6ede3e5820165eabf2dda9e2294300485327a6d28f7913f19d79e5f478626bb6a607c2f5085c68749edc417da6cc4db8c605215575067836f62b0b3e0b49e8c32a7000c4eb99200b9d016f1554683b7b3323ab37f066b973d584345792feba5b719ec0413d1c37689ce927de538b4ac16687f6595120220e5205f79227e43a8eaa610c8c232bcb811b4a63eab1b87da214700408e830774dcd6a8d26f797713d81548e0c547b8aa7bcd844c2cfa69560deaa6188b576792cccdc09a1f94da4e4c4f05e4d053d6a2fcdb253dce696d6cd85a1aee740c2a84e3d63aa558d3db42531e2303c6e8cfc0b6e31950fcbf3021f708d47c05edcf3fcdd66226d99f1f132d73f698e0820c395f343e0d69042b6b06bf40b45ea6a8f52a32255f3c40d4e9fb93084421a6235116be29125e5afe2d8c418cedb2548db2fcade80c118af8a6be1e650517519721a5920f842662aad37473f2ba60f7ee8466f8dba829c3e17d3e618ef5768b1b0a8991c64f2e592e726bb4636d13fbd04ed71b031e1c1a27fe30325e521a9845ef1abae620cefb216c47a1e3b4db8cb1287006b9fed827fa5a944b8045a3397ba4208c5cb67117393b2f836e4e79196e05ebd7488fa76619ea0521982b9cb76a63bed4f0ffe48ceb4b2bbe4e590dec80eca4740027f855dad06313a2a0188932a2069fc70b8af0e4294a7b51b552ad72ccd5625fd2a971354bad2930eec5f41e0ae271224b8a9160d96965d372c65e4a0adcee1e8bb84406b6a5c5e4d6ed7ff529afdffcdbea58f43e7c39f8aa9845fc92c84aa8bc0eef238d19b2cd3dd0c6d52694c99f2f493b7064076b62d139837eda3d11e43ae52fb771c1585974bcc6e2adb24096fd3d5ac867afb9cfb6ed07cb34e227f00ed5541499d2e7e3b4f3da831a3b9c32de8be0f5b45e8248b5a2811bb452ca6dc7d56d87531347ad316e6e8c6bf887f70f455cdeae8dcfff004b0ed1b8fd63d1d5e55cbdf1541b87821f3c90f7d47e542ec75b132f5285862d3e9fd84f841e4d137e2735d5f23c87108bcaa591a14ab2ab43802ffb176453312420fe0e79af7236850104bc3e925b16fd0a57ee9959ae8ccc13c843365442bb462d86ead8a20c41e064e0ad286f4aa4c69d0046e5012cecf425b0df11c0b458e31804d8ffe98554afc69b475ca03cbe926806b276e19aa47b3e101b95ee2fd32b9f06a3fcf6f078ce694f9ed8fe03425446bcdd0e7c1f4d3e109bbe30020cb81b64bb0cdfd8a0d33e1143c4fbb7fef15d1059e1f20b394f69d482a1da5fd49508808c80c824a843698386b4d3c3885f063aa3c047624f93298040fbc706020d295cf3f363d42f21d327d91d101cc4758c67195a49c3b3002e14cf28a5b8899b7ef08b6713d89c7049ef594361b1d8a0c5838ff30a6a3f1b0f9f947c76d5f1629d3df215975b498bd33ddbc44798a9f76ba0c41e9ad565e44ebf3c333fade1d4306b1042c5e2e855f3e5fdcd64ce7fdf73b09044bec8a2f0cecbb00c6c76c85891478aa4bae6282541cff613f2b461cce115ba0b78c6f50f4593efe5c2ae558f6c0534db14d5b44416b08abe45c6ddf5c749aae8141e427a0a2f42b903ac71caa09e5098cc2c07d79145c7408415d8f937108d6becdbb38a2b3250c0fdf36297375aa3212c9bc8483e8d629c54a79ca55cdda720496753f27fd9e88e203594c1e28514e0d22b9c34c3e1f10253217abed40b09a533fad16c7b9b8e89d7dfd3b27d579bfc813ad2895543ada10f886c7c75010bc70345b727513fa3b7c6aa677a22e037e2bd7731148996f3a8c424075fd12aa8eb9d8f6a8fe7b2eb68934799f5063c58c1816caa4b400bb0914fc7300111c063e5c01910b0b006155053eafbbd7e4c0014630bdc201803a1a348f387542236d82bef6d926ba571ca0e7745e586eddf2334baeafd7b1149502e781ec45299c3f3cd34c3628057def3c012878123224e33828b216022dfebdc6a284e503868a1e4369af819fcfd4124d801386dbb123ce88d54712f6351c77aad6039b2f5ff3d0d1903c74043864fa9f88b847ac8446280a31739e0215bce77c08c2477e9079f62225cf179da445e9f220560d995238f17e87dd4ce0f7ebe5f8941d5d130c2d6398e08bb893b5dd8e58701e41e75fd0182d3ebac8920aad7f4777b4e096eb5c5a17e440c0a5b95ca92bbaec63130bbc41d0cbfccb03eb6c1cffc8558bd255c2096a285346dd9600f33554ad862aef19d2776bd5d8a5a9f0a4976022b8ac1400e3f0a7fa227ebc0ad80187939562492154c708739f865a9803512a6213d5026b1febd0a20ce4b3a4d7d90dc5af3f5beaa06b8af1d19556655ac578f9266f5d3b393f24a2d112eee90f749e1f0a6e27ff2469f1cc21d5bcbf355168c62044fd1cc4861544a8175f640ad3c5bb6c81efa331822efb70b57f4110deebe68794211ee4a95c259b4eb519d887b6cfdee178758382f4f63c80b1f0b9f2337dd5a11a5b1fb04c3315ff942cf7f5d7da36c088a65f86529d003c8c9bf74392f9d897b53a422cb3b3f9e09f9936514ac100fecf3c9a573aae041ce3c86cce6dc2884053bc56a510791392bda454aa7dc580a3a7cf71c18dd57bec21c0eb143deb654d8b0fc642bbc7484dc9943c2102169a6aca278f0fd81b1b6b082b355443c8198284e3b01e9fff1c8df1895e9c9593f16438c7f737f2ab56c0f57eadfcd570c5b04b5218fc7d2c0cdca5c7ba5ff428b4fe541d4c8f6fe274d2a3290343f3d6944c918571e350caf2ec3cc9601cd5b71e8f22ff401024c51c592bf476f255b200962e2ed014ce551376235e8d220763f8c9c904570d6b6227c94d62e08b0c9bd3557b96c8ed227685fc54d43e4a05ca5996c4d8e3e5076f394b0c0bc7cdf972f996c45987ffb2d6a138a1772b7ffbeaa66ceddd34839051c61f9d87153f23823f9178b56eb016524ba862cdca9d147b5bda79553ade825d5a1b8ea3acf8c7cad88cd11b68625d367931b9a0296b228fd2c52da32d050d746942fb38dbb3d5e2ad75b7243f7340a8c0d4c7b156e030b6eb154ec6c47c1b6af307ea0e8916e21166572632321f8b4978ecd1f8b4029a6baba4da2dd984d245d1b6dd4a6f2a72acc4d90f480de489826130dd7b2a9ad79938ed6de65c7a56e0515d84302a8a8ee98c20ea32db20b231b9d00e03dd74b804e15c70ce8a6b169ffa79db7e24062b2dd3560502337bb03c8506a25ce77eaa06f9fb54aff0bab9545c32bb9a35a700361f46a3995ef929af7698bf16df9d8965f4d939f5dba6eb238c1089c2561756837ed77bd28690a93ba07b29760ecbfef273b8070c3853a652d30da91cb00e0afa1c663589158711984cfe38869974c30e9b51333091cb0f5d72f5ddb0f3bc550b2787ff6fdfe0b90764f8ec319a2674d6e16ca2417b7a2144b5a4ad248fc4b2b8f74ed1957bd4f52f0db0ac4eb8f6dc62c51e16a803bff507359abdbd0ce1ee0fb936a4a060954c1a939b4b197b61311d079ef09e57e60f94fd796c12cf7e62e11bbdc11e04fc79736e42d6d2dcb02e705dc4e8e17addcc0902af4ebbf0a2f57db53cbe99bb0797137c903195de282ed02c37634181936e351f383fb590eb453e539b80c6935185ac40890c1ba70b5e2eb53235f3a983ce4608929d2609354f89fc22f80a0aa9fc0ea9af7f06e46d8b5f5d47dbd2efe1f2d0f4edee09f11b57c257ff5ecfe96ada3c5f37e1d766c5c85490d14f297e1ce65ae34909f04492e7cc955faabb205491a096147d0930ffa70b68055523e360328f26f28ff160cdb8b4785a22110191cc7cfd187267c1a4300e9370a41c73fe224f3a9c54493780b1a4ff96398f0a60f66e48ef4ad7183f71c0c4d6d9d1a57e19a56d9ed426cd4143de82ceb33011988ed079b52ab30300255e066a84959a10676c7b58515ff9bed194c784072af1062734f5d497f2be9b0ea1228f5a981e8d5d78da49da90b040d4e3a93b7f71360b25cf75fca36a4068748e1bc171dd40fa31d6f9c4c926a635f4ea4faf7511146bc5782606966aaab13a30d67cf182751149f678852da30d0f9b6ea5524a1f5ea01e77d7a74ac588ab2251cdbc9f4f8aa2cf367f0ad2178e66fbd7ab447aae12a7bc6cf3925fe99dcdf8ec95cf4576520b781dc12fe6d310978315d2e3d7dbc49c9be2fa40788ebd5fc02c6c7f566a64b7f4af7a96353265dc9e4c74c909b9a385966f4d7312fdcdfa8f5d0632c6db4a19ce696416a04e937d4a9948c436a9b26e757eae59c07e5d3228254b35003eba32ed448516e9aa77b5b92c9ce7fff06a8f4f652d27971a46c621a6b2ee3c1adaf60d5cdfb381a4e4ac9ab7d7d72fcb2d6aa7e104255345f1e15dec8299c9c75735a01338d20f72d8b359803becef76d9ca6da029d0a795e6d4a652bf3880efeee074c81774b2971da03eff6d9516ac8a0c34b686aa1afbcb2befc79618a3dbb2bcd53da0075cdba0ddd975fd4e833291005f0fbf7b167922dc85b109e1381431e0fdc50f80b8592edd57f50f9dd950205e1a21cd3026cb30abe6d06dbec6c7cdb76d90c0e85a69aa1522281bcb3f4fc54ee443e76c7d9bf82e313f2dc3e277c699e079a847635780a5b724aca0ede72febba648de12fd14e3a78b29e9df82a19f4ed9c712e5b313c05e6908f6d4601d076afda5cf77eab4ea7c44c9d40f463fe8cde79f18170de9b087b113cfc7d467bd164564c2a8a99e4566d6f9eb1a8d5393700158fe84c109735cfe0ab45d9eb6fe61619d8538512730e015ffac07279973126e9087b209144c8797dd6b65381e616256a9cbf7771222c41618eb82d3539e7750ef0614acb4c901f88f31589d9d6d87c4b2a5361ad44155bf5476f2bc42cd2e758d478a1bcaf27c6c5607f025c8ff75913cb95eb631a690e3e6201204e616a4482a6eae323dadc0a9c22a7de1567ec3f45380bbde304cc76efd4bb0ac9f28475534eb973fc02f3f5dc73a862052f82f6d40c0821012589925ce3f2274ff2a8097b8464b44068c1505b967679bcc6b5d7e7ece9bd1880fc32531fe5d7bac9c5262a709239e477ecf44915a70aa7f984ec1bed047f3ec92a55714403c7c7503a3ac87cec792e072eefa623c56b6b33beb5ae7f5066a952cf6b0b25ab74841e5d2a9b20b1fe0cd83c3aae37eac0dd08d6a65410af956767766f2c6c12d13e87f363052e1e645c2dccd42948be835a9fe1c8892453b73cbcaa7c9222ccece11f86fba52d29d64a609da597e226e5f59e9a8301297c1e9881557a860df15ee14cf4bf70988e2cf90359587bc378adba5aa610db3cc1d6ae5fba9390b4c68380c24d19ef5c94e75eb0ee42643e57edabca519434de5532a6d888a4ffcdbbcca3e61d47f654c4614fee7d7ea1facd4247ae0cc9c6bbab3ff4ec5f91ce1a6d3e47742446a8c04743572db3145e1e5f25ad09ae090d86fe3e2202a91c220d081ec131e9fe9463506c0fe4804ef22231fae7a31aaec8b99ccdb7688fd18e442bff7560215b26dcca8192af496fea787bbd550ace378792af6d3cb4ac88c7ef3c5ebf69e75097d5817e306fd287ac18e95", 0x4000}, {&(0x7f0000000840)="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", 0xfe}, {&(0x7f0000002680)="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", 0x138}], 0x3, 0x0, 0x0, 0x1a0}, 0x0) 16:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000340)={[{@norecovery='norecovery'}]}) 16:09:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x5, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x135}, 0x48) [ 429.655532] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 16:09:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@ldst={0x5, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x135}, 0x48) [ 429.719776] gfs2: not a GFS2 filesystem 16:09:08 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b2071") r1 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0x4) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001680)="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", 0x4000}, {&(0x7f0000000840)="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", 0xfe}, {&(0x7f0000002680)="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", 0x138}], 0x3, 0x0, 0x0, 0x1a0}, 0x0) 16:09:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000340)={[{@norecovery='norecovery'}]}) 16:09:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) [ 430.021381] gfs2: not a GFS2 filesystem 16:09:08 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:08 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000b4bffc)=0x7, 0x293) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/31}, {&(0x7f00000000c0)=""/28}, {&(0x7f0000000180)=""/199}, {&(0x7f0000000100)=""/27}], 0x0, &(0x7f00000002c0)=""/44}}], 0x2, 0x2, 0x0) 16:09:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000b4bffc)=0x7, 0x293) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/31}, {&(0x7f00000000c0)=""/28}, {&(0x7f0000000180)=""/199}, {&(0x7f0000000100)=""/27}], 0x0, &(0x7f00000002c0)=""/44}}], 0x2, 0x2, 0x0) 16:09:09 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000b4bffc)=0x7, 0x293) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/31}, {&(0x7f00000000c0)=""/28}, {&(0x7f0000000180)=""/199}, {&(0x7f0000000100)=""/27}], 0x0, &(0x7f00000002c0)=""/44}}], 0x2, 0x2, 0x0) 16:09:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/115, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x69b31885}}}) close(r0) socket$inet6(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/124) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 16:09:09 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:09 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000b4bffc)=0x7, 0x293) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/31}, {&(0x7f00000000c0)=""/28}, {&(0x7f0000000180)=""/199}, {&(0x7f0000000100)=""/27}], 0x0, &(0x7f00000002c0)=""/44}}], 0x2, 0x2, 0x0) 16:09:09 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:09 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc0, &(0x7f0000001240)) 16:09:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:09 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:09 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r2 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000070a495500"/20], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 16:09:09 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc0, &(0x7f0000001240)) 16:09:09 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:09 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 16:09:10 executing program 5: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:10 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 431.321634] syz-executor.1 (18969) used greatest stack depth: 22216 bytes left 16:09:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc0, &(0x7f0000001240)) 16:09:10 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:10 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:10 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc0, &(0x7f0000001240)) 16:09:10 executing program 5: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:10 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:10 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:10 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:10 executing program 5: r0 = open(&(0x7f0000000000)='./file1\x00', 0x8046, 0x0) fcntl$setlease(r0, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 16:09:10 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:10 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:10 executing program 5: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:10 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 1: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1}}], 0x1, 0x0) 16:09:11 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 5: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 1: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 0: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 5: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 0: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 1: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 5: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 0: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:11 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 5: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)) 16:09:12 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 3: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)) 16:09:12 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:12 executing program 5: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:12 executing program 2: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 4: perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cg\x00\x045p\xe0\xffubtree_cone\xad\xa8\x8d.', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) write$cgroup_int(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) write$cgroup_int(r3, 0x0, 0x0) 16:09:12 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)) 16:09:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:12 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)) 16:09:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x1ac, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x224) ptrace$setopts(0x4206, r0, 0x0, 0x40) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x2, 0x0) 16:09:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x1ac, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffff010000001900000000000000000076657461315f746f5f0400000000000065727370626e300000000000000000006272696466655f736c6176655f31000069653e841901e50ac9000000000000000180c2000000000000000000aaaabfaaaa000000000000000000d4000000d40000001c010000636c7573746572000000000000f0ff1f00000000000000000000000000000000100000000000008e8300000000000000000000007265616c6d0000000000000000000000000000000000000000000000000000000c0000000000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000004608fdc2eedaf8ff6fcbc6a67ee31e6bfa4cf9f0761ffdac96c7d300bc1d000000000000000000000000000000080000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x224) ptrace$setopts(0x4206, r0, 0x0, 0x40) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x2, 0x0) [ 434.218897] xt_cluster: you have exceeded the maximum number of cluster nodes (131 > 32) 16:09:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 16:09:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 434.458014] xt_cluster: you have exceeded the maximum number of cluster nodes (131 > 32) 16:09:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x1ac, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffff010000001900000000000000000076657461315f746f5f0400000000000065727370626e300000000000000000006272696466655f736c6176655f31000069653e841901e50ac9000000000000000180c2000000000000000000aaaabfaaaa000000000000000000d4000000d40000001c010000636c7573746572000000000000f0ff1f00000000000000000000000000000000100000000000008e8300000000000000000000007265616c6d0000000000000000000000000000000000000000000000000000000c0000000000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000004608fdc2eedaf8ff6fcbc6a67ee31e6bfa4cf9f0761ffdac96c7d300bc1d000000000000000000000000000000080000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x224) ptrace$setopts(0x4206, r0, 0x0, 0x40) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x2, 0x0) 16:09:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 434.777229] xt_cluster: you have exceeded the maximum number of cluster nodes (131 > 32) 16:09:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x1, 0x1ac, [0x0, 0x200000c0, 0x200000f0, 0x2000023c], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffff010000001900000000000000000076657461315f746f5f0400000000000065727370626e300000000000000000006272696466655f736c6176655f31000069653e841901e50ac9000000000000000180c2000000000000000000aaaabfaaaa000000000000000000d4000000d40000001c010000636c7573746572000000000000f0ff1f00000000000000000000000000000000100000000000008e8300000000000000000000007265616c6d0000000000000000000000000000000000000000000000000000000c0000000000000000000000000000006c6f67000000000000000000000000000000000000000000000000000000000024000000004608fdc2eedaf8ff6fcbc6a67ee31e6bfa4cf9f0761ffdac96c7d300bc1d000000000000000000000000000000080000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x224) ptrace$setopts(0x4206, r0, 0x0, 0x40) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x2, 0x0) [ 435.074392] xt_cluster: you have exceeded the maximum number of cluster nodes (131 > 32) 16:09:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:16 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) 16:09:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) 16:09:16 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) 16:09:17 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) 16:09:17 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff}}) 16:09:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 16:09:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 438.600137] EXT4-fs (sda1): re-mounted. Opts: 16:09:17 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) 16:09:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 439.027580] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 16:09:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 439.103339] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 439.154987] CPU: 1 PID: 19352 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 439.163129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.172504] Call Trace: [ 439.175256] dump_stack+0x197/0x210 [ 439.179008] dump_header+0x15e/0xa55 [ 439.182881] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 439.188023] ? ___ratelimit+0x60/0x595 [ 439.192524] ? do_raw_spin_unlock+0x178/0x270 [ 439.197049] oom_kill_process.cold+0x10/0x6ef [ 439.197112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.197124] ? task_will_free_mem+0x139/0x6e0 [ 439.197143] out_of_memory+0x362/0x1330 [ 439.197161] ? oom_killer_disable+0x280/0x280 [ 439.197242] mem_cgroup_out_of_memory+0x1d2/0x240 [ 439.197255] ? memcg_event_wake+0x230/0x230 [ 439.197277] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 439.197310] ? cgroup_file_notify+0x140/0x1b0 [ 439.197326] memory_max_write+0x169/0x300 [ 439.197345] ? mem_cgroup_write+0x360/0x360 [ 439.249144] ? lock_acquire+0x16f/0x3f0 [ 439.253386] ? kernfs_fop_write+0x227/0x480 [ 439.257954] cgroup_file_write+0x241/0x790 [ 439.262227] ? mem_cgroup_write+0x360/0x360 [ 439.266590] ? kill_css+0x380/0x380 [ 439.270348] ? kill_css+0x380/0x380 [ 439.274170] kernfs_fop_write+0x2b8/0x480 [ 439.278706] __vfs_write+0x114/0x810 [ 439.282761] ? kernfs_fop_open+0xd80/0xd80 [ 439.287469] ? kernel_read+0x120/0x120 [ 439.291502] ? __lock_is_held+0xb6/0x140 [ 439.295831] ? rcu_read_lock_sched_held+0x110/0x130 [ 439.301174] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 439.305966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.311718] ? __sb_start_write+0x1a9/0x360 [ 439.316182] vfs_write+0x20c/0x560 [ 439.319761] ksys_write+0x14f/0x2d0 [ 439.323681] ? __ia32_sys_read+0xb0/0xb0 [ 439.327846] ? do_syscall_64+0x26/0x620 [ 439.332075] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.337868] ? do_syscall_64+0x26/0x620 [ 439.341967] __x64_sys_write+0x73/0xb0 [ 439.346067] do_syscall_64+0xfd/0x620 [ 439.349917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.355278] RIP: 0033:0x45a649 [ 439.358850] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.378157] RSP: 002b:00007f01349adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.386169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 439.393799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 16:09:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) [ 439.401562] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 439.409039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01349ae6d4 [ 439.416491] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 439.569613] Task in /syz0 killed as a result of limit of /syz0 [ 439.598465] memory: usage 40756kB, limit 0kB, failcnt 0 16:09:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 439.643074] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:09:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 439.706873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 439.713452] Memory cgroup stats for /syz0: cache:292KB rss:32328KB rss_huge:30720KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32416KB inactive_file:0KB active_file:4KB unevictable:0KB 16:09:18 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) 16:09:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 440.026114] Memory cgroup out of memory: Kill process 12902 (syz-executor.0) score 11594000 or sacrifice child [ 440.076291] Killed process 12902 (syz-executor.0) total-vm:72588kB, anon-rss:10392kB, file-rss:35836kB, shmem-rss:0kB [ 440.140754] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 440.237910] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 440.249427] CPU: 0 PID: 19326 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 440.257287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.266755] Call Trace: [ 440.269368] dump_stack+0x197/0x210 [ 440.273003] dump_header+0x15e/0xa55 [ 440.276806] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 440.281931] ? ___ratelimit+0x60/0x595 [ 440.285827] ? do_raw_spin_unlock+0x178/0x270 [ 440.290420] oom_kill_process.cold+0x10/0x6ef [ 440.295097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.300891] ? task_will_free_mem+0x139/0x6e0 [ 440.305666] out_of_memory+0x362/0x1330 [ 440.309928] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 440.315290] ? oom_killer_disable+0x280/0x280 [ 440.320630] ? find_held_lock+0x35/0x130 [ 440.325004] mem_cgroup_out_of_memory+0x1d2/0x240 [ 440.329881] ? memcg_event_wake+0x230/0x230 [ 440.334318] ? do_raw_spin_unlock+0x178/0x270 [ 440.338958] ? _raw_spin_unlock+0x2d/0x50 [ 440.343202] try_charge+0xec5/0x1490 [ 440.346918] ? lock_downgrade+0x880/0x880 [ 440.351351] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 440.356293] ? rcu_read_unlock+0x33/0x60 [ 440.360698] ? get_mem_cgroup_from_mm+0x185/0x510 [ 440.365553] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 440.371721] mem_cgroup_try_charge+0x259/0x6b0 [ 440.376336] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 440.381627] __handle_mm_fault+0x1e50/0x3f80 [ 440.386157] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 440.391433] ? count_memcg_event_mm+0x2b1/0x4d0 [ 440.396108] handle_mm_fault+0x1b5/0x690 [ 440.400252] __do_page_fault+0x62a/0xe90 [ 440.404398] ? vmalloc_fault+0x740/0x740 [ 440.408774] ? trace_hardirqs_off_caller+0x65/0x220 [ 440.413819] ? trace_hardirqs_on_caller+0x6a/0x220 [ 440.419139] ? page_fault+0x8/0x30 [ 440.422820] do_page_fault+0x71/0x57d [ 440.427018] ? page_fault+0x8/0x30 [ 440.430661] page_fault+0x1e/0x30 [ 440.434126] RIP: 0033:0x411e3f [ 440.437761] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 440.459039] RSP: 002b:00007fff0fdb3f80 EFLAGS: 00010206 [ 440.464697] RAX: 00007f013496d000 RBX: 0000000000020000 RCX: 000000000045a69a [ 440.472714] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 440.480234] RBP: 00007fff0fdb4060 R08: ffffffffffffffff R09: 0000000000000000 [ 440.487513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0fdb4150 [ 440.495179] R13: 00007f013498d700 R14: 0000000000000002 R15: 000000000075c07c [ 440.505906] Task in /syz0 killed as a result of limit of /syz0 [ 440.512972] memory: usage 30176kB, limit 0kB, failcnt 9 [ 440.519031] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 440.527480] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 440.534041] Memory cgroup stats for /syz0: cache:292KB rss:22000KB rss_huge:20480KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:22048KB inactive_file:0KB active_file:4KB unevictable:0KB [ 440.556294] Memory cgroup out of memory: Kill process 12535 (syz-executor.0) score 9550000 or sacrifice child [ 440.568115] Killed process 12549 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 440.597696] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 440.619971] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 440.627670] CPU: 0 PID: 19352 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 440.635874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.645605] Call Trace: [ 440.648313] dump_stack+0x197/0x210 [ 440.652136] dump_header+0x15e/0xa55 [ 440.655874] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 440.661344] ? ___ratelimit+0x60/0x595 [ 440.665664] ? do_raw_spin_unlock+0x178/0x270 [ 440.670292] oom_kill_process.cold+0x10/0x6ef [ 440.674923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.680790] ? task_will_free_mem+0x139/0x6e0 [ 440.685481] out_of_memory+0x362/0x1330 [ 440.689711] ? oom_killer_disable+0x280/0x280 [ 440.694267] ? cgroup_file_notify+0x140/0x1b0 [ 440.698897] mem_cgroup_out_of_memory+0x1d2/0x240 [ 440.703966] ? memcg_event_wake+0x230/0x230 [ 440.708526] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 440.713896] ? cgroup_file_notify+0x140/0x1b0 [ 440.718589] memory_max_write+0x169/0x300 [ 440.722897] ? mem_cgroup_write+0x360/0x360 [ 440.727289] ? lock_acquire+0x16f/0x3f0 [ 440.731314] ? kernfs_fop_write+0x227/0x480 [ 440.735726] cgroup_file_write+0x241/0x790 [ 440.739968] ? mem_cgroup_write+0x360/0x360 [ 440.744328] ? kill_css+0x380/0x380 [ 440.748179] ? kill_css+0x380/0x380 [ 440.751995] kernfs_fop_write+0x2b8/0x480 [ 440.756342] __vfs_write+0x114/0x810 [ 440.760709] ? kernfs_fop_open+0xd80/0xd80 [ 440.764978] ? kernel_read+0x120/0x120 [ 440.768978] ? __lock_is_held+0xb6/0x140 [ 440.773088] ? rcu_read_lock_sched_held+0x110/0x130 [ 440.778200] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 440.782959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.788507] ? __sb_start_write+0x1a9/0x360 [ 440.792838] vfs_write+0x20c/0x560 [ 440.796674] ksys_write+0x14f/0x2d0 [ 440.800308] ? __ia32_sys_read+0xb0/0xb0 [ 440.804376] ? do_syscall_64+0x26/0x620 [ 440.808355] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.814020] ? do_syscall_64+0x26/0x620 [ 440.818001] __x64_sys_write+0x73/0xb0 [ 440.821889] do_syscall_64+0xfd/0x620 [ 440.825892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.831522] RIP: 0033:0x45a649 [ 440.834716] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.853799] RSP: 002b:00007f01349adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.861967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 440.869466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 440.876738] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 440.885540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01349ae6d4 [ 440.893382] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 440.903265] Task in /syz0 killed as a result of limit of /syz0 [ 440.909530] memory: usage 30012kB, limit 0kB, failcnt 15 [ 440.915189] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 440.922392] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 440.928782] Memory cgroup stats for /syz0: cache:292KB rss:22000KB rss_huge:20480KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:22040KB inactive_file:0KB active_file:4KB unevictable:0KB [ 440.950394] Memory cgroup out of memory: Kill process 12535 (syz-executor.0) score 9550000 or sacrifice child [ 440.960820] Killed process 12535 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:35868kB, shmem-rss:0kB [ 440.972890] oom_reaper: reaped process 12535 (syz-executor.0), now anon-rss:0kB, file-rss:34908kB, shmem-rss:0kB [ 440.985138] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 441.006718] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 441.014951] CPU: 0 PID: 19326 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 441.022791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.032379] Call Trace: [ 441.035114] dump_stack+0x197/0x210 [ 441.038784] dump_header+0x15e/0xa55 [ 441.042536] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 441.048174] ? ___ratelimit+0x60/0x595 [ 441.052146] ? do_raw_spin_unlock+0x178/0x270 [ 441.056793] oom_kill_process.cold+0x10/0x6ef [ 441.061769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.067564] ? task_will_free_mem+0x139/0x6e0 [ 441.072246] out_of_memory+0x362/0x1330 [ 441.076470] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 441.081986] ? oom_killer_disable+0x280/0x280 [ 441.086586] ? find_held_lock+0x35/0x130 [ 441.090977] mem_cgroup_out_of_memory+0x1d2/0x240 [ 441.095919] ? memcg_event_wake+0x230/0x230 [ 441.100350] ? do_raw_spin_unlock+0x178/0x270 [ 441.104971] ? _raw_spin_unlock+0x2d/0x50 [ 441.109409] try_charge+0xec5/0x1490 [ 441.113452] ? lock_downgrade+0x880/0x880 [ 441.117702] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 441.122554] ? rcu_read_unlock+0x33/0x60 [ 441.126620] ? get_mem_cgroup_from_mm+0x185/0x510 [ 441.131565] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 441.137770] mem_cgroup_try_charge+0x259/0x6b0 [ 441.143373] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 441.148461] __handle_mm_fault+0x1e50/0x3f80 [ 441.153053] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 441.157928] ? count_memcg_event_mm+0x2b1/0x4d0 [ 441.163482] handle_mm_fault+0x1b5/0x690 [ 441.168014] __do_page_fault+0x62a/0xe90 [ 441.172131] ? vmalloc_fault+0x740/0x740 [ 441.176200] ? trace_hardirqs_off_caller+0x65/0x220 [ 441.182177] ? trace_hardirqs_on_caller+0x6a/0x220 [ 441.187653] ? page_fault+0x8/0x30 [ 441.191802] do_page_fault+0x71/0x57d [ 441.196266] ? page_fault+0x8/0x30 [ 441.200133] page_fault+0x1e/0x30 [ 441.203842] RIP: 0033:0x411e3f [ 441.207072] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 441.226841] RSP: 002b:00007fff0fdb3f80 EFLAGS: 00010206 [ 441.232483] RAX: 00007f013496d000 RBX: 0000000000020000 RCX: 000000000045a69a [ 441.239759] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 441.247704] RBP: 00007fff0fdb4060 R08: ffffffffffffffff R09: 0000000000000000 [ 441.255194] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0fdb4150 [ 441.262833] R13: 00007f013498d700 R14: 0000000000000002 R15: 000000000075c07c [ 441.271994] Task in /syz0 killed as a result of limit of /syz0 [ 441.278723] memory: usage 27684kB, limit 0kB, failcnt 15 [ 441.284560] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.292182] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.299211] Memory cgroup stats for /syz0: cache:292KB rss:19852KB rss_huge:18432KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19876KB inactive_file:4KB active_file:0KB unevictable:0KB [ 441.321425] Memory cgroup out of memory: Kill process 12558 (syz-executor.0) score 9550000 or sacrifice child [ 441.332131] Killed process 12558 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:35868kB, shmem-rss:0kB [ 441.344834] oom_reaper: reaped process 12558 (syz-executor.0), now anon-rss:0kB, file-rss:34908kB, shmem-rss:0kB [ 441.355605] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 441.368484] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 441.374077] CPU: 0 PID: 19352 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 441.382734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.392831] Call Trace: [ 441.395824] dump_stack+0x197/0x210 [ 441.399615] dump_header+0x15e/0xa55 [ 441.403657] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 441.409118] ? ___ratelimit+0x60/0x595 [ 441.413164] ? do_raw_spin_unlock+0x178/0x270 [ 441.417680] oom_kill_process.cold+0x10/0x6ef [ 441.422532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.428205] ? task_will_free_mem+0x139/0x6e0 [ 441.432898] out_of_memory+0x362/0x1330 [ 441.436917] ? oom_killer_disable+0x280/0x280 [ 441.442406] ? cgroup_file_notify+0x140/0x1b0 [ 441.447175] mem_cgroup_out_of_memory+0x1d2/0x240 [ 441.452052] ? memcg_event_wake+0x230/0x230 [ 441.457001] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 441.462338] ? cgroup_file_notify+0x140/0x1b0 [ 441.467292] memory_max_write+0x169/0x300 [ 441.472140] ? mem_cgroup_write+0x360/0x360 [ 441.476663] ? lock_acquire+0x16f/0x3f0 [ 441.480670] ? kernfs_fop_write+0x227/0x480 [ 441.485393] cgroup_file_write+0x241/0x790 [ 441.490038] ? mem_cgroup_write+0x360/0x360 [ 441.494910] ? kill_css+0x380/0x380 [ 441.498765] ? kill_css+0x380/0x380 [ 441.502575] kernfs_fop_write+0x2b8/0x480 [ 441.507016] __vfs_write+0x114/0x810 [ 441.510771] ? kernfs_fop_open+0xd80/0xd80 [ 441.515306] ? kernel_read+0x120/0x120 [ 441.519474] ? __lock_is_held+0xb6/0x140 [ 441.523749] ? rcu_read_lock_sched_held+0x110/0x130 [ 441.529050] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 441.534197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.540042] ? __sb_start_write+0x1a9/0x360 [ 441.545264] vfs_write+0x20c/0x560 [ 441.549116] ksys_write+0x14f/0x2d0 [ 441.552762] ? __ia32_sys_read+0xb0/0xb0 [ 441.557256] ? do_syscall_64+0x26/0x620 [ 441.561417] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.566978] ? do_syscall_64+0x26/0x620 [ 441.571085] __x64_sys_write+0x73/0xb0 [ 441.574983] do_syscall_64+0xfd/0x620 [ 441.578801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.583990] RIP: 0033:0x45a649 [ 441.587202] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.607073] RSP: 002b:00007f01349adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.615127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 441.623300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 441.631067] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 441.638732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01349ae6d4 [ 441.646421] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 441.654989] Task in /syz0 killed as a result of limit of /syz0 [ 441.661327] memory: usage 25340kB, limit 0kB, failcnt 21 [ 441.667237] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.674761] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.681424] Memory cgroup stats for /syz0: cache:292KB rss:17596KB rss_huge:16384KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17712KB inactive_file:4KB active_file:0KB unevictable:0KB [ 441.703589] Memory cgroup out of memory: Kill process 12586 (syz-executor.0) score 9547000 or sacrifice child [ 441.714205] Killed process 12586 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:35856kB, shmem-rss:0kB [ 441.726737] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 441.727591] oom_reaper: reaped process 12586 (syz-executor.0), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB [ 441.738408] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 441.755884] CPU: 0 PID: 19352 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 441.764455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.774286] Call Trace: [ 441.777025] dump_stack+0x197/0x210 [ 441.780950] dump_header+0x15e/0xa55 [ 441.784859] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 441.791120] ? ___ratelimit+0x60/0x595 [ 441.795505] ? do_raw_spin_unlock+0x178/0x270 [ 441.800382] oom_kill_process.cold+0x10/0x6ef [ 441.805647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.811926] ? task_will_free_mem+0x139/0x6e0 [ 441.816539] out_of_memory+0x362/0x1330 [ 441.820706] ? oom_killer_disable+0x280/0x280 [ 441.825440] mem_cgroup_out_of_memory+0x1d2/0x240 [ 441.830653] ? memcg_event_wake+0x230/0x230 [ 441.835109] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 441.840576] ? cgroup_file_notify+0x140/0x1b0 [ 441.846027] memory_max_write+0x169/0x300 [ 441.850767] ? mem_cgroup_write+0x360/0x360 [ 441.855283] ? lock_acquire+0x16f/0x3f0 [ 441.859623] ? kernfs_fop_write+0x227/0x480 [ 441.864226] cgroup_file_write+0x241/0x790 [ 441.868758] ? mem_cgroup_write+0x360/0x360 [ 441.873508] ? kill_css+0x380/0x380 [ 441.877243] ? kill_css+0x380/0x380 [ 441.880893] kernfs_fop_write+0x2b8/0x480 [ 441.885164] __vfs_write+0x114/0x810 [ 441.889010] ? kernfs_fop_open+0xd80/0xd80 [ 441.893376] ? kernel_read+0x120/0x120 [ 441.897531] ? __lock_is_held+0xb6/0x140 [ 441.901793] ? rcu_read_lock_sched_held+0x110/0x130 [ 441.906826] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 441.911649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.917374] ? __sb_start_write+0x1a9/0x360 [ 441.921705] vfs_write+0x20c/0x560 [ 441.925417] ksys_write+0x14f/0x2d0 [ 441.929274] ? __ia32_sys_read+0xb0/0xb0 [ 441.933431] ? do_syscall_64+0x26/0x620 [ 441.937413] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.942967] ? do_syscall_64+0x26/0x620 [ 441.947556] __x64_sys_write+0x73/0xb0 [ 441.951656] do_syscall_64+0xfd/0x620 [ 441.955463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.960810] RIP: 0033:0x45a649 [ 441.964071] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.983385] RSP: 002b:00007f01349adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.991429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 441.998980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 442.006293] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 442.014088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01349ae6d4 [ 442.022396] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 442.031399] Task in /syz0 killed as a result of limit of /syz0 [ 442.038422] memory: usage 22932kB, limit 0kB, failcnt 30 [ 442.044117] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.051272] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.058157] Memory cgroup stats for /syz0: cache:292KB rss:15444KB rss_huge:14336KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15540KB inactive_file:0KB active_file:0KB unevictable:0KB [ 442.080057] Memory cgroup out of memory: Kill process 12484 (syz-executor.0) score 9546000 or sacrifice child [ 442.093429] Killed process 12484 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:35852kB, shmem-rss:0kB [ 442.105874] oom_reaper: reaped process 12484 (syz-executor.0), now anon-rss:0kB, file-rss:34892kB, shmem-rss:0kB [ 442.118561] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 442.130026] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 442.135916] CPU: 0 PID: 12027 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 442.143921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.153651] Call Trace: [ 442.156260] dump_stack+0x197/0x210 [ 442.160444] dump_header+0x15e/0xa55 [ 442.164287] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 442.169435] ? ___ratelimit+0x60/0x595 [ 442.173321] ? do_raw_spin_unlock+0x178/0x270 [ 442.177951] oom_kill_process.cold+0x10/0x6ef [ 442.182492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.188030] ? task_will_free_mem+0x139/0x6e0 [ 442.192525] out_of_memory+0x362/0x1330 [ 442.196516] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 442.201841] ? oom_killer_disable+0x280/0x280 [ 442.206457] ? find_held_lock+0x35/0x130 [ 442.210807] mem_cgroup_out_of_memory+0x1d2/0x240 [ 442.215847] ? memcg_event_wake+0x230/0x230 [ 442.220492] ? do_raw_spin_unlock+0x178/0x270 [ 442.225355] ? _raw_spin_unlock+0x2d/0x50 [ 442.229533] try_charge+0xec5/0x1490 [ 442.233252] ? lock_downgrade+0x880/0x880 [ 442.237553] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 442.242393] ? rcu_read_unlock+0x33/0x60 [ 442.246464] ? get_mem_cgroup_from_mm+0x185/0x510 [ 442.251316] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 442.257464] ? avc_has_perm+0x379/0x610 [ 442.261625] mem_cgroup_try_charge+0x259/0x6b0 [ 442.266279] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 442.271591] wp_page_copy+0x430/0x16a0 [ 442.275485] ? pmd_pfn+0x1d0/0x1d0 [ 442.279673] ? do_raw_spin_unlock+0x178/0x270 [ 442.284659] do_wp_page+0x57d/0x10b0 [ 442.288471] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 442.293831] ? kasan_check_write+0x14/0x20 [ 442.298351] ? do_raw_spin_lock+0xc8/0x240 [ 442.302815] __handle_mm_fault+0x2305/0x3f80 [ 442.307292] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 442.312570] ? count_memcg_event_mm+0x2b1/0x4d0 [ 442.317354] handle_mm_fault+0x1b5/0x690 [ 442.321431] __do_page_fault+0x62a/0xe90 [ 442.325625] ? vmalloc_fault+0x740/0x740 [ 442.329710] ? trace_hardirqs_off_caller+0x65/0x220 [ 442.334952] ? trace_hardirqs_on_caller+0x6a/0x220 [ 442.340011] ? page_fault+0x8/0x30 [ 442.343556] do_page_fault+0x71/0x57d [ 442.347567] ? page_fault+0x8/0x30 [ 442.351206] page_fault+0x1e/0x30 [ 442.354660] RIP: 0033:0x43172a [ 442.357942] Code: 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 3a f7 ff ff [ 442.377759] RSP: 002b:00007fff0fdb4080 EFLAGS: 00010206 [ 442.383153] RAX: 0000000000018691 RBX: 0000000000718640 RCX: 0000000000008041 [ 442.391039] RDX: 00000000026bb930 RSI: 00000000026c3970 RDI: 0000000000000003 [ 442.398400] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000026ba940 [ 442.405936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 442.413417] R13: 0000000000718698 R14: 000000000006b1fd R15: 0000000000002710 [ 442.422095] Task in /syz0 killed as a result of limit of /syz0 [ 442.428580] memory: usage 18268kB, limit 0kB, failcnt 30 [ 442.434269] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.441328] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.447824] Memory cgroup stats for /syz0: cache:292KB rss:11208KB rss_huge:10240KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:11212KB inactive_file:0KB active_file:0KB unevictable:0KB [ 442.469518] Memory cgroup out of memory: Kill process 16967 (syz-executor.0) score 9537000 or sacrifice child [ 442.481404] Killed process 16967 (syz-executor.0) total-vm:72720kB, anon-rss:2216kB, file-rss:35800kB, shmem-rss:0kB [ 442.494189] oom_reaper: reaped process 16967 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 442.496027] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 442.516143] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 442.521704] CPU: 0 PID: 12027 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 442.529759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.539784] Call Trace: [ 442.542382] dump_stack+0x197/0x210 [ 442.546113] dump_header+0x15e/0xa55 [ 442.550575] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 442.556176] ? ___ratelimit+0x60/0x595 [ 442.560159] ? do_raw_spin_unlock+0x178/0x270 [ 442.564822] oom_kill_process.cold+0x10/0x6ef [ 442.569363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.575025] ? task_will_free_mem+0x139/0x6e0 [ 442.579524] out_of_memory+0x362/0x1330 [ 442.583885] ? lock_downgrade+0x880/0x880 [ 442.588284] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 442.593397] ? oom_killer_disable+0x280/0x280 [ 442.598124] ? find_held_lock+0x35/0x130 [ 442.602192] mem_cgroup_out_of_memory+0x1d2/0x240 [ 442.607190] ? memcg_event_wake+0x230/0x230 [ 442.611653] ? do_raw_spin_unlock+0x178/0x270 [ 442.616470] ? _raw_spin_unlock+0x2d/0x50 [ 442.620640] try_charge+0xec5/0x1490 [ 442.624671] ? lock_downgrade+0x880/0x880 [ 442.628928] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 442.634216] ? rcu_read_unlock+0x33/0x60 [ 442.638896] ? get_mem_cgroup_from_mm+0x185/0x510 [ 442.643953] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 442.650238] ? avc_has_perm+0x379/0x610 [ 442.654564] mem_cgroup_try_charge+0x259/0x6b0 [ 442.659259] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 442.665510] wp_page_copy+0x430/0x16a0 [ 442.669553] ? pmd_pfn+0x1d0/0x1d0 [ 442.673144] ? do_raw_spin_unlock+0x178/0x270 [ 442.677755] do_wp_page+0x57d/0x10b0 [ 442.681932] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 442.686729] ? kasan_check_write+0x14/0x20 [ 442.691236] ? do_raw_spin_lock+0xc8/0x240 [ 442.695744] __handle_mm_fault+0x2305/0x3f80 [ 442.700231] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 442.705370] ? count_memcg_event_mm+0x2b1/0x4d0 [ 442.710093] handle_mm_fault+0x1b5/0x690 [ 442.714406] __do_page_fault+0x62a/0xe90 [ 442.718484] ? vmalloc_fault+0x740/0x740 [ 442.722823] ? trace_hardirqs_off_caller+0x65/0x220 [ 442.728535] ? trace_hardirqs_on_caller+0x6a/0x220 [ 442.734553] ? page_fault+0x8/0x30 [ 442.738112] do_page_fault+0x71/0x57d [ 442.742039] ? page_fault+0x8/0x30 [ 442.745864] page_fault+0x1e/0x30 [ 442.749548] RIP: 0033:0x43172a [ 442.752753] Code: 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 3a f7 ff ff [ 442.771814] RSP: 002b:00007fff0fdb4080 EFLAGS: 00010206 [ 442.777191] RAX: 0000000000018691 RBX: 0000000000718640 RCX: 0000000000008041 [ 442.785300] RDX: 00000000026bb930 RSI: 00000000026c3970 RDI: 0000000000000003 [ 442.792922] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000026ba940 [ 442.800536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 442.808403] R13: 0000000000718698 R14: 000000000006b1fd R15: 0000000000002710 [ 442.818006] Task in /syz0 killed as a result of limit of /syz0 [ 442.824589] memory: usage 15920kB, limit 0kB, failcnt 36 [ 442.830410] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.837541] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.844137] Memory cgroup stats for /syz0: cache:292KB rss:9028KB rss_huge:8192KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:9028KB inactive_file:0KB active_file:0KB unevictable:0KB [ 442.866225] Memory cgroup out of memory: Kill process 12518 (syz-executor.0) score 9285000 or sacrifice child [ 442.878546] Killed process 12518 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 442.893049] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 442.897722] oom_reaper: reaped process 12518 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 442.904763] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 442.921400] CPU: 0 PID: 12027 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 442.929226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.938897] Call Trace: [ 442.941620] dump_stack+0x197/0x210 [ 442.945586] dump_header+0x15e/0xa55 [ 442.949838] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 442.955011] ? ___ratelimit+0x60/0x595 [ 442.959411] ? do_raw_spin_unlock+0x178/0x270 [ 442.964212] oom_kill_process.cold+0x10/0x6ef [ 442.970101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.976925] ? task_will_free_mem+0x139/0x6e0 [ 442.981990] out_of_memory+0x362/0x1330 [ 442.986360] ? lock_downgrade+0x880/0x880 [ 442.991133] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 442.996670] ? oom_killer_disable+0x280/0x280 [ 443.001341] ? find_held_lock+0x35/0x130 [ 443.005969] mem_cgroup_out_of_memory+0x1d2/0x240 [ 443.011234] ? memcg_event_wake+0x230/0x230 [ 443.015912] ? do_raw_spin_unlock+0x178/0x270 [ 443.020430] ? _raw_spin_unlock+0x2d/0x50 [ 443.025242] try_charge+0xec5/0x1490 [ 443.029422] ? lock_downgrade+0x880/0x880 [ 443.033890] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 443.038973] ? rcu_read_unlock+0x33/0x60 [ 443.043226] ? get_mem_cgroup_from_mm+0x185/0x510 [ 443.048875] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 443.056035] ? avc_has_perm+0x379/0x610 [ 443.060619] mem_cgroup_try_charge+0x259/0x6b0 [ 443.065500] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 443.070741] wp_page_copy+0x430/0x16a0 [ 443.074799] ? pmd_pfn+0x1d0/0x1d0 [ 443.078484] ? do_raw_spin_unlock+0x178/0x270 [ 443.083329] do_wp_page+0x57d/0x10b0 [ 443.087327] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 443.092190] ? kasan_check_write+0x14/0x20 [ 443.096578] ? do_raw_spin_lock+0xc8/0x240 [ 443.101113] __handle_mm_fault+0x2305/0x3f80 [ 443.105811] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 443.110793] ? count_memcg_event_mm+0x2b1/0x4d0 [ 443.116706] handle_mm_fault+0x1b5/0x690 [ 443.120868] __do_page_fault+0x62a/0xe90 [ 443.125423] ? vmalloc_fault+0x740/0x740 [ 443.129638] ? trace_hardirqs_off_caller+0x65/0x220 [ 443.135467] ? trace_hardirqs_on_caller+0x6a/0x220 [ 443.141037] ? page_fault+0x8/0x30 [ 443.145262] do_page_fault+0x71/0x57d [ 443.149372] ? page_fault+0x8/0x30 [ 443.153424] page_fault+0x1e/0x30 [ 443.157170] RIP: 0033:0x43172a [ 443.162206] Code: 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 3a f7 ff ff [ 443.182815] RSP: 002b:00007fff0fdb4080 EFLAGS: 00010206 [ 443.189680] RAX: 0000000000018691 RBX: 0000000000718640 RCX: 0000000000008041 [ 443.197771] RDX: 00000000026bb930 RSI: 00000000026c3970 RDI: 0000000000000003 [ 443.205546] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000026ba940 [ 443.213370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 443.221291] R13: 0000000000718698 R14: 000000000006b1fd R15: 0000000000002710 [ 443.230401] Task in /syz0 killed as a result of limit of /syz0 [ 443.237294] memory: usage 13584kB, limit 0kB, failcnt 42 [ 443.243022] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.250703] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.257054] Memory cgroup stats for /syz0: cache:292KB rss:6844KB rss_huge:6144KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6848KB inactive_file:0KB active_file:0KB unevictable:0KB [ 443.278761] Memory cgroup out of memory: Kill process 14315 (syz-executor.0) score 9285000 or sacrifice child [ 443.289467] Killed process 14315 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 443.302474] oom_reaper: reaped process 14315 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 443.302500] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 443.325294] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 443.330926] CPU: 0 PID: 12027 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 443.338746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.348443] Call Trace: [ 443.351213] dump_stack+0x197/0x210 [ 443.354894] dump_header+0x15e/0xa55 [ 443.358983] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 443.364190] ? ___ratelimit+0x60/0x595 [ 443.368199] ? do_raw_spin_unlock+0x178/0x270 [ 443.372704] oom_kill_process.cold+0x10/0x6ef [ 443.377205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.382779] ? task_will_free_mem+0x139/0x6e0 [ 443.387317] out_of_memory+0x362/0x1330 [ 443.391295] ? lock_downgrade+0x880/0x880 [ 443.395619] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 443.400785] ? oom_killer_disable+0x280/0x280 [ 443.405282] ? find_held_lock+0x35/0x130 [ 443.409915] mem_cgroup_out_of_memory+0x1d2/0x240 [ 443.414906] ? memcg_event_wake+0x230/0x230 [ 443.419387] ? do_raw_spin_unlock+0x178/0x270 [ 443.423971] ? _raw_spin_unlock+0x2d/0x50 [ 443.428306] try_charge+0xec5/0x1490 [ 443.432187] ? lock_downgrade+0x880/0x880 [ 443.436615] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 443.441702] ? rcu_read_unlock+0x33/0x60 [ 443.445906] ? get_mem_cgroup_from_mm+0x185/0x510 [ 443.450771] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 443.457054] ? avc_has_perm+0x379/0x610 [ 443.461038] mem_cgroup_try_charge+0x259/0x6b0 [ 443.465819] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 443.471054] wp_page_copy+0x430/0x16a0 [ 443.474959] ? pmd_pfn+0x1d0/0x1d0 [ 443.478886] ? do_raw_spin_unlock+0x178/0x270 [ 443.483704] do_wp_page+0x57d/0x10b0 [ 443.489427] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 443.494667] ? kasan_check_write+0x14/0x20 [ 443.499728] ? do_raw_spin_lock+0xc8/0x240 [ 443.503966] __handle_mm_fault+0x2305/0x3f80 [ 443.508673] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 443.513579] ? count_memcg_event_mm+0x2b1/0x4d0 [ 443.518593] handle_mm_fault+0x1b5/0x690 [ 443.522664] __do_page_fault+0x62a/0xe90 [ 443.526998] ? vmalloc_fault+0x740/0x740 [ 443.531073] ? trace_hardirqs_off_caller+0x65/0x220 [ 443.536862] ? trace_hardirqs_on_caller+0x6a/0x220 [ 443.541964] ? page_fault+0x8/0x30 [ 443.545834] do_page_fault+0x71/0x57d [ 443.550000] ? page_fault+0x8/0x30 [ 443.553544] page_fault+0x1e/0x30 [ 443.557341] RIP: 0033:0x43172a [ 443.560649] Code: 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 3a f7 ff ff [ 443.580214] RSP: 002b:00007fff0fdb4080 EFLAGS: 00010206 [ 443.585949] RAX: 0000000000018691 RBX: 0000000000718640 RCX: 0000000000008041 [ 443.593529] RDX: 00000000026bb930 RSI: 00000000026c3970 RDI: 0000000000000003 [ 443.601158] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000026ba940 [ 443.608435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 443.616524] R13: 0000000000718698 R14: 000000000006b1fd R15: 0000000000002710 [ 443.627940] Task in /syz0 killed as a result of limit of /syz0 [ 443.634467] memory: usage 11188kB, limit 0kB, failcnt 48 [ 443.640318] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.647620] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.654128] Memory cgroup stats for /syz0: cache:292KB rss:4672KB rss_huge:4096KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4636KB inactive_file:0KB active_file:0KB unevictable:0KB [ 443.676257] Memory cgroup out of memory: Kill process 14341 (syz-executor.0) score 9285000 or sacrifice child [ 443.686833] Killed process 14341 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 443.699854] Memory cgroup out of memory: Kill process 14396 (syz-executor.0) score 9285000 or sacrifice child [ 443.710548] Killed process 14396 (syz-executor.0) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 443.723439] Memory cgroup out of memory: Kill process 14057 (syz-executor.0) score 9020000 or sacrifice child [ 443.727879] oom_reaper: reaped process 14396 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 443.734768] Killed process 14057 (syz-executor.0) total-vm:72588kB, anon-rss:152kB, file-rss:35800kB, shmem-rss:0kB [ 443.782861] Memory cgroup out of memory: Kill process 12027 (syz-executor.0) score 9004000 or sacrifice child [ 443.793451] Killed process 12027 (syz-executor.0) total-vm:72456kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB [ 443.805219] oom_reaper: reaped process 12027 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 16:09:22 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:22 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) 16:09:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) 16:09:23 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 444.433444] EXT4-fs (sda1): re-mounted. Opts: 16:09:23 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:23 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:23 executing program 2: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:23 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 444.998428] oom_kill_process: 3 callbacks suppressed [ 444.998463] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 445.016635] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 445.022400] CPU: 1 PID: 19498 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 445.030437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.039969] Call Trace: [ 445.042753] dump_stack+0x197/0x210 [ 445.046443] dump_header+0x15e/0xa55 [ 445.050322] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 445.055602] ? ___ratelimit+0x60/0x595 [ 445.059780] oom_kill_process.cold+0x10/0x6ef [ 445.064329] ? out_of_memory+0x14a/0x1330 [ 445.068696] out_of_memory+0x362/0x1330 [ 445.072709] ? oom_killer_disable+0x280/0x280 [ 445.077432] mem_cgroup_out_of_memory+0x1d2/0x240 [ 445.082659] ? memcg_event_wake+0x230/0x230 [ 445.087126] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 445.092260] ? cgroup_file_notify+0x140/0x1b0 [ 445.097047] memory_max_write+0x169/0x300 [ 445.101340] ? mem_cgroup_write+0x360/0x360 [ 445.105909] cgroup_file_write+0x241/0x790 [ 445.110544] ? mem_cgroup_write+0x360/0x360 [ 445.116159] ? kill_css+0x380/0x380 [ 445.119994] ? kill_css+0x380/0x380 [ 445.123666] kernfs_fop_write+0x2b8/0x480 [ 445.127850] __vfs_write+0x114/0x810 [ 445.131607] ? kernfs_fop_open+0xd80/0xd80 [ 445.136001] ? kernel_read+0x120/0x120 [ 445.139948] ? __lock_is_held+0xb6/0x140 [ 445.144065] ? rcu_read_lock_sched_held+0x110/0x130 [ 445.149128] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 445.153910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.160269] ? __sb_start_write+0x1a9/0x360 [ 445.164809] vfs_write+0x20c/0x560 [ 445.168774] ksys_write+0x14f/0x2d0 [ 445.172782] ? __ia32_sys_read+0xb0/0xb0 [ 445.176887] __x64_sys_write+0x73/0xb0 [ 445.181085] do_syscall_64+0xfd/0x620 [ 445.184920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.190288] RIP: 0033:0x45a649 16:09:23 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) [ 445.193596] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.212790] RSP: 002b:00007f129a029c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.220541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 445.227925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 445.235345] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.242764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f129a02a6d4 [ 445.250149] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 445.297010] Task in /syz3 killed as a result of limit of /syz3 [ 445.308275] memory: usage 78852kB, limit 0kB, failcnt 0 [ 445.328404] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.368472] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.415699] Memory cgroup stats for /syz3: cache:368KB rss:49124KB rss_huge:47104KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:49432KB inactive_file:0KB active_file:0KB unevictable:0KB 16:09:24 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) [ 445.471182] Memory cgroup out of memory: Kill process 12856 (syz-executor.3) score 11594000 or sacrifice child [ 445.506893] Killed process 12856 (syz-executor.3) total-vm:72720kB, anon-rss:10396kB, file-rss:35836kB, shmem-rss:0kB 16:09:24 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:24 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 445.633399] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 445.651342] EXT4-fs (sda1): re-mounted. Opts: [ 445.656849] syz-executor.2 cpuset=syz2 mems_allowed=0-1 16:09:24 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 445.677239] CPU: 1 PID: 19497 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 445.687167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.696989] Call Trace: [ 445.699757] dump_stack+0x197/0x210 [ 445.704368] dump_header+0x15e/0xa55 [ 445.709451] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 445.714584] ? ___ratelimit+0x60/0x595 [ 445.718757] ? do_raw_spin_unlock+0x178/0x270 [ 445.724046] oom_kill_process.cold+0x10/0x6ef [ 445.728911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.734699] ? task_will_free_mem+0x139/0x6e0 [ 445.739673] out_of_memory+0x362/0x1330 [ 445.743835] ? oom_killer_disable+0x280/0x280 [ 445.748541] mem_cgroup_out_of_memory+0x1d2/0x240 [ 445.753541] ? memcg_event_wake+0x230/0x230 [ 445.757900] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 445.763044] ? cgroup_file_notify+0x140/0x1b0 [ 445.767725] memory_max_write+0x169/0x300 [ 445.772187] ? mem_cgroup_write+0x360/0x360 [ 445.777043] ? lock_acquire+0x16f/0x3f0 [ 445.781227] ? kernfs_fop_write+0x227/0x480 [ 445.786471] cgroup_file_write+0x241/0x790 [ 445.791055] ? mem_cgroup_write+0x360/0x360 [ 445.795569] ? kill_css+0x380/0x380 [ 445.799315] ? kill_css+0x380/0x380 [ 445.803059] kernfs_fop_write+0x2b8/0x480 [ 445.807251] __vfs_write+0x114/0x810 [ 445.810984] ? kernfs_fop_open+0xd80/0xd80 [ 445.815675] ? kernel_read+0x120/0x120 [ 445.819590] ? __lock_is_held+0xb6/0x140 [ 445.823802] ? rcu_read_lock_sched_held+0x110/0x130 [ 445.829179] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 445.833957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.839521] ? __sb_start_write+0x1a9/0x360 [ 445.843869] vfs_write+0x20c/0x560 [ 445.847574] ksys_write+0x14f/0x2d0 [ 445.851434] ? __ia32_sys_read+0xb0/0xb0 [ 445.855713] ? do_syscall_64+0x26/0x620 [ 445.860171] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.865733] ? do_syscall_64+0x26/0x620 [ 445.870002] __x64_sys_write+0x73/0xb0 [ 445.874875] do_syscall_64+0xfd/0x620 [ 445.878701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.883908] RIP: 0033:0x45a649 [ 445.887526] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.906783] RSP: 002b:00007f6b31d3ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.914663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 445.921952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 445.929361] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.936646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b31d3f6d4 [ 445.944017] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 445.952376] Task in /syz2 killed as a result of limit of /syz2 [ 445.958692] memory: usage 65740kB, limit 0kB, failcnt 0 [ 445.964273] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.971629] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.978108] Memory cgroup stats for /syz2: cache:264KB rss:48964KB rss_huge:47104KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:49056KB inactive_file:4KB active_file:8KB unevictable:0KB [ 445.999618] Memory cgroup out of memory: Kill process 12905 (syz-executor.2) score 11593000 or sacrifice child [ 446.010611] Killed process 12905 (syz-executor.2) total-vm:72588kB, anon-rss:10388kB, file-rss:35836kB, shmem-rss:0kB [ 446.041761] syz-executor.1 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 446.066809] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 446.073058] CPU: 1 PID: 12128 Comm: syz-executor.1 Not tainted 4.19.86-syzkaller #0 [ 446.080881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.090250] Call Trace: [ 446.092853] dump_stack+0x197/0x210 [ 446.096515] dump_header+0x15e/0xa55 [ 446.100238] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 446.105350] ? ___ratelimit+0x60/0x595 [ 446.109242] ? do_raw_spin_unlock+0x178/0x270 [ 446.113751] oom_kill_process.cold+0x10/0x6ef [ 446.118259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.123804] ? task_will_free_mem+0x139/0x6e0 [ 446.128314] out_of_memory+0x362/0x1330 [ 446.132312] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 446.137430] ? oom_killer_disable+0x280/0x280 [ 446.141938] ? find_held_lock+0x35/0x130 [ 446.146014] mem_cgroup_out_of_memory+0x1d2/0x240 [ 446.150959] ? memcg_event_wake+0x230/0x230 [ 446.155318] ? do_raw_spin_unlock+0x178/0x270 [ 446.159913] ? _raw_spin_unlock+0x2d/0x50 [ 446.164082] try_charge+0xec5/0x1490 [ 446.167827] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 446.172797] ? rcu_read_lock_sched_held+0x110/0x130 [ 446.177836] ? __alloc_pages_nodemask+0x632/0x750 [ 446.184875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.189656] memcg_kmem_charge_memcg+0x83/0x170 [ 446.194339] ? retint_kernel+0x2d/0x2d [ 446.198247] ? memcg_kmem_put_cache+0xb0/0xb0 [ 446.202768] cache_grow_begin+0x3fa/0x8c0 [ 446.207462] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.213015] ? __cpuset_node_allowed+0x136/0x540 [ 446.217785] fallback_alloc+0x1fd/0x2d0 [ 446.221777] ____cache_alloc_node+0x1be/0x1e0 [ 446.226282] kmem_cache_alloc+0x1f3/0x700 [ 446.230607] alloc_inode+0xb6/0x190 [ 446.234269] iget_locked+0x196/0x4a0 [ 446.238038] kernfs_get_inode+0x4e/0x580 [ 446.242120] kernfs_iop_lookup+0x1ab/0x230 [ 446.246452] __lookup_slow+0x279/0x500 [ 446.250353] ? vfs_unlink+0x500/0x500 [ 446.254203] lookup_slow+0x58/0x80 [ 446.257748] path_mountpoint+0x5d2/0x1e60 [ 446.261915] ? path_openat+0x45e0/0x45e0 [ 446.265982] ? cache_grow_end+0xa4/0x190 [ 446.270060] filename_mountpoint+0x18e/0x390 [ 446.274479] ? user_path_at_empty+0x50/0x50 [ 446.278815] ? __phys_addr_symbol+0x30/0x70 [ 446.283145] ? __check_object_size+0x3d/0x42a [ 446.287765] ? strncpy_from_user+0x21b/0x2d0 [ 446.292191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.297736] ? getname_flags+0x277/0x5b0 [ 446.301808] user_path_mountpoint_at+0x3a/0x50 [ 446.306401] ksys_umount+0x164/0xe70 [ 446.310130] ? __ia32_sys_rmdir+0x40/0x40 [ 446.314307] ? __detach_mounts+0x320/0x320 [ 446.318551] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.324107] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.328880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.333655] ? do_syscall_64+0x26/0x620 [ 446.337643] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.343013] ? do_syscall_64+0x26/0x620 [ 446.347002] ? lockdep_hardirqs_on+0x415/0x5d0 [ 446.352903] __x64_sys_umount+0x54/0x80 [ 446.356888] do_syscall_64+0xfd/0x620 [ 446.360711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.365909] RIP: 0033:0x45d077 [ 446.369132] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:09:25 executing program 2: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 446.388146] RSP: 002b:00007ffed44bccd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 446.395852] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d077 [ 446.403150] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007ffed44bcd80 [ 446.410420] RBP: 0000000000000343 R08: 0000000000000000 R09: 0000000000000010 [ 446.417692] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffed44bde10 [ 446.424958] R13: 0000000001122940 R14: 0000000000000000 R15: 00007ffed44bde10 [ 446.438142] Task in /syz1 killed as a result of limit of /syz1 [ 446.444525] memory: usage 35868kB, limit 0kB, failcnt 20 [ 446.450363] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.457677] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.463851] Memory cgroup stats for /syz1: cache:140KB rss:28248KB rss_huge:26624KB shmem:104KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28252KB inactive_file:8KB active_file:8KB unevictable:0KB [ 446.485653] Memory cgroup out of memory: Kill process 12666 (syz-executor.1) score 10067000 or sacrifice child [ 446.497156] Killed process 12666 (syz-executor.1) total-vm:72720kB, anon-rss:4256kB, file-rss:35872kB, shmem-rss:0kB [ 446.525294] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 446.546754] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 446.552684] CPU: 1 PID: 12026 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 446.560483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.570113] Call Trace: [ 446.572719] dump_stack+0x197/0x210 [ 446.576360] dump_header+0x15e/0xa55 [ 446.580089] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 446.585216] ? ___ratelimit+0x60/0x595 [ 446.589116] ? do_raw_spin_unlock+0x178/0x270 [ 446.593643] oom_kill_process.cold+0x10/0x6ef [ 446.598166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.604419] ? task_will_free_mem+0x139/0x6e0 [ 446.608944] out_of_memory+0x362/0x1330 [ 446.612939] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 446.618057] ? oom_killer_disable+0x280/0x280 [ 446.622558] ? find_held_lock+0x35/0x130 [ 446.626649] mem_cgroup_out_of_memory+0x1d2/0x240 [ 446.631506] ? memcg_event_wake+0x230/0x230 [ 446.635840] ? do_raw_spin_unlock+0x178/0x270 [ 446.640344] ? _raw_spin_unlock+0x2d/0x50 [ 446.644520] try_charge+0xec5/0x1490 [ 446.648273] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 446.653566] ? lock_downgrade+0x880/0x880 [ 446.657726] ? kasan_check_read+0x11/0x20 [ 446.661888] memcg_kmem_charge_memcg+0x83/0x170 [ 446.666580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 446.671112] ? __isolate_free_page+0x4c0/0x4c0 [ 446.675707] memcg_kmem_charge+0x136/0x370 [ 446.679959] __alloc_pages_nodemask+0x3c3/0x750 [ 446.684642] ? __alloc_pages_slowpath+0x2870/0x2870 [ 446.689772] ? lockdep_hardirqs_on+0x415/0x5d0 [ 446.694364] ? trace_hardirqs_on+0x67/0x220 [ 446.698782] copy_process.part.0+0x3e0/0x7a30 [ 446.703310] ? mark_held_locks+0x100/0x100 [ 446.707572] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 446.712265] ? __might_fault+0x12b/0x1e0 [ 446.716343] ? __cleanup_sighand+0x70/0x70 [ 446.720588] ? lock_downgrade+0x880/0x880 [ 446.724773] _do_fork+0x257/0xfd0 [ 446.728256] ? fork_idle+0x1d0/0x1d0 [ 446.732006] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.736771] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.741531] ? do_syscall_64+0x26/0x620 [ 446.745512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.750883] ? do_syscall_64+0x26/0x620 [ 446.754874] __x64_sys_clone+0xbf/0x150 [ 446.758863] do_syscall_64+0xfd/0x620 [ 446.762677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.768057] RIP: 0033:0x458c1a [ 446.771256] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 446.790256] RSP: 002b:00007ffd01e53390 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 446.799284] RAX: ffffffffffffffda RBX: 00007ffd01e53390 RCX: 0000000000458c1a [ 446.806647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 446.813926] RBP: 00007ffd01e533d0 R08: 0000000000000001 R09: 0000000000ddd940 [ 446.821201] R10: 0000000000dddc10 R11: 0000000000000246 R12: 0000000000000001 [ 446.828475] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd01e53420 [ 446.836888] Task in /syz5 killed as a result of limit of /syz5 [ 446.842928] memory: usage 40172kB, limit 0kB, failcnt 17 [ 446.848585] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.855357] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.861738] Memory cgroup stats for /syz5: cache:176KB rss:25712KB rss_huge:24576KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25712KB inactive_file:8KB active_file:8KB unevictable:0KB [ 446.883590] Memory cgroup out of memory: Kill process 12950 (syz-executor.5) score 11594000 or sacrifice child [ 446.894934] Killed process 12950 (syz-executor.5) total-vm:72720kB, anon-rss:10392kB, file-rss:35836kB, shmem-rss:0kB [ 446.924959] syz-executor.1 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 446.941515] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 446.947645] CPU: 1 PID: 12128 Comm: syz-executor.1 Not tainted 4.19.86-syzkaller #0 [ 446.955638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.964993] Call Trace: [ 446.967599] dump_stack+0x197/0x210 [ 446.971232] dump_header+0x15e/0xa55 [ 446.974938] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 446.980051] ? ___ratelimit+0x60/0x595 [ 446.983964] ? do_raw_spin_unlock+0x178/0x270 [ 446.988472] oom_kill_process.cold+0x10/0x6ef [ 446.992973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.998511] ? task_will_free_mem+0x139/0x6e0 [ 447.003029] out_of_memory+0x362/0x1330 [ 447.007110] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 447.012231] ? oom_killer_disable+0x280/0x280 [ 447.016728] ? find_held_lock+0x35/0x130 [ 447.020818] mem_cgroup_out_of_memory+0x1d2/0x240 [ 447.025665] ? memcg_event_wake+0x230/0x230 [ 447.030000] ? do_raw_spin_unlock+0x178/0x270 [ 447.034502] ? _raw_spin_unlock+0x2d/0x50 [ 447.038660] try_charge+0xec5/0x1490 [ 447.042396] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 447.047265] ? rcu_read_lock_sched_held+0x110/0x130 [ 447.052302] ? __alloc_pages_nodemask+0x632/0x750 [ 447.057235] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.062010] memcg_kmem_charge_memcg+0x83/0x170 [ 447.066707] ? retint_kernel+0x2d/0x2d [ 447.070612] ? memcg_kmem_put_cache+0xb0/0xb0 [ 447.075145] cache_grow_begin+0x3fa/0x8c0 [ 447.079330] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 447.085130] ? __cpuset_node_allowed+0x136/0x540 [ 447.089894] fallback_alloc+0x1fd/0x2d0 [ 447.093890] ____cache_alloc_node+0x1be/0x1e0 [ 447.098391] kmem_cache_alloc+0x1f3/0x700 [ 447.102549] alloc_inode+0xb6/0x190 [ 447.106176] iget_locked+0x196/0x4a0 [ 447.109899] kernfs_get_inode+0x4e/0x580 [ 447.113966] kernfs_iop_lookup+0x1ab/0x230 [ 447.118207] __lookup_slow+0x279/0x500 [ 447.122128] ? vfs_unlink+0x500/0x500 [ 447.125946] lookup_slow+0x58/0x80 [ 447.129488] path_mountpoint+0x5d2/0x1e60 [ 447.133678] ? path_openat+0x45e0/0x45e0 [ 447.137936] ? cache_grow_end+0xa4/0x190 [ 447.142021] filename_mountpoint+0x18e/0x390 [ 447.146442] ? user_path_at_empty+0x50/0x50 [ 447.150785] ? __phys_addr_symbol+0x30/0x70 [ 447.155130] ? __check_object_size+0x3d/0x42a [ 447.159647] ? strncpy_from_user+0x21b/0x2d0 [ 447.164073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.169614] ? getname_flags+0x277/0x5b0 [ 447.173692] user_path_mountpoint_at+0x3a/0x50 [ 447.178290] ksys_umount+0x164/0xe70 [ 447.182019] ? __ia32_sys_rmdir+0x40/0x40 [ 447.186181] ? __detach_mounts+0x320/0x320 [ 447.190418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.196002] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.200773] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.205553] ? do_syscall_64+0x26/0x620 [ 447.209532] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.214900] ? do_syscall_64+0x26/0x620 [ 447.218880] ? lockdep_hardirqs_on+0x415/0x5d0 [ 447.223466] __x64_sys_umount+0x54/0x80 [ 447.227462] do_syscall_64+0xfd/0x620 [ 447.231274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.236459] RIP: 0033:0x45d077 [ 447.239659] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.258660] RSP: 002b:00007ffed44bccd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 447.266385] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d077 [ 447.273725] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007ffed44bcd80 [ 447.281005] RBP: 0000000000000343 R08: 0000000000000000 R09: 0000000000000010 [ 447.288286] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffed44bde10 [ 447.295793] R13: 0000000001122940 R14: 0000000000000000 R15: 00007ffed44bde10 [ 447.303625] Task in /syz1 killed as a result of limit of /syz1 [ 447.310845] memory: usage 31504kB, limit 0kB, failcnt 27 [ 447.318388] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.325179] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.331437] Memory cgroup stats for /syz1: cache:140KB rss:24000KB rss_huge:22528KB shmem:104KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:24064KB inactive_file:8KB active_file:4KB unevictable:0KB [ 447.352394] Memory cgroup out of memory: Kill process 12525 (syz-executor.1) score 9551000 or sacrifice child [ 447.362789] Killed process 12533 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 447.388250] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 447.403135] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 447.408780] CPU: 1 PID: 12026 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 447.416619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.425990] Call Trace: [ 447.428601] dump_stack+0x197/0x210 [ 447.432246] dump_header+0x15e/0xa55 [ 447.435976] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 447.441097] ? ___ratelimit+0x60/0x595 [ 447.445000] ? do_raw_spin_unlock+0x178/0x270 [ 447.449518] oom_kill_process.cold+0x10/0x6ef [ 447.454129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.459673] ? task_will_free_mem+0x139/0x6e0 [ 447.464194] out_of_memory+0x362/0x1330 [ 447.468188] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 447.473394] ? oom_killer_disable+0x280/0x280 [ 447.477898] ? find_held_lock+0x35/0x130 [ 447.481982] mem_cgroup_out_of_memory+0x1d2/0x240 [ 447.486835] ? memcg_event_wake+0x230/0x230 [ 447.491195] ? do_raw_spin_unlock+0x178/0x270 [ 447.495697] ? _raw_spin_unlock+0x2d/0x50 [ 447.499849] try_charge+0xec5/0x1490 [ 447.503676] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 447.508656] ? lock_downgrade+0x880/0x880 [ 447.512810] ? kasan_check_read+0x11/0x20 [ 447.516982] memcg_kmem_charge_memcg+0x83/0x170 [ 447.521673] ? memcg_kmem_put_cache+0xb0/0xb0 [ 447.526182] ? __isolate_free_page+0x4c0/0x4c0 [ 447.530769] memcg_kmem_charge+0x136/0x370 [ 447.535187] __alloc_pages_nodemask+0x3c3/0x750 [ 447.539861] ? __alloc_pages_slowpath+0x2870/0x2870 [ 447.544883] ? lockdep_hardirqs_on+0x415/0x5d0 [ 447.549469] ? trace_hardirqs_on+0x67/0x220 [ 447.553796] copy_process.part.0+0x3e0/0x7a30 [ 447.558305] ? mark_held_locks+0x100/0x100 [ 447.562908] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 447.567587] ? __might_fault+0x12b/0x1e0 [ 447.571657] ? __cleanup_sighand+0x70/0x70 [ 447.575900] ? lock_downgrade+0x880/0x880 [ 447.580072] _do_fork+0x257/0xfd0 [ 447.583537] ? fork_idle+0x1d0/0x1d0 [ 447.587263] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.592047] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.596811] ? do_syscall_64+0x26/0x620 [ 447.600814] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.606190] ? do_syscall_64+0x26/0x620 [ 447.610179] __x64_sys_clone+0xbf/0x150 [ 447.614160] do_syscall_64+0xfd/0x620 [ 447.617970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.623164] RIP: 0033:0x458c1a [ 447.626487] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 447.645394] RSP: 002b:00007ffd01e53390 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.653115] RAX: ffffffffffffffda RBX: 00007ffd01e53390 RCX: 0000000000458c1a [ 447.660386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 447.667666] RBP: 00007ffd01e533d0 R08: 0000000000000001 R09: 0000000000ddd940 [ 447.675092] R10: 0000000000dddc10 R11: 0000000000000246 R12: 0000000000000001 [ 447.682375] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd01e53420 [ 447.691948] Task in /syz5 killed as a result of limit of /syz5 [ 447.698321] memory: usage 29556kB, limit 0kB, failcnt 24 [ 447.703791] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.710629] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.716847] Memory cgroup stats for /syz5: cache:176KB rss:15396KB rss_huge:14336KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15352KB inactive_file:4KB active_file:0KB unevictable:0KB [ 447.737804] Memory cgroup out of memory: Kill process 12667 (syz-executor.5) score 9548000 or sacrifice child [ 447.748002] Killed process 12667 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:35868kB, shmem-rss:0kB [ 447.759090] syz-executor.1 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 447.767824] oom_reaper: reaped process 12667 (syz-executor.5), now anon-rss:0kB, file-rss:34908kB, shmem-rss:0kB [ 447.774223] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 447.788656] CPU: 1 PID: 12128 Comm: syz-executor.1 Not tainted 4.19.86-syzkaller #0 [ 447.796478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.805848] Call Trace: [ 447.808462] dump_stack+0x197/0x210 [ 447.812156] dump_header+0x15e/0xa55 [ 447.815881] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 447.821003] ? ___ratelimit+0x60/0x595 [ 447.824899] ? do_raw_spin_unlock+0x178/0x270 [ 447.829400] oom_kill_process.cold+0x10/0x6ef [ 447.833922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.839470] ? task_will_free_mem+0x139/0x6e0 [ 447.843999] out_of_memory+0x362/0x1330 [ 447.847979] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 447.853114] ? oom_killer_disable+0x280/0x280 [ 447.857618] ? find_held_lock+0x35/0x130 [ 447.861687] mem_cgroup_out_of_memory+0x1d2/0x240 [ 447.866525] ? memcg_event_wake+0x230/0x230 [ 447.870895] ? do_raw_spin_unlock+0x178/0x270 [ 447.875477] ? _raw_spin_unlock+0x2d/0x50 [ 447.879628] try_charge+0xec5/0x1490 [ 447.883333] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 447.888183] ? rcu_read_lock_sched_held+0x110/0x130 [ 447.893205] ? __alloc_pages_nodemask+0x632/0x750 [ 447.898055] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.902808] memcg_kmem_charge_memcg+0x83/0x170 [ 447.907479] ? retint_kernel+0x2d/0x2d [ 447.911379] ? memcg_kmem_put_cache+0xb0/0xb0 [ 447.916148] cache_grow_begin+0x3fa/0x8c0 [ 447.920288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 447.925810] ? __cpuset_node_allowed+0x136/0x540 [ 447.930563] fallback_alloc+0x1fd/0x2d0 [ 447.934548] ____cache_alloc_node+0x1be/0x1e0 [ 447.939044] kmem_cache_alloc+0x1f3/0x700 [ 447.943183] alloc_inode+0xb6/0x190 [ 447.946819] iget_locked+0x196/0x4a0 [ 447.950542] kernfs_get_inode+0x4e/0x580 [ 447.954618] kernfs_iop_lookup+0x1ab/0x230 [ 447.958852] __lookup_slow+0x279/0x500 [ 447.962725] ? vfs_unlink+0x500/0x500 [ 447.966545] lookup_slow+0x58/0x80 [ 447.970092] path_mountpoint+0x5d2/0x1e60 [ 447.974253] ? path_openat+0x45e0/0x45e0 [ 447.978331] ? cache_grow_end+0xa4/0x190 [ 447.982382] filename_mountpoint+0x18e/0x390 [ 447.986790] ? user_path_at_empty+0x50/0x50 [ 447.991651] ? __phys_addr_symbol+0x30/0x70 [ 447.996143] ? __check_object_size+0x3d/0x42a [ 448.000632] ? strncpy_from_user+0x21b/0x2d0 [ 448.005029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.010576] ? getname_flags+0x277/0x5b0 [ 448.014649] user_path_mountpoint_at+0x3a/0x50 [ 448.019244] ksys_umount+0x164/0xe70 [ 448.022953] ? __ia32_sys_rmdir+0x40/0x40 [ 448.027106] ? __detach_mounts+0x320/0x320 [ 448.031346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.036896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.041663] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.046419] ? do_syscall_64+0x26/0x620 [ 448.050411] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.055788] ? do_syscall_64+0x26/0x620 [ 448.059893] ? lockdep_hardirqs_on+0x415/0x5d0 [ 448.064545] __x64_sys_umount+0x54/0x80 [ 448.068538] do_syscall_64+0xfd/0x620 [ 448.072351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.077553] RIP: 0033:0x45d077 [ 448.080743] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.100334] RSP: 002b:00007ffed44bccd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 448.108149] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d077 [ 448.115519] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007ffed44bcd80 [ 448.122875] RBP: 0000000000000343 R08: 0000000000000000 R09: 0000000000000010 [ 448.130171] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffed44bde10 [ 448.137804] R13: 0000000001122940 R14: 0000000000000000 R15: 00007ffed44bde10 [ 448.145431] Task in /syz1 killed as a result of limit of /syz1 [ 448.151548] memory: usage 31188kB, limit 0kB, failcnt 34 [ 448.157125] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.163910] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.170233] Memory cgroup stats for /syz1: cache:140KB rss:24000KB rss_huge:22528KB shmem:104KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:24004KB inactive_file:4KB active_file:0KB unevictable:0KB [ 448.191360] Memory cgroup out of memory: Kill process 12525 (syz-executor.1) score 9551000 or sacrifice child [ 448.201542] Killed process 12525 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:35872kB, shmem-rss:0kB [ 448.212817] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 448.214053] oom_reaper: reaped process 12525 (syz-executor.1), now anon-rss:0kB, file-rss:34912kB, shmem-rss:0kB [ 448.227373] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 448.241511] CPU: 1 PID: 12026 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 448.249457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.258911] Call Trace: [ 448.261546] dump_stack+0x197/0x210 [ 448.265303] dump_header+0x15e/0xa55 [ 448.269056] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 448.274177] ? ___ratelimit+0x60/0x595 [ 448.278107] ? do_raw_spin_unlock+0x178/0x270 [ 448.282625] oom_kill_process.cold+0x10/0x6ef [ 448.287169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.292713] ? task_will_free_mem+0x139/0x6e0 [ 448.297232] out_of_memory+0x362/0x1330 [ 448.301225] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 448.306589] ? oom_killer_disable+0x280/0x280 [ 448.311095] ? find_held_lock+0x35/0x130 [ 448.315170] mem_cgroup_out_of_memory+0x1d2/0x240 [ 448.320019] ? memcg_event_wake+0x230/0x230 [ 448.324363] ? do_raw_spin_unlock+0x178/0x270 [ 448.328862] ? _raw_spin_unlock+0x2d/0x50 [ 448.333011] try_charge+0xec5/0x1490 [ 448.336754] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 448.341726] ? lock_downgrade+0x880/0x880 [ 448.346025] ? kasan_check_read+0x11/0x20 [ 448.350193] memcg_kmem_charge_memcg+0x83/0x170 [ 448.354876] ? memcg_kmem_put_cache+0xb0/0xb0 [ 448.359381] ? __isolate_free_page+0x4c0/0x4c0 [ 448.363963] memcg_kmem_charge+0x136/0x370 [ 448.368639] __alloc_pages_nodemask+0x3c3/0x750 [ 448.373329] ? __alloc_pages_slowpath+0x2870/0x2870 [ 448.378351] ? lockdep_hardirqs_on+0x415/0x5d0 [ 448.382932] ? trace_hardirqs_on+0x67/0x220 [ 448.387263] copy_process.part.0+0x3e0/0x7a30 [ 448.391773] ? mark_held_locks+0x100/0x100 [ 448.396010] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 448.400688] ? __might_fault+0x12b/0x1e0 [ 448.404751] ? __cleanup_sighand+0x70/0x70 [ 448.408993] ? lock_downgrade+0x880/0x880 [ 448.413154] _do_fork+0x257/0xfd0 [ 448.416622] ? fork_idle+0x1d0/0x1d0 [ 448.420365] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.425126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.429887] ? do_syscall_64+0x26/0x620 [ 448.433874] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.439239] ? do_syscall_64+0x26/0x620 [ 448.443343] __x64_sys_clone+0xbf/0x150 [ 448.447336] do_syscall_64+0xfd/0x620 [ 448.451154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.456367] RIP: 0033:0x458c1a [ 448.459562] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 448.478478] RSP: 002b:00007ffd01e53390 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.486202] RAX: ffffffffffffffda RBX: 00007ffd01e53390 RCX: 0000000000458c1a [ 448.493465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 448.500744] RBP: 00007ffd01e533d0 R08: 0000000000000001 R09: 0000000000ddd940 [ 448.508019] R10: 0000000000dddc10 R11: 0000000000000246 R12: 0000000000000001 [ 448.515290] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd01e53420 [ 448.522976] Task in /syz5 killed as a result of limit of /syz5 [ 448.529109] memory: usage 27220kB, limit 0kB, failcnt 30 [ 448.534574] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.541410] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.547634] Memory cgroup stats for /syz5: cache:176KB rss:13136KB rss_huge:12288KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13180KB inactive_file:4KB active_file:0KB unevictable:0KB [ 448.568490] Memory cgroup out of memory: Kill process 12613 (syz-executor.5) score 9545000 or sacrifice child [ 448.578783] Killed process 12613 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:35856kB, shmem-rss:0kB [ 448.589754] syz-executor.1 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 448.590883] oom_reaper: reaped process 12613 (syz-executor.5), now anon-rss:0kB, file-rss:34896kB, shmem-rss:0kB [ 448.605018] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 448.619431] CPU: 1 PID: 12128 Comm: syz-executor.1 Not tainted 4.19.86-syzkaller #0 [ 448.627241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.636820] Call Trace: [ 448.639414] dump_stack+0x197/0x210 [ 448.643053] dump_header+0x15e/0xa55 [ 448.646789] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 448.651911] ? ___ratelimit+0x60/0x595 [ 448.655935] ? do_raw_spin_unlock+0x178/0x270 [ 448.660446] oom_kill_process.cold+0x10/0x6ef [ 448.667507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.673091] ? task_will_free_mem+0x139/0x6e0 [ 448.677597] out_of_memory+0x362/0x1330 [ 448.681595] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 448.686720] ? oom_killer_disable+0x280/0x280 [ 448.691285] ? find_held_lock+0x35/0x130 [ 448.695415] mem_cgroup_out_of_memory+0x1d2/0x240 [ 448.700466] ? memcg_event_wake+0x230/0x230 [ 448.704790] ? do_raw_spin_unlock+0x178/0x270 [ 448.709285] ? _raw_spin_unlock+0x2d/0x50 [ 448.713513] try_charge+0xec5/0x1490 [ 448.717292] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 448.722173] ? rcu_read_lock_sched_held+0x110/0x130 [ 448.727414] ? __alloc_pages_nodemask+0x632/0x750 [ 448.732270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.737040] memcg_kmem_charge_memcg+0x83/0x170 [ 448.741712] ? retint_kernel+0x2d/0x2d [ 448.745617] ? memcg_kmem_put_cache+0xb0/0xb0 [ 448.750127] cache_grow_begin+0x3fa/0x8c0 [ 448.754284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 448.759816] ? __cpuset_node_allowed+0x136/0x540 [ 448.764580] fallback_alloc+0x1fd/0x2d0 [ 448.768568] ____cache_alloc_node+0x1be/0x1e0 [ 448.773063] kmem_cache_alloc+0x1f3/0x700 [ 448.777246] alloc_inode+0xb6/0x190 [ 448.780880] iget_locked+0x196/0x4a0 [ 448.784600] kernfs_get_inode+0x4e/0x580 [ 448.788661] kernfs_iop_lookup+0x1ab/0x230 [ 448.792885] __lookup_slow+0x279/0x500 [ 448.796774] ? vfs_unlink+0x500/0x500 [ 448.800697] lookup_slow+0x58/0x80 [ 448.804241] path_mountpoint+0x5d2/0x1e60 [ 448.808479] ? path_openat+0x45e0/0x45e0 [ 448.812538] ? cache_grow_end+0xa4/0x190 [ 448.816616] filename_mountpoint+0x18e/0x390 [ 448.821035] ? user_path_at_empty+0x50/0x50 [ 448.825361] ? __phys_addr_symbol+0x30/0x70 [ 448.829689] ? __check_object_size+0x3d/0x42a [ 448.834176] ? strncpy_from_user+0x21b/0x2d0 [ 448.838588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.844128] ? getname_flags+0x277/0x5b0 [ 448.848224] user_path_mountpoint_at+0x3a/0x50 [ 448.852795] ksys_umount+0x164/0xe70 [ 448.856504] ? __ia32_sys_rmdir+0x40/0x40 [ 448.860657] ? __detach_mounts+0x320/0x320 [ 448.865408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.870936] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.875742] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.880504] ? do_syscall_64+0x26/0x620 [ 448.884485] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.889850] ? do_syscall_64+0x26/0x620 [ 448.893814] ? lockdep_hardirqs_on+0x415/0x5d0 [ 448.898403] __x64_sys_umount+0x54/0x80 [ 448.902383] do_syscall_64+0xfd/0x620 [ 448.906185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.911382] RIP: 0033:0x45d077 [ 448.914574] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.933468] RSP: 002b:00007ffed44bccd8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 448.941174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d077 [ 448.948450] RDX: 0000000000403a60 RSI: 0000000000000002 RDI: 00007ffed44bcd80 [ 448.955708] RBP: 0000000000000343 R08: 0000000000000000 R09: 0000000000000010 [ 448.962975] R10: 000000000000000a R11: 0000000000000202 R12: 00007ffed44bde10 [ 448.970241] R13: 0000000001122940 R14: 0000000000000000 R15: 00007ffed44bde10 [ 448.977773] Task in /syz1 killed as a result of limit of /syz1 [ 448.983824] memory: usage 28868kB, limit 0kB, failcnt 40 [ 448.989376] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.996152] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.002390] Memory cgroup stats for /syz1: cache:140KB rss:21852KB rss_huge:20480KB shmem:104KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21848KB inactive_file:4KB active_file:0KB unevictable:0KB [ 449.023331] Memory cgroup out of memory: Kill process 12574 (syz-executor.1) score 9549000 or sacrifice child [ 449.033497] Killed process 12574 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:35864kB, shmem-rss:0kB [ 449.044429] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 449.045641] oom_reaper: reaped process 12574 (syz-executor.1), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 449.058703] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 449.073353] CPU: 1 PID: 12026 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 449.081162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.090527] Call Trace: [ 449.093155] dump_stack+0x197/0x210 [ 449.096808] dump_header+0x15e/0xa55 [ 449.100643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 449.106036] ? ___ratelimit+0x60/0x595 [ 449.109930] ? do_raw_spin_unlock+0x178/0x270 [ 449.114554] oom_kill_process.cold+0x10/0x6ef [ 449.119071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.124613] ? task_will_free_mem+0x139/0x6e0 [ 449.129119] out_of_memory+0x362/0x1330 [ 449.133103] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 449.138215] ? oom_killer_disable+0x280/0x280 [ 449.142714] ? find_held_lock+0x35/0x130 [ 449.146789] mem_cgroup_out_of_memory+0x1d2/0x240 [ 449.151644] ? memcg_event_wake+0x230/0x230 [ 449.155957] ? do_raw_spin_unlock+0x178/0x270 [ 449.160474] ? _raw_spin_unlock+0x2d/0x50 [ 449.164622] try_charge+0xec5/0x1490 [ 449.168366] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 449.173305] ? lock_downgrade+0x880/0x880 [ 449.177457] ? kasan_check_read+0x11/0x20 [ 449.181629] memcg_kmem_charge_memcg+0x83/0x170 [ 449.186300] ? memcg_kmem_put_cache+0xb0/0xb0 [ 449.190795] ? __isolate_free_page+0x4c0/0x4c0 [ 449.195376] memcg_kmem_charge+0x136/0x370 [ 449.199617] __alloc_pages_nodemask+0x3c3/0x750 [ 449.204302] ? __alloc_pages_slowpath+0x2870/0x2870 [ 449.209335] ? lockdep_hardirqs_on+0x415/0x5d0 [ 449.213936] ? trace_hardirqs_on+0x67/0x220 [ 449.218268] copy_process.part.0+0x3e0/0x7a30 [ 449.222774] ? mark_held_locks+0x100/0x100 [ 449.227029] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 449.231716] ? __might_fault+0x12b/0x1e0 [ 449.235781] ? __cleanup_sighand+0x70/0x70 [ 449.240112] ? lock_downgrade+0x880/0x880 [ 449.244263] _do_fork+0x257/0xfd0 [ 449.247718] ? fork_idle+0x1d0/0x1d0 [ 449.251430] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.256187] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.260942] ? do_syscall_64+0x26/0x620 [ 449.264913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.270270] ? do_syscall_64+0x26/0x620 [ 449.274240] __x64_sys_clone+0xbf/0x150 [ 449.278229] do_syscall_64+0xfd/0x620 [ 449.282564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.287760] RIP: 0033:0x458c1a [ 449.290958] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 449.310169] RSP: 002b:00007ffd01e53390 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.318002] RAX: ffffffffffffffda RBX: 00007ffd01e53390 RCX: 0000000000458c1a [ 449.325394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 449.332674] RBP: 00007ffd01e533d0 R08: 0000000000000001 R09: 0000000000ddd940 [ 449.339947] R10: 0000000000dddc10 R11: 0000000000000246 R12: 0000000000000001 [ 449.347365] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd01e53420 [ 449.354763] Task in /syz5 killed as a result of limit of /syz5 [ 449.361056] memory: usage 24896kB, limit 0kB, failcnt 36 [ 449.366587] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.373351] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.380393] Memory cgroup stats for /syz5: cache:176KB rss:10976KB rss_huge:10240KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:11020KB inactive_file:4KB active_file:0KB unevictable:0KB [ 449.401286] Memory cgroup out of memory: Kill process 12594 (syz-executor.5) score 9544000 or sacrifice child [ 449.411754] Killed process 12594 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:35852kB, shmem-rss:0kB [ 449.423363] Memory cgroup out of memory: Kill process 17099 (syz-executor.1) score 9539000 or sacrifice child [ 449.424857] oom_reaper: reaped process 12594 (syz-executor.5), now anon-rss:0kB, file-rss:34892kB, shmem-rss:0kB [ 449.435214] Killed process 17099 (syz-executor.1) total-vm:72720kB, anon-rss:2216kB, file-rss:35804kB, shmem-rss:0kB [ 449.469972] Memory cgroup out of memory: Kill process 12982 (syz-executor.5) score 9538000 or sacrifice child [ 449.484404] Killed process 12982 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:35828kB, shmem-rss:0kB [ 449.508545] Memory cgroup out of memory: Kill process 17086 (syz-executor.1) score 9538000 or sacrifice child [ 449.518849] Killed process 17086 (syz-executor.1) total-vm:72720kB, anon-rss:2216kB, file-rss:35800kB, shmem-rss:0kB [ 449.531042] oom_reaper: reaped process 17086 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 449.531283] Memory cgroup out of memory: Kill process 18073 (syz-executor.1) score 9534000 or sacrifice child [ 449.556792] Killed process 18073 (syz-executor.1) total-vm:72588kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 449.583679] Memory cgroup out of memory: Kill process 14325 (syz-executor.5) score 9283000 or sacrifice child [ 449.597399] Killed process 14325 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 449.609478] oom_reaper: reaped process 14325 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 449.613810] Memory cgroup out of memory: Kill process 14351 (syz-executor.5) score 9283000 or sacrifice child [ 449.632327] Killed process 14351 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 449.644729] oom_reaper: reaped process 14351 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 449.655350] Memory cgroup out of memory: Kill process 12604 (syz-executor.1) score 9285000 or sacrifice child [ 449.667356] Killed process 12604 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 449.695703] Memory cgroup out of memory: Kill process 14390 (syz-executor.5) score 9283000 or sacrifice child [ 449.707817] Killed process 14390 (syz-executor.5) total-vm:72588kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 449.721538] oom_reaper: reaped process 14390 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 449.724538] Memory cgroup out of memory: Kill process 12026 (syz-executor.5) score 9003000 or sacrifice child [ 449.752810] Killed process 12026 (syz-executor.5) total-vm:72456kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB [ 449.765663] oom_reaper: reaped process 12026 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 449.767517] Memory cgroup out of memory: Kill process 12638 (syz-executor.1) score 9285000 or sacrifice child [ 449.789318] Killed process 12638 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 449.800949] oom_reaper: reaped process 12638 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 449.808114] Memory cgroup out of memory: Kill process 12682 (syz-executor.1) score 9285000 or sacrifice child [ 449.829966] Killed process 12682 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 449.841884] oom_reaper: reaped process 12682 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 449.852233] Memory cgroup out of memory: Kill process 14307 (syz-executor.1) score 9285000 or sacrifice child [ 449.852279] Killed process 14307 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 449.875481] Memory cgroup out of memory: Kill process 14337 (syz-executor.1) score 9285000 or sacrifice child [ 449.892727] Killed process 14337 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 449.921753] Memory cgroup out of memory: Kill process 14365 (syz-executor.1) score 9285000 or sacrifice child [ 449.943627] Killed process 14365 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 449.995069] Memory cgroup out of memory: Kill process 12128 (syz-executor.1) score 9004000 or sacrifice child [ 450.017568] Killed process 12128 (syz-executor.1) total-vm:72456kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB [ 450.044718] oom_reaper: reaped process 12128 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 450.099280] oom_kill_process: 15 callbacks suppressed [ 450.099300] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 450.196571] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 450.229592] CPU: 0 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 450.237445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.246798] Call Trace: [ 450.249395] dump_stack+0x197/0x210 [ 450.253043] dump_header+0x15e/0xa55 [ 450.256778] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.261897] ? ___ratelimit+0x60/0x595 [ 450.265803] oom_kill_process.cold+0x10/0x6ef [ 450.270312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.275872] ? task_will_free_mem+0x139/0x6e0 [ 450.280390] out_of_memory+0x362/0x1330 [ 450.284377] ? lock_downgrade+0x880/0x880 [ 450.288539] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 450.293661] ? oom_killer_disable+0x280/0x280 16:09:28 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 450.298175] ? find_held_lock+0x35/0x130 [ 450.302260] mem_cgroup_out_of_memory+0x1d2/0x240 [ 450.307121] ? memcg_event_wake+0x230/0x230 [ 450.311455] ? do_raw_spin_unlock+0x178/0x270 [ 450.315999] ? _raw_spin_unlock+0x2d/0x50 [ 450.320156] try_charge+0xec5/0x1490 [ 450.323869] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 450.328943] ? lock_downgrade+0x880/0x880 [ 450.333090] ? kasan_check_read+0x11/0x20 [ 450.337258] memcg_kmem_charge_memcg+0x83/0x170 [ 450.341986] ? memcg_kmem_put_cache+0xb0/0xb0 [ 450.346501] ? __isolate_free_page+0x4c0/0x4c0 [ 450.351078] memcg_kmem_charge+0x136/0x370 [ 450.355305] __alloc_pages_nodemask+0x3c3/0x750 [ 450.359986] ? __alloc_pages_slowpath+0x2870/0x2870 [ 450.365091] ? lockdep_hardirqs_on+0x415/0x5d0 [ 450.369678] ? trace_hardirqs_on+0x67/0x220 [ 450.373992] copy_process.part.0+0x3e0/0x7a30 [ 450.378512] ? mark_held_locks+0x100/0x100 [ 450.382751] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 450.387706] ? __might_fault+0x12b/0x1e0 [ 450.391769] ? __cleanup_sighand+0x70/0x70 [ 450.395998] ? lock_downgrade+0x880/0x880 [ 450.400301] _do_fork+0x257/0xfd0 [ 450.403775] ? fork_idle+0x1d0/0x1d0 [ 450.407495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.412253] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.417003] ? do_syscall_64+0x26/0x620 [ 450.420983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.426347] ? do_syscall_64+0x26/0x620 [ 450.430356] __x64_sys_clone+0xbf/0x150 [ 450.434328] do_syscall_64+0xfd/0x620 [ 450.438121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.443296] RIP: 0033:0x458c1a [ 450.446477] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 450.465515] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 450.473227] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 450.480661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 450.487941] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 450.495208] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 450.502473] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 450.516815] Task in /syz3 killed as a result of limit of /syz3 [ 450.522882] memory: usage 65800kB, limit 0kB, failcnt 8 [ 450.556535] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.573802] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.593774] Memory cgroup stats for /syz3: cache:368KB rss:36744KB rss_huge:34816KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:36928KB inactive_file:0KB active_file:0KB unevictable:0KB [ 450.661412] Memory cgroup out of memory: Kill process 13011 (syz-executor.3) score 10567000 or sacrifice child [ 450.692081] Killed process 13011 (syz-executor.3) total-vm:72720kB, anon-rss:6300kB, file-rss:35832kB, shmem-rss:0kB [ 450.780409] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 450.795598] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 450.801157] CPU: 0 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 450.808971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.818337] Call Trace: [ 450.820937] dump_stack+0x197/0x210 [ 450.824924] dump_header+0x15e/0xa55 [ 450.828646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.833754] ? ___ratelimit+0x60/0x595 [ 450.837739] ? do_raw_spin_unlock+0x178/0x270 [ 450.842244] oom_kill_process.cold+0x10/0x6ef [ 450.846744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.852283] ? task_will_free_mem+0x139/0x6e0 [ 450.857050] out_of_memory+0x362/0x1330 [ 450.861035] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 450.866161] ? oom_killer_disable+0x280/0x280 [ 450.870669] ? find_held_lock+0x35/0x130 [ 450.874758] mem_cgroup_out_of_memory+0x1d2/0x240 [ 450.879703] ? memcg_event_wake+0x230/0x230 [ 450.884039] ? do_raw_spin_unlock+0x178/0x270 [ 450.888630] ? _raw_spin_unlock+0x2d/0x50 [ 450.892873] try_charge+0xec5/0x1490 [ 450.896603] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 450.901456] ? lock_downgrade+0x880/0x880 [ 450.905614] ? kasan_check_read+0x11/0x20 [ 450.909776] memcg_kmem_charge_memcg+0x83/0x170 [ 450.914461] ? memcg_kmem_put_cache+0xb0/0xb0 [ 450.919007] ? __isolate_free_page+0x4c0/0x4c0 [ 450.923606] memcg_kmem_charge+0x136/0x370 [ 450.927849] __alloc_pages_nodemask+0x3c3/0x750 [ 450.932534] ? __alloc_pages_slowpath+0x2870/0x2870 [ 450.937566] ? lockdep_hardirqs_on+0x415/0x5d0 [ 450.942241] ? trace_hardirqs_on+0x67/0x220 [ 450.946583] copy_process.part.0+0x3e0/0x7a30 [ 450.951106] ? mark_held_locks+0x100/0x100 [ 450.955342] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 450.960042] ? __might_fault+0x12b/0x1e0 [ 450.964131] ? __cleanup_sighand+0x70/0x70 [ 450.968382] ? lock_downgrade+0x880/0x880 [ 450.972557] _do_fork+0x257/0xfd0 [ 450.976035] ? fork_idle+0x1d0/0x1d0 [ 450.979760] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.984506] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.989262] ? do_syscall_64+0x26/0x620 [ 450.993243] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.998617] ? do_syscall_64+0x26/0x620 [ 451.002709] __x64_sys_clone+0xbf/0x150 [ 451.006689] do_syscall_64+0xfd/0x620 [ 451.010479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.015655] RIP: 0033:0x458c1a [ 451.018833] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 451.037741] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 451.045462] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 451.052809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 451.060097] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 451.067361] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 451.074626] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 451.083211] Task in /syz2 killed as a result of limit of /syz2 [ 451.089922] memory: usage 52656kB, limit 0kB, failcnt 9 [ 451.095300] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.102243] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.108629] Memory cgroup stats for /syz2: cache:264KB rss:36536KB [ 451.108672] rss_huge:34816KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:36552KB inactive_file:0KB active_file:4KB unevictable:0KB [ 451.131300] Memory cgroup out of memory: Kill process 12888 (syz-executor.2) score 10568000 or sacrifice child [ 451.131907] Killed process 12888 (syz-executor.2) total-vm:72720kB, anon-rss:6300kB, file-rss:35832kB, shmem-rss:0kB [ 451.163682] IPVS: ftp: loaded support on port[0] = 21 [ 451.211179] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 451.266894] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 451.272705] CPU: 0 PID: 19529 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 451.280515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.289885] Call Trace: [ 451.289908] dump_stack+0x197/0x210 [ 451.289930] dump_header+0x15e/0xa55 [ 451.296139] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 451.304963] ? ___ratelimit+0x60/0x595 [ 451.308852] ? do_raw_spin_unlock+0x178/0x270 [ 451.308873] oom_kill_process.cold+0x10/0x6ef [ 451.308891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.308904] ? task_will_free_mem+0x139/0x6e0 [ 451.308925] out_of_memory+0x362/0x1330 [ 451.308942] ? trace_hardirqs_on_caller+0x6a/0x220 [ 451.328040] ? oom_killer_disable+0x280/0x280 [ 451.328065] mem_cgroup_out_of_memory+0x1d2/0x240 [ 451.328085] ? memcg_event_wake+0x230/0x230 [ 451.336985] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 451.337001] ? cgroup_file_notify+0x140/0x1b0 [ 451.337020] memory_max_write+0x169/0x300 [ 451.337036] ? lockdep_hardirqs_on+0x415/0x5d0 [ 451.337054] ? mem_cgroup_write+0x360/0x360 [ 451.346377] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.346401] cgroup_file_write+0x241/0x790 [ 451.346421] ? mem_cgroup_write+0x360/0x360 [ 451.373543] ? kill_css+0x380/0x380 [ 451.386863] ? kernfs_ops+0x9f/0x110 [ 451.386877] ? kernfs_ops+0xbe/0x110 [ 451.386894] ? kill_css+0x380/0x380 [ 451.386912] kernfs_fop_write+0x2b8/0x480 [ 451.394791] __vfs_write+0x114/0x810 [ 451.409988] ? kernfs_fop_open+0xd80/0xd80 [ 451.414217] ? kernel_read+0x120/0x120 [ 451.418104] ? __lock_is_held+0xb6/0x140 [ 451.422168] ? rcu_read_lock_sched_held+0x110/0x130 [ 451.427179] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 451.432020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.437715] ? __sb_start_write+0x1a9/0x360 [ 451.442043] vfs_write+0x20c/0x560 [ 451.445582] ksys_write+0x14f/0x2d0 [ 451.449206] ? __ia32_sys_read+0xb0/0xb0 [ 451.453277] __x64_sys_write+0x73/0xb0 [ 451.457166] ? do_syscall_64+0x5b/0x620 [ 451.461130] do_syscall_64+0xfd/0x620 [ 451.464946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.470152] RIP: 0033:0x45a649 [ 451.473361] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.492358] RSP: 002b:00007efc74e75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.500063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 451.507331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 451.514586] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 451.521845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc74e766d4 [ 451.529105] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 451.644508] Task in /syz4 killed as a result of limit of /syz4 [ 451.653274] memory: usage 60632kB, limit 0kB, failcnt 0 [ 451.666538] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.673353] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.673362] Memory cgroup stats for /syz4 [ 451.689234] : cache:252KB rss:38212KB rss_huge:36864KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB [ 451.689316] inactive_anon:4KB active_anon:38248KB [ 451.710438] inactive_file:8KB active_file:12KB unevictable:0KB [ 451.722671] Memory cgroup out of memory: Kill process 12942 (syz-executor.4) score 11592000 or sacrifice child [ 451.732983] Killed process 12942 (syz-executor.4) total-vm:72720kB, anon-rss:10396kB, file-rss:35824kB, shmem-rss:0kB [ 451.764323] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 451.783189] chnl_net:caif_netlink_parms(): no params data found [ 451.785123] syz-executor.3 cpuset= [ 451.794393] syz3 [ 451.803557] mems_allowed=0-1 [ 451.810980] CPU: 0 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 451.818815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.818820] Call Trace: [ 451.818838] dump_stack+0x197/0x210 [ 451.818857] dump_header+0x15e/0xa55 [ 451.818872] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 451.818886] ? ___ratelimit+0x60/0x595 [ 451.818898] ? do_raw_spin_unlock+0x178/0x270 [ 451.818916] oom_kill_process.cold+0x10/0x6ef [ 451.818933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.818945] ? task_will_free_mem+0x139/0x6e0 [ 451.818963] out_of_memory+0x362/0x1330 [ 451.834622] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 451.843414] ? oom_killer_disable+0x280/0x280 [ 451.851758] ? find_held_lock+0x35/0x130 [ 451.861849] mem_cgroup_out_of_memory+0x1d2/0x240 [ 451.861862] ? memcg_event_wake+0x230/0x230 [ 451.861880] ? do_raw_spin_unlock+0x178/0x270 [ 451.870320] ? _raw_spin_unlock+0x2d/0x50 [ 451.870338] try_charge+0xec5/0x1490 [ 451.870361] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 451.879932] ? lock_downgrade+0x880/0x880 [ 451.879949] ? kasan_check_read+0x11/0x20 [ 451.879970] memcg_kmem_charge_memcg+0x83/0x170 [ 451.888995] ? memcg_kmem_put_cache+0xb0/0xb0 [ 451.889013] ? __isolate_free_page+0x4c0/0x4c0 [ 451.889030] memcg_kmem_charge+0x136/0x370 [ 451.898265] __alloc_pages_nodemask+0x3c3/0x750 [ 451.898283] ? __alloc_pages_slowpath+0x2870/0x2870 [ 451.898303] ? lockdep_hardirqs_on+0x415/0x5d0 [ 451.906130] ? trace_hardirqs_on+0x67/0x220 [ 451.915193] copy_process.part.0+0x3e0/0x7a30 [ 451.924008] ? mark_held_locks+0x100/0x100 [ 451.933146] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 451.942029] ? __might_fault+0x12b/0x1e0 [ 451.951598] ? __cleanup_sighand+0x70/0x70 [ 451.960386] ? lock_downgrade+0x880/0x880 [ 451.960416] _do_fork+0x257/0xfd0 [ 451.969286] ? fork_idle+0x1d0/0x1d0 [ 451.969313] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.977566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.977580] ? do_syscall_64+0x26/0x620 [ 451.977600] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.985272] ? do_syscall_64+0x26/0x620 [ 451.993711] __x64_sys_clone+0xbf/0x150 [ 452.002683] do_syscall_64+0xfd/0x620 [ 452.012091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.019826] RIP: 0033:0x458c1a [ 452.019840] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 452.019847] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.028308] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 452.028316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 452.028323] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 452.028330] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 452.028337] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 452.031177] Task in [ 452.092396] /syz3 [ 452.095762] killed as a result of limit of /syz3 [ 452.103680] memory: usage 59208kB, limit 0kB, failcnt 14 [ 452.110772] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 452.118244] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 452.124675] Memory cgroup stats for /syz3: cache:368KB rss:30404KB rss_huge:28672KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:30648KB inactive_file:0KB active_file:0KB unevictable:0KB [ 452.146411] Memory cgroup out of memory: Kill process 12521 (syz-executor.3) score 10062000 or sacrifice child [ 452.158944] Killed process 12524 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 452.172566] oom_reaper: reaped process 12524 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 452.197331] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 452.222790] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 452.229881] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 452.237719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.247098] Call Trace: [ 452.249709] dump_stack+0x197/0x210 [ 452.253359] dump_header+0x15e/0xa55 [ 452.257106] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 452.262231] ? ___ratelimit+0x60/0x595 [ 452.266128] ? do_raw_spin_unlock+0x178/0x270 [ 452.270637] oom_kill_process.cold+0x10/0x6ef [ 452.275163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.280723] ? task_will_free_mem+0x139/0x6e0 [ 452.285255] out_of_memory+0x362/0x1330 [ 452.289265] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 452.294393] ? oom_killer_disable+0x280/0x280 [ 452.298919] ? find_held_lock+0x35/0x130 [ 452.303013] mem_cgroup_out_of_memory+0x1d2/0x240 [ 452.307880] ? memcg_event_wake+0x230/0x230 [ 452.312230] ? do_raw_spin_unlock+0x178/0x270 [ 452.316751] ? _raw_spin_unlock+0x2d/0x50 [ 452.320931] try_charge+0xec5/0x1490 [ 452.324676] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 452.329557] ? lock_downgrade+0x880/0x880 [ 452.333745] ? kasan_check_read+0x11/0x20 [ 452.337927] memcg_kmem_charge_memcg+0x83/0x170 [ 452.342627] ? memcg_kmem_put_cache+0xb0/0xb0 [ 452.347156] ? __isolate_free_page+0x4c0/0x4c0 [ 452.351764] memcg_kmem_charge+0x136/0x370 [ 452.356032] __alloc_pages_nodemask+0x3c3/0x750 [ 452.360994] ? __alloc_pages_slowpath+0x2870/0x2870 [ 452.366042] ? lockdep_hardirqs_on+0x415/0x5d0 [ 452.370652] ? trace_hardirqs_on+0x67/0x220 [ 452.375006] copy_process.part.0+0x3e0/0x7a30 [ 452.379531] ? mark_held_locks+0x100/0x100 [ 452.383782] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 452.388484] ? __might_fault+0x12b/0x1e0 [ 452.392573] ? __cleanup_sighand+0x70/0x70 [ 452.396857] ? lock_downgrade+0x880/0x880 [ 452.401130] _do_fork+0x257/0xfd0 [ 452.404701] ? fork_idle+0x1d0/0x1d0 [ 452.408448] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.413237] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.418060] ? do_syscall_64+0x26/0x620 [ 452.422066] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.427548] ? do_syscall_64+0x26/0x620 [ 452.431549] __x64_sys_clone+0xbf/0x150 [ 452.435537] do_syscall_64+0xfd/0x620 [ 452.439356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.444552] RIP: 0033:0x458c1a [ 452.447752] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 452.466666] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.474399] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 452.481708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 452.488997] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 452.496280] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 452.503560] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 452.566602] Task in /syz2 killed as a result of limit of /syz2 [ 452.572662] memory: usage 46136kB, limit 0kB, failcnt 16 [ 452.606691] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 452.613601] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 452.621385] Memory cgroup stats for /syz2: cache:264KB rss:30188KB rss_huge:28672KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:30280KB inactive_file:0KB active_file:0KB unevictable:0KB [ 452.677420] Memory cgroup out of memory: Kill process 12626 (syz-executor.2) score 10067000 or sacrifice child [ 452.696625] Killed process 12633 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 452.751947] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 452.776707] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 452.782174] CPU: 1 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 452.789968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.799327] Call Trace: [ 452.801927] dump_stack+0x197/0x210 [ 452.805561] dump_header+0x15e/0xa55 [ 452.809288] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 452.814398] ? ___ratelimit+0x60/0x595 [ 452.818295] ? do_raw_spin_unlock+0x178/0x270 [ 452.822797] oom_kill_process.cold+0x10/0x6ef [ 452.827301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.832839] ? task_will_free_mem+0x139/0x6e0 [ 452.837361] out_of_memory+0x362/0x1330 [ 452.841345] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 452.846469] ? oom_killer_disable+0x280/0x280 [ 452.850968] ? find_held_lock+0x35/0x130 [ 452.855059] mem_cgroup_out_of_memory+0x1d2/0x240 [ 452.859919] ? memcg_event_wake+0x230/0x230 [ 452.864258] ? do_raw_spin_unlock+0x178/0x270 [ 452.868766] ? _raw_spin_unlock+0x2d/0x50 [ 452.872931] try_charge+0xec5/0x1490 [ 452.876665] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 452.881532] ? lock_downgrade+0x880/0x880 [ 452.885721] ? kasan_check_read+0x11/0x20 [ 452.889894] memcg_kmem_charge_memcg+0x83/0x170 [ 452.894573] ? memcg_kmem_put_cache+0xb0/0xb0 [ 452.899085] ? __isolate_free_page+0x4c0/0x4c0 [ 452.903676] memcg_kmem_charge+0x136/0x370 [ 452.907922] __alloc_pages_nodemask+0x3c3/0x750 [ 452.912696] ? __alloc_pages_slowpath+0x2870/0x2870 [ 452.917736] ? lockdep_hardirqs_on+0x415/0x5d0 [ 452.922330] ? trace_hardirqs_on+0x67/0x220 [ 452.926673] copy_process.part.0+0x3e0/0x7a30 [ 452.931181] ? mark_held_locks+0x100/0x100 [ 452.935415] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 452.940102] ? __might_fault+0x12b/0x1e0 [ 452.944185] ? __cleanup_sighand+0x70/0x70 [ 452.948429] ? lock_downgrade+0x880/0x880 [ 452.952607] _do_fork+0x257/0xfd0 [ 452.956164] ? fork_idle+0x1d0/0x1d0 [ 452.959898] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.964664] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.969420] ? do_syscall_64+0x26/0x620 [ 452.973397] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.978772] ? do_syscall_64+0x26/0x620 [ 452.982760] __x64_sys_clone+0xbf/0x150 [ 452.986749] do_syscall_64+0xfd/0x620 [ 452.990576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.995771] RIP: 0033:0x458c1a [ 452.998975] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 453.017889] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 453.025623] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 453.032921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 453.040204] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 453.047481] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 453.054923] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 453.065843] Task in /syz3 killed as a result of limit of /syz3 [ 453.076686] memory: usage 56968kB, limit 0kB, failcnt 20 [ 453.082582] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.089817] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.096384] Memory cgroup stats for /syz3: cache:368KB rss:28328KB rss_huge:26624KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:28568KB inactive_file:0KB active_file:0KB unevictable:0KB [ 453.118172] Memory cgroup out of memory: Kill process 12521 (syz-executor.3) score 10062000 or sacrifice child [ 453.128841] Killed process 12521 (syz-executor.3) total-vm:72588kB, anon-rss:4244kB, file-rss:35872kB, shmem-rss:0kB [ 453.140626] oom_reaper: reaped process 12521 (syz-executor.3), now anon-rss:0kB, file-rss:34912kB, shmem-rss:0kB [ 453.151616] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 453.181120] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 453.196161] CPU: 0 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 453.204011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.213383] Call Trace: [ 453.215985] dump_stack+0x197/0x210 [ 453.219623] dump_header+0x15e/0xa55 [ 453.223364] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 453.228481] ? ___ratelimit+0x60/0x595 [ 453.232375] ? do_raw_spin_unlock+0x178/0x270 [ 453.236887] oom_kill_process.cold+0x10/0x6ef [ 453.241393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.246938] ? task_will_free_mem+0x139/0x6e0 [ 453.251476] out_of_memory+0x362/0x1330 [ 453.255556] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 453.260668] ? oom_killer_disable+0x280/0x280 [ 453.265193] ? find_held_lock+0x35/0x130 [ 453.269271] mem_cgroup_out_of_memory+0x1d2/0x240 [ 453.274127] ? memcg_event_wake+0x230/0x230 [ 453.278463] ? do_raw_spin_unlock+0x178/0x270 [ 453.282973] ? _raw_spin_unlock+0x2d/0x50 [ 453.287137] try_charge+0xec5/0x1490 [ 453.290870] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 453.295741] ? lock_downgrade+0x880/0x880 [ 453.299897] ? kasan_check_read+0x11/0x20 [ 453.304067] memcg_kmem_charge_memcg+0x83/0x170 [ 453.308745] ? memcg_kmem_put_cache+0xb0/0xb0 [ 453.313255] ? __isolate_free_page+0x4c0/0x4c0 [ 453.317847] memcg_kmem_charge+0x136/0x370 [ 453.322182] __alloc_pages_nodemask+0x3c3/0x750 [ 453.327302] ? __alloc_pages_slowpath+0x2870/0x2870 [ 453.332336] ? lockdep_hardirqs_on+0x415/0x5d0 [ 453.336921] ? trace_hardirqs_on+0x67/0x220 [ 453.341301] copy_process.part.0+0x3e0/0x7a30 [ 453.345894] ? mark_held_locks+0x100/0x100 [ 453.350137] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 453.354828] ? __might_fault+0x12b/0x1e0 [ 453.358915] ? __cleanup_sighand+0x70/0x70 [ 453.363485] ? lock_downgrade+0x880/0x880 [ 453.367652] _do_fork+0x257/0xfd0 [ 453.371103] ? fork_idle+0x1d0/0x1d0 [ 453.374877] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 453.379648] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 453.384395] ? do_syscall_64+0x26/0x620 [ 453.388363] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.393792] ? do_syscall_64+0x26/0x620 [ 453.397837] __x64_sys_clone+0xbf/0x150 [ 453.401806] do_syscall_64+0xfd/0x620 [ 453.406908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.412087] RIP: 0033:0x458c1a [ 453.415269] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 453.434174] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 453.441882] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 453.449160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 453.456420] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 453.463687] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 453.470942] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 453.480057] Task in /syz2 killed as a result of limit of /syz2 [ 453.486630] memory: usage 43848kB, limit 0kB, failcnt 22 [ 453.492400] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.499465] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.506010] Memory cgroup stats for [ 453.510058] /syz2: cache:264KB rss:28040KB rss_huge:26624KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:28148KB inactive_file:0KB active_file:0KB unevictable:0KB [ 453.529178] Memory cgroup out of memory: Kill process 12626 (syz-executor.2) score 10067000 or sacrifice child [ 453.540391] Killed process 12626 (syz-executor.2) total-vm:72720kB, anon-rss:4252kB, file-rss:35880kB, shmem-rss:0kB [ 453.553417] oom_reaper: reaped process 12626 (syz-executor.2), now anon-rss:0kB, file-rss:34920kB, shmem-rss:0kB [ 453.564683] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 453.579945] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 453.585620] CPU: 0 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 453.593435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.602797] Call Trace: [ 453.605387] dump_stack+0x197/0x210 [ 453.609052] dump_header+0x15e/0xa55 [ 453.609070] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 453.609086] ? ___ratelimit+0x60/0x595 [ 453.609098] ? do_raw_spin_unlock+0x178/0x270 [ 453.609113] oom_kill_process.cold+0x10/0x6ef [ 453.609131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.621946] ? task_will_free_mem+0x139/0x6e0 [ 453.632071] out_of_memory+0x362/0x1330 [ 453.642092] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 453.651151] ? oom_killer_disable+0x280/0x280 [ 453.651164] ? find_held_lock+0x35/0x130 [ 453.651186] mem_cgroup_out_of_memory+0x1d2/0x240 [ 453.651198] ? memcg_event_wake+0x230/0x230 [ 453.651218] ? do_raw_spin_unlock+0x178/0x270 [ 453.659752] ? _raw_spin_unlock+0x2d/0x50 [ 453.659770] try_charge+0xec5/0x1490 [ 453.659791] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 453.659810] ? lock_downgrade+0x880/0x880 [ 453.668949] ? kasan_check_read+0x11/0x20 [ 453.668977] memcg_kmem_charge_memcg+0x83/0x170 [ 453.668994] ? memcg_kmem_put_cache+0xb0/0xb0 [ 453.677615] ? __isolate_free_page+0x4c0/0x4c0 [ 453.677634] memcg_kmem_charge+0x136/0x370 [ 453.677651] __alloc_pages_nodemask+0x3c3/0x750 [ 453.677669] ? __alloc_pages_slowpath+0x2870/0x2870 [ 453.686203] ? lockdep_hardirqs_on+0x415/0x5d0 [ 453.694478] ? trace_hardirqs_on+0x67/0x220 [ 453.703614] copy_process.part.0+0x3e0/0x7a30 [ 453.712401] ? mark_held_locks+0x100/0x100 [ 453.722200] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 453.739295] ? __might_fault+0x12b/0x1e0 [ 453.739319] ? __cleanup_sighand+0x70/0x70 [ 453.739338] ? lock_downgrade+0x880/0x880 [ 453.748357] _do_fork+0x257/0xfd0 [ 453.748398] ? fork_idle+0x1d0/0x1d0 [ 453.748422] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 453.757251] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 453.757264] ? do_syscall_64+0x26/0x620 [ 453.757279] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.757290] ? do_syscall_64+0x26/0x620 [ 453.757309] __x64_sys_clone+0xbf/0x150 [ 453.766119] do_syscall_64+0xfd/0x620 [ 453.773350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.782825] RIP: 0033:0x458c1a [ 453.792397] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 453.800311] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 453.800326] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 453.800333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 453.800341] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 453.800348] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 453.800356] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 453.816725] Task in [ 453.862257] /syz3 [ 453.882334] killed as a result of limit of /syz3 [ 453.887637] memory: usage 52568kB, limit 0kB, failcnt 26 [ 453.893208] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.900280] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.906745] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.913517] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.919924] Memory cgroup stats for /syz3: cache:368KB rss:24108KB rss_huge:22528KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:24356KB inactive_file:0KB active_file:0KB unevictable:0KB [ 453.928621] device bridge_slave_0 entered promiscuous mode [ 453.941015] Memory cgroup out of memory: Kill process 12628 (syz-executor.3) score 9546000 or sacrifice child [ 453.957530] Killed process 12628 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:35860kB, shmem-rss:0kB [ 453.983354] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 453.997796] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 454.003264] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 454.011075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.020450] Call Trace: [ 454.023064] dump_stack+0x197/0x210 [ 454.026719] dump_header+0x15e/0xa55 [ 454.030546] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 454.035676] ? ___ratelimit+0x60/0x595 [ 454.039581] ? do_raw_spin_unlock+0x178/0x270 [ 454.044100] oom_kill_process.cold+0x10/0x6ef [ 454.048640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.054192] ? task_will_free_mem+0x139/0x6e0 [ 454.058798] out_of_memory+0x362/0x1330 [ 454.062790] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 454.067920] ? oom_killer_disable+0x280/0x280 [ 454.072415] ? find_held_lock+0x35/0x130 [ 454.076486] mem_cgroup_out_of_memory+0x1d2/0x240 [ 454.081333] ? memcg_event_wake+0x230/0x230 [ 454.085664] ? do_raw_spin_unlock+0x178/0x270 [ 454.090171] ? _raw_spin_unlock+0x2d/0x50 [ 454.094489] try_charge+0xec5/0x1490 [ 454.098239] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 454.103098] ? lock_downgrade+0x880/0x880 [ 454.107261] ? kasan_check_read+0x11/0x20 [ 454.111425] memcg_kmem_charge_memcg+0x83/0x170 [ 454.116108] ? memcg_kmem_put_cache+0xb0/0xb0 [ 454.120790] ? __isolate_free_page+0x4c0/0x4c0 [ 454.125407] memcg_kmem_charge+0x136/0x370 [ 454.129653] __alloc_pages_nodemask+0x3c3/0x750 [ 454.134339] ? __alloc_pages_slowpath+0x2870/0x2870 [ 454.139374] ? lockdep_hardirqs_on+0x415/0x5d0 [ 454.143966] ? trace_hardirqs_on+0x67/0x220 [ 454.148304] copy_process.part.0+0x3e0/0x7a30 [ 454.152812] ? mark_held_locks+0x100/0x100 [ 454.157070] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 454.161762] ? __might_fault+0x12b/0x1e0 [ 454.165837] ? __cleanup_sighand+0x70/0x70 [ 454.170082] ? lock_downgrade+0x880/0x880 [ 454.174248] _do_fork+0x257/0xfd0 [ 454.177710] ? fork_idle+0x1d0/0x1d0 [ 454.181437] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 454.186195] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 454.190953] ? do_syscall_64+0x26/0x620 [ 454.194931] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.200297] ? do_syscall_64+0x26/0x620 [ 454.204303] __x64_sys_clone+0xbf/0x150 [ 454.208289] do_syscall_64+0xfd/0x620 [ 454.212098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.217477] RIP: 0033:0x458c1a [ 454.220684] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 454.239693] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 454.247423] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 454.254880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 454.262158] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 454.269434] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 454.277065] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 454.284705] Task in /syz2 killed as a result of limit of /syz2 [ 454.291128] memory: usage 39292kB, limit 0kB, failcnt 28 [ 454.298353] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 454.305124] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 454.311419] Memory cgroup stats for /syz2: cache:264KB rss:23832KB rss_huge:22528KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:23924KB inactive_file:0KB active_file:0KB unevictable:0KB [ 454.332442] Memory cgroup out of memory: Kill process 12482 (syz-executor.2) score 10065000 or sacrifice child [ 454.356587] Killed process 12488 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 454.376821] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 454.387339] oom_reaper: reaped process 12488 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 454.399437] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 454.405184] CPU: 1 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 454.413159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.422519] Call Trace: [ 454.425115] dump_stack+0x197/0x210 [ 454.428765] dump_header+0x15e/0xa55 [ 454.432504] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 454.437632] ? ___ratelimit+0x60/0x595 [ 454.441526] ? do_raw_spin_unlock+0x178/0x270 [ 454.446105] oom_kill_process.cold+0x10/0x6ef [ 454.450629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.456187] ? task_will_free_mem+0x139/0x6e0 [ 454.460693] out_of_memory+0x362/0x1330 [ 454.464693] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 454.469888] ? oom_killer_disable+0x280/0x280 [ 454.474383] ? find_held_lock+0x35/0x130 [ 454.478459] mem_cgroup_out_of_memory+0x1d2/0x240 [ 454.483306] ? memcg_event_wake+0x230/0x230 [ 454.487638] ? do_raw_spin_unlock+0x178/0x270 [ 454.492136] ? _raw_spin_unlock+0x2d/0x50 [ 454.496292] try_charge+0xec5/0x1490 [ 454.500042] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 454.504890] ? lock_downgrade+0x880/0x880 [ 454.509171] ? kasan_check_read+0x11/0x20 [ 454.513331] memcg_kmem_charge_memcg+0x83/0x170 [ 454.518015] ? memcg_kmem_put_cache+0xb0/0xb0 [ 454.522524] ? __isolate_free_page+0x4c0/0x4c0 [ 454.527103] memcg_kmem_charge+0x136/0x370 [ 454.531327] __alloc_pages_nodemask+0x3c3/0x750 [ 454.536001] ? __alloc_pages_slowpath+0x2870/0x2870 [ 454.541027] ? lockdep_hardirqs_on+0x415/0x5d0 [ 454.545603] ? trace_hardirqs_on+0x67/0x220 [ 454.549930] copy_process.part.0+0x3e0/0x7a30 [ 454.554438] ? mark_held_locks+0x100/0x100 [ 454.558668] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 454.563335] ? __might_fault+0x12b/0x1e0 [ 454.567402] ? __cleanup_sighand+0x70/0x70 [ 454.571755] ? lock_downgrade+0x880/0x880 [ 454.575990] _do_fork+0x257/0xfd0 [ 454.579439] ? fork_idle+0x1d0/0x1d0 [ 454.583154] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 454.587904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 454.592649] ? do_syscall_64+0x26/0x620 [ 454.596643] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.601999] ? do_syscall_64+0x26/0x620 [ 454.605973] __x64_sys_clone+0xbf/0x150 [ 454.609958] do_syscall_64+0xfd/0x620 [ 454.613752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.618927] RIP: 0033:0x458c1a [ 454.622105] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 454.641001] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 454.648821] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 454.656495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 454.663767] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 454.671026] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 454.678381] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 454.686648] Task in /syz3 killed as a result of limit of /syz3 [ 454.692713] memory: usage 50244kB, limit 0kB, failcnt 32 [ 454.701876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 454.712048] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.716499] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 454.719420] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.724547] Memory cgroup stats for /syz3 [ 454.738066] device bridge_slave_1 entered promiscuous mode [ 454.741649] : cache:368KB rss:21968KB rss_huge:20480KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:22196KB inactive_file:0KB active_file:0KB unevictable:0KB [ 454.773744] Memory cgroup out of memory: Kill process 12658 (syz-executor.3) score 9544000 or sacrifice child [ 454.795945] Killed process 12658 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:35852kB, shmem-rss:0kB [ 454.827722] Memory cgroup out of memory: Kill process 17128 (syz-executor.3) score 9541000 or sacrifice child [ 454.854472] Killed process 17128 (syz-executor.3) total-vm:72720kB, anon-rss:2228kB, file-rss:35808kB, shmem-rss:0kB [ 454.878117] oom_reaper: reaped process 17128 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 454.888635] Memory cgroup out of memory: Kill process 12482 (syz-executor.2) score 10065000 or sacrifice child [ 454.906582] Killed process 12482 (syz-executor.2) total-vm:72720kB, anon-rss:4252kB, file-rss:35872kB, shmem-rss:0kB [ 454.938401] oom_reaper: reaped process 12482 (syz-executor.2), now anon-rss:0kB, file-rss:34912kB, shmem-rss:0kB [ 454.948972] Memory cgroup out of memory: Kill process 17115 (syz-executor.3) score 9540000 or sacrifice child [ 454.967608] Killed process 17115 (syz-executor.3) total-vm:72588kB, anon-rss:2220kB, file-rss:35812kB, shmem-rss:0kB [ 454.984909] oom_reaper: reaped process 17115 (syz-executor.3), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 454.995418] Memory cgroup out of memory: Kill process 12602 (syz-executor.2) score 9549000 or sacrifice child [ 455.018242] Killed process 12602 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:35868kB, shmem-rss:0kB [ 455.064002] Memory cgroup out of memory: Kill process 14241 (syz-executor.3) score 9283000 or sacrifice child [ 455.092413] Killed process 14241 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 455.116340] oom_reaper: reaped process 14241 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 455.138955] oom_kill_process: 5 callbacks suppressed [ 455.138975] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 455.166536] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 455.172024] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 455.179970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.189414] Call Trace: [ 455.192015] dump_stack+0x197/0x210 [ 455.195655] dump_header+0x15e/0xa55 [ 455.199383] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 455.204490] ? ___ratelimit+0x60/0x595 [ 455.208385] oom_kill_process.cold+0x10/0x6ef [ 455.212885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.218424] ? task_will_free_mem+0x139/0x6e0 [ 455.222935] out_of_memory+0x362/0x1330 [ 455.226921] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 455.232026] ? oom_killer_disable+0x280/0x280 [ 455.236522] ? find_held_lock+0x35/0x130 [ 455.240598] mem_cgroup_out_of_memory+0x1d2/0x240 [ 455.245446] ? memcg_event_wake+0x230/0x230 [ 455.249779] ? do_raw_spin_unlock+0x178/0x270 [ 455.254401] ? _raw_spin_unlock+0x2d/0x50 [ 455.258544] try_charge+0xec5/0x1490 [ 455.262298] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 455.267230] ? lock_downgrade+0x880/0x880 [ 455.271375] ? kasan_check_read+0x11/0x20 [ 455.275580] memcg_kmem_charge_memcg+0x83/0x170 [ 455.280240] ? memcg_kmem_put_cache+0xb0/0xb0 [ 455.284727] ? __isolate_free_page+0x4c0/0x4c0 [ 455.289325] memcg_kmem_charge+0x136/0x370 [ 455.293572] __alloc_pages_nodemask+0x3c3/0x750 [ 455.298368] ? __alloc_pages_slowpath+0x2870/0x2870 [ 455.303376] ? lockdep_hardirqs_on+0x415/0x5d0 [ 455.307960] ? trace_hardirqs_on+0x67/0x220 [ 455.312344] copy_process.part.0+0x3e0/0x7a30 [ 455.316830] ? mark_held_locks+0x100/0x100 [ 455.321055] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 455.325715] ? __might_fault+0x12b/0x1e0 [ 455.329781] ? __cleanup_sighand+0x70/0x70 [ 455.334014] ? lock_downgrade+0x880/0x880 [ 455.338159] _do_fork+0x257/0xfd0 [ 455.341731] ? fork_idle+0x1d0/0x1d0 [ 455.345479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.350232] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.355039] ? do_syscall_64+0x26/0x620 [ 455.359033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.364384] ? do_syscall_64+0x26/0x620 [ 455.368377] __x64_sys_clone+0xbf/0x150 [ 455.372350] do_syscall_64+0xfd/0x620 [ 455.376153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.381336] RIP: 0033:0x458c1a [ 455.384529] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 455.403432] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 455.411139] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 455.418411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 455.425674] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 455.432935] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 455.440286] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 455.448024] Task in /syz2 killed as a result of limit of /syz2 [ 455.455120] memory: usage 30284kB, limit 0kB, failcnt 46 [ 455.460753] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 455.467788] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 455.467796] Memory cgroup stats for /syz2: cache:264KB rss:15316KB rss_huge:14336KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:15404KB inactive_file:0KB active_file:0KB unevictable:0KB [ 455.467898] Memory cgroup out of memory: Kill process 12461 (syz-executor.2) score 9535000 or sacrifice child [ 455.468479] Killed process 12461 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:35812kB, shmem-rss:0kB [ 455.516883] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 455.517248] oom_reaper: reaped process 12461 (syz-executor.2), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 455.531042] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 455.546086] CPU: 0 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 455.553903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.563248] Call Trace: [ 455.563268] dump_stack+0x197/0x210 [ 455.563286] dump_header+0x15e/0xa55 [ 455.563302] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 455.563315] ? ___ratelimit+0x60/0x595 [ 455.563331] ? do_raw_spin_unlock+0x178/0x270 [ 455.569573] oom_kill_process.cold+0x10/0x6ef [ 455.569592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.569604] ? task_will_free_mem+0x139/0x6e0 [ 455.569622] out_of_memory+0x362/0x1330 [ 455.569643] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 455.578456] ? oom_killer_disable+0x280/0x280 [ 455.578474] ? find_held_lock+0x35/0x130 [ 455.578497] mem_cgroup_out_of_memory+0x1d2/0x240 [ 455.578512] ? memcg_event_wake+0x230/0x230 [ 455.586912] ? do_raw_spin_unlock+0x178/0x270 [ 455.586929] ? _raw_spin_unlock+0x2d/0x50 [ 455.586946] try_charge+0xec5/0x1490 [ 455.586969] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 455.596985] ? lock_downgrade+0x880/0x880 [ 455.597002] ? kasan_check_read+0x11/0x20 [ 455.597026] memcg_kmem_charge_memcg+0x83/0x170 [ 455.597043] ? memcg_kmem_put_cache+0xb0/0xb0 [ 455.605516] ? __isolate_free_page+0x4c0/0x4c0 [ 455.615091] memcg_kmem_charge+0x136/0x370 [ 455.623963] __alloc_pages_nodemask+0x3c3/0x750 [ 455.632772] ? __alloc_pages_slowpath+0x2870/0x2870 [ 455.640616] ? lockdep_hardirqs_on+0x415/0x5d0 [ 455.649582] ? trace_hardirqs_on+0x67/0x220 [ 455.649602] copy_process.part.0+0x3e0/0x7a30 [ 455.649622] ? mark_held_locks+0x100/0x100 [ 455.649638] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 455.658452] ? __might_fault+0x12b/0x1e0 [ 455.658479] ? __cleanup_sighand+0x70/0x70 [ 455.658496] ? lock_downgrade+0x880/0x880 [ 455.667589] _do_fork+0x257/0xfd0 [ 455.667607] ? fork_idle+0x1d0/0x1d0 [ 455.667631] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.676579] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.676592] ? do_syscall_64+0x26/0x620 [ 455.676607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.676618] ? do_syscall_64+0x26/0x620 [ 455.676638] __x64_sys_clone+0xbf/0x150 [ 455.686230] do_syscall_64+0xfd/0x620 [ 455.695024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.703898] RIP: 0033:0x458c1a [ 455.712168] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 455.719728] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 455.719743] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 455.719750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 455.719758] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 455.719765] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 455.719772] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 455.747804] Task in [ 455.754996] /syz3 [ 455.776540] killed as a result of limit of [ 455.820817] /syz3 [ 455.838693] memory: usage 42880kB, limit 0kB, failcnt 140 [ 455.844285] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 455.851782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 455.858754] Memory cgroup stats for /syz3: cache:368KB rss:15436KB rss_huge:14336KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:15588KB inactive_file:0KB active_file:0KB unevictable:0KB [ 455.887066] Memory cgroup out of memory: Kill process 14262 (syz-executor.3) score 9283000 or sacrifice child [ 455.900131] Killed process 14262 (syz-executor.3) total-vm:72984kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 455.911869] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 455.913524] oom_reaper: reaped process 14262 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 455.936807] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 455.949138] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 455.956978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.966350] Call Trace: [ 455.968968] dump_stack+0x197/0x210 [ 455.972619] dump_header+0x15e/0xa55 [ 455.976358] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 455.981480] ? ___ratelimit+0x60/0x595 [ 455.985388] ? do_raw_spin_unlock+0x178/0x270 [ 455.989996] oom_kill_process.cold+0x10/0x6ef [ 455.994511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.000057] ? task_will_free_mem+0x139/0x6e0 [ 456.004564] out_of_memory+0x362/0x1330 [ 456.008576] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 456.013691] ? oom_killer_disable+0x280/0x280 [ 456.018202] ? find_held_lock+0x35/0x130 [ 456.022297] mem_cgroup_out_of_memory+0x1d2/0x240 [ 456.027150] ? memcg_event_wake+0x230/0x230 [ 456.031490] ? do_raw_spin_unlock+0x178/0x270 [ 456.035993] ? _raw_spin_unlock+0x2d/0x50 [ 456.040150] try_charge+0xec5/0x1490 [ 456.043887] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 456.049098] ? lock_downgrade+0x880/0x880 [ 456.053496] ? kasan_check_read+0x11/0x20 [ 456.057751] memcg_kmem_charge_memcg+0x83/0x170 [ 456.062524] ? memcg_kmem_put_cache+0xb0/0xb0 [ 456.067033] ? __isolate_free_page+0x4c0/0x4c0 [ 456.071653] memcg_kmem_charge+0x136/0x370 [ 456.075901] __alloc_pages_nodemask+0x3c3/0x750 [ 456.080700] ? __alloc_pages_slowpath+0x2870/0x2870 [ 456.085736] ? lockdep_hardirqs_on+0x415/0x5d0 [ 456.090421] ? trace_hardirqs_on+0x67/0x220 [ 456.094769] copy_process.part.0+0x3e0/0x7a30 [ 456.099492] ? mark_held_locks+0x100/0x100 [ 456.103736] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 456.108420] ? __might_fault+0x12b/0x1e0 [ 456.112594] ? __cleanup_sighand+0x70/0x70 [ 456.116929] ? lock_downgrade+0x880/0x880 [ 456.121192] _do_fork+0x257/0xfd0 [ 456.124664] ? fork_idle+0x1d0/0x1d0 [ 456.128391] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.133155] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.137932] ? do_syscall_64+0x26/0x620 [ 456.141918] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.147285] ? do_syscall_64+0x26/0x620 [ 456.151286] __x64_sys_clone+0xbf/0x150 [ 456.155272] do_syscall_64+0xfd/0x620 [ 456.159087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.164304] RIP: 0033:0x458c1a [ 456.167502] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 456.186412] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 456.194388] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 456.201665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 456.208937] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 456.216367] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 456.223643] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 456.246033] Task in /syz2 killed as a result of limit of /syz2 [ 456.256075] memory: usage 27892kB, limit 0kB, failcnt 52 [ 456.273767] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.280769] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.287074] Memory cgroup stats for /syz2: cache:264KB rss:13164KB rss_huge:12288KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:13236KB inactive_file:0KB active_file:0KB unevictable:0KB [ 456.308148] Memory cgroup out of memory: Kill process 17093 (syz-executor.2) score 9535000 or sacrifice child [ 456.318537] Killed process 17093 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:35812kB, shmem-rss:0kB [ 456.344945] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 456.368066] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 456.373513] CPU: 1 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 456.373521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.373526] Call Trace: [ 456.373544] dump_stack+0x197/0x210 [ 456.373565] dump_header+0x15e/0xa55 [ 456.373581] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 456.373598] ? ___ratelimit+0x60/0x595 [ 456.390880] ? do_raw_spin_unlock+0x178/0x270 [ 456.390901] oom_kill_process.cold+0x10/0x6ef [ 456.390920] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.390933] ? task_will_free_mem+0x139/0x6e0 [ 456.390952] out_of_memory+0x362/0x1330 [ 456.390973] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 456.394097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 456.397203] ? oom_killer_disable+0x280/0x280 [ 456.397217] ? find_held_lock+0x35/0x130 [ 456.397240] mem_cgroup_out_of_memory+0x1d2/0x240 [ 456.397253] ? memcg_event_wake+0x230/0x230 [ 456.397270] ? do_raw_spin_unlock+0x178/0x270 [ 456.397290] ? _raw_spin_unlock+0x2d/0x50 [ 456.397307] try_charge+0xec5/0x1490 [ 456.397330] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 456.397347] ? lock_downgrade+0x880/0x880 [ 456.397363] ? kasan_check_read+0x11/0x20 [ 456.397382] memcg_kmem_charge_memcg+0x83/0x170 [ 456.397399] ? memcg_kmem_put_cache+0xb0/0xb0 [ 456.406255] ? __isolate_free_page+0x4c0/0x4c0 [ 456.406283] memcg_kmem_charge+0x136/0x370 [ 456.406301] __alloc_pages_nodemask+0x3c3/0x750 [ 456.414891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.419220] ? __alloc_pages_slowpath+0x2870/0x2870 [ 456.419239] ? lockdep_hardirqs_on+0x415/0x5d0 [ 456.419255] ? trace_hardirqs_on+0x67/0x220 [ 456.419275] copy_process.part.0+0x3e0/0x7a30 [ 456.419291] ? mark_held_locks+0x100/0x100 [ 456.419303] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 456.419323] ? __might_fault+0x12b/0x1e0 [ 456.419342] ? __cleanup_sighand+0x70/0x70 [ 456.419358] ? lock_downgrade+0x880/0x880 [ 456.419384] _do_fork+0x257/0xfd0 [ 456.419402] ? fork_idle+0x1d0/0x1d0 [ 456.419424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.419435] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.419448] ? do_syscall_64+0x26/0x620 [ 456.419463] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.419474] ? do_syscall_64+0x26/0x620 [ 456.419489] __x64_sys_clone+0xbf/0x150 [ 456.419506] do_syscall_64+0xfd/0x620 [ 456.429558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.429570] RIP: 0033:0x458c1a [ 456.429582] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 456.429589] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 456.429602] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 456.429609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 456.429615] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 456.429621] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 456.429628] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 456.430396] Task in [ 456.447013] /syz3 [ 456.455536] killed as a result of limit of [ 456.473750] /syz3 [ 456.499974] memory: usage 40488kB, limit 0kB, failcnt 146 [ 456.521316] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.531447] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.539963] Memory cgroup stats for [ 456.557331] /syz3 [ 456.565411] : [ 456.580152] cache:368KB [ 456.588684] rss:13176KB [ 456.596896] rss_huge:12288KB [ 456.628460] shmem:288KB [ 456.643722] mapped_file:0KB [ 456.666587] dirty:0KB [ 456.690320] writeback:0KB [ 456.709160] swap:0KB [ 456.713558] inactive_anon:8KB [ 456.719367] active_anon:13352KB [ 456.727733] inactive_file:0KB [ 456.733084] active_file:0KB [ 456.739651] unevictable:0KB [ 456.749833] Memory cgroup out of memory: Kill process 14292 (syz-executor.3) score 9283000 or sacrifice child [ 456.760507] Killed process 14292 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 456.773126] oom_reaper: reaped process 14292 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 456.784419] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 456.800354] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 456.805966] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 456.813773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.823136] Call Trace: [ 456.823160] dump_stack+0x197/0x210 [ 456.823179] dump_header+0x15e/0xa55 [ 456.823194] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 456.823209] ? ___ratelimit+0x60/0x595 [ 456.823221] ? do_raw_spin_unlock+0x178/0x270 [ 456.823236] oom_kill_process.cold+0x10/0x6ef [ 456.823254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.823267] ? task_will_free_mem+0x139/0x6e0 [ 456.823287] out_of_memory+0x362/0x1330 [ 456.823306] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 456.823322] ? oom_killer_disable+0x280/0x280 [ 456.829665] ? find_held_lock+0x35/0x130 [ 456.829693] mem_cgroup_out_of_memory+0x1d2/0x240 [ 456.829707] ? memcg_event_wake+0x230/0x230 [ 456.829732] ? do_raw_spin_unlock+0x178/0x270 [ 456.829747] ? _raw_spin_unlock+0x2d/0x50 [ 456.829765] try_charge+0xec5/0x1490 [ 456.829789] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 456.829807] ? lock_downgrade+0x880/0x880 [ 456.829822] ? kasan_check_read+0x11/0x20 [ 456.829842] memcg_kmem_charge_memcg+0x83/0x170 [ 456.852090] ? memcg_kmem_put_cache+0xb0/0xb0 [ 456.862129] ? __isolate_free_page+0x4c0/0x4c0 [ 456.879754] memcg_kmem_charge+0x136/0x370 [ 456.888982] __alloc_pages_nodemask+0x3c3/0x750 [ 456.889000] ? __alloc_pages_slowpath+0x2870/0x2870 [ 456.889021] ? lockdep_hardirqs_on+0x415/0x5d0 [ 456.889035] ? trace_hardirqs_on+0x67/0x220 [ 456.889057] copy_process.part.0+0x3e0/0x7a30 [ 456.889077] ? mark_held_locks+0x100/0x100 [ 456.889090] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 456.889112] ? __might_fault+0x12b/0x1e0 [ 456.889132] ? __cleanup_sighand+0x70/0x70 [ 456.889148] ? lock_downgrade+0x880/0x880 [ 456.906350] _do_fork+0x257/0xfd0 [ 456.914687] ? fork_idle+0x1d0/0x1d0 [ 456.928400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.937365] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.937378] ? do_syscall_64+0x26/0x620 [ 456.937392] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.937404] ? do_syscall_64+0x26/0x620 [ 456.937424] __x64_sys_clone+0xbf/0x150 [ 456.937441] do_syscall_64+0xfd/0x620 [ 456.937458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.937469] RIP: 0033:0x458c1a [ 456.937486] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 456.955874] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 [ 456.965047] ORIG_RAX: 0000000000000038 [ 456.977584] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 456.977593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 456.977600] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 456.977606] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 456.977613] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 456.979186] Task in [ 456.986722] /syz2 [ 457.010761] killed as a result of limit of [ 457.026900] /syz2 [ 457.086655] memory: usage 25556kB, limit 0kB, failcnt 58 [ 457.110523] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.117640] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.123951] Memory cgroup stats for /syz2: cache:264KB rss:11028KB rss_huge:10240KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:11080KB inactive_file:0KB active_file:0KB unevictable:0KB [ 457.145615] Memory cgroup out of memory: Kill process 17164 (syz-executor.2) score 9533000 or sacrifice child [ 457.156114] Killed process 17164 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:35804kB, shmem-rss:0kB [ 457.187171] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 457.202551] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 457.208379] CPU: 1 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 457.216184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.226264] Call Trace: [ 457.228865] dump_stack+0x197/0x210 [ 457.232501] dump_header+0x15e/0xa55 [ 457.236218] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 457.241355] ? ___ratelimit+0x60/0x595 [ 457.245244] ? do_raw_spin_unlock+0x178/0x270 [ 457.249751] oom_kill_process.cold+0x10/0x6ef [ 457.254258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.259805] ? task_will_free_mem+0x139/0x6e0 [ 457.264314] out_of_memory+0x362/0x1330 [ 457.268303] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 457.273422] ? oom_killer_disable+0x280/0x280 [ 457.278709] ? find_held_lock+0x35/0x130 [ 457.282784] mem_cgroup_out_of_memory+0x1d2/0x240 [ 457.287635] ? memcg_event_wake+0x230/0x230 [ 457.291967] ? do_raw_spin_unlock+0x178/0x270 [ 457.296487] ? _raw_spin_unlock+0x2d/0x50 [ 457.300643] try_charge+0xec5/0x1490 [ 457.304371] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 457.309219] ? lock_downgrade+0x880/0x880 [ 457.313383] ? kasan_check_read+0x11/0x20 [ 457.317555] memcg_kmem_charge_memcg+0x83/0x170 [ 457.322237] ? memcg_kmem_put_cache+0xb0/0xb0 [ 457.326832] ? __isolate_free_page+0x4c0/0x4c0 [ 457.331423] memcg_kmem_charge+0x136/0x370 [ 457.335666] __alloc_pages_nodemask+0x3c3/0x750 [ 457.340353] ? __alloc_pages_slowpath+0x2870/0x2870 [ 457.345383] ? lockdep_hardirqs_on+0x415/0x5d0 [ 457.349968] ? trace_hardirqs_on+0x67/0x220 [ 457.354303] copy_process.part.0+0x3e0/0x7a30 [ 457.358811] ? mark_held_locks+0x100/0x100 [ 457.363047] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 457.367727] ? __might_fault+0x12b/0x1e0 [ 457.371800] ? __cleanup_sighand+0x70/0x70 [ 457.376037] ? lock_downgrade+0x880/0x880 [ 457.380201] _do_fork+0x257/0xfd0 [ 457.383663] ? fork_idle+0x1d0/0x1d0 [ 457.387396] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.392155] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.396913] ? do_syscall_64+0x26/0x620 [ 457.400891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.406258] ? do_syscall_64+0x26/0x620 [ 457.410242] __x64_sys_clone+0xbf/0x150 [ 457.414217] do_syscall_64+0xfd/0x620 [ 457.418025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.423231] RIP: 0033:0x458c1a [ 457.426435] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 457.445344] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 457.453064] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 457.460337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 457.467609] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 457.474974] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 457.482264] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 457.490839] Task in /syz3 killed as a result of limit of /syz3 [ 457.497211] memory: usage 38100kB, limit 0kB, failcnt 152 [ 457.502972] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.510258] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.516761] Memory cgroup stats for /syz3: cache:368KB rss:10972KB rss_huge:10240KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:11120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 457.538163] Memory cgroup out of memory: Kill process 14326 (syz-executor.3) score 9283000 or sacrifice child [ 457.549331] Killed process 14326 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 457.582504] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 457.598071] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 457.603703] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 457.611507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.620908] Call Trace: [ 457.623515] dump_stack+0x197/0x210 [ 457.627160] dump_header+0x15e/0xa55 [ 457.630993] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 457.636101] ? ___ratelimit+0x60/0x595 [ 457.639998] ? do_raw_spin_unlock+0x178/0x270 [ 457.644501] oom_kill_process.cold+0x10/0x6ef [ 457.649008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.654556] ? task_will_free_mem+0x139/0x6e0 [ 457.659160] out_of_memory+0x362/0x1330 [ 457.663147] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 457.668255] ? oom_killer_disable+0x280/0x280 [ 457.672751] ? find_held_lock+0x35/0x130 [ 457.676830] mem_cgroup_out_of_memory+0x1d2/0x240 [ 457.681704] ? memcg_event_wake+0x230/0x230 [ 457.686183] ? do_raw_spin_unlock+0x178/0x270 [ 457.690720] ? _raw_spin_unlock+0x2d/0x50 [ 457.694918] try_charge+0xec5/0x1490 [ 457.698650] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 457.703517] ? lock_downgrade+0x880/0x880 [ 457.707673] ? kasan_check_read+0x11/0x20 [ 457.711852] memcg_kmem_charge_memcg+0x83/0x170 [ 457.716550] ? memcg_kmem_put_cache+0xb0/0xb0 [ 457.721073] ? __isolate_free_page+0x4c0/0x4c0 [ 457.725676] memcg_kmem_charge+0x136/0x370 [ 457.732623] __alloc_pages_nodemask+0x3c3/0x750 [ 457.737335] ? __alloc_pages_slowpath+0x2870/0x2870 [ 457.742365] ? lockdep_hardirqs_on+0x415/0x5d0 [ 457.746953] ? trace_hardirqs_on+0x67/0x220 [ 457.751290] copy_process.part.0+0x3e0/0x7a30 [ 457.755802] ? mark_held_locks+0x100/0x100 [ 457.760045] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 457.764726] ? __might_fault+0x12b/0x1e0 [ 457.768891] ? __cleanup_sighand+0x70/0x70 [ 457.773136] ? lock_downgrade+0x880/0x880 [ 457.777321] _do_fork+0x257/0xfd0 [ 457.780792] ? fork_idle+0x1d0/0x1d0 [ 457.784523] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.789302] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.794082] ? do_syscall_64+0x26/0x620 [ 457.798100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.803502] ? do_syscall_64+0x26/0x620 [ 457.807508] __x64_sys_clone+0xbf/0x150 [ 457.811506] do_syscall_64+0xfd/0x620 [ 457.815334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.820541] RIP: 0033:0x458c1a [ 457.823752] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 457.843198] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 457.851084] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 457.858375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 457.865664] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 457.872953] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 457.880328] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 457.887902] Task in /syz2 killed as a result of limit of /syz2 [ 457.902142] memory: usage 23172kB, limit 0kB, failcnt 64 [ 457.908627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 457.913460] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.916051] team0: Port device team_slave_0 added [ 457.927275] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.927283] Memory cgroup stats for /syz2: cache:264KB rss:8852KB rss_huge:8192KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:8900KB inactive_file:0KB active_file:0KB unevictable:0KB [ 457.936017] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 457.961088] Memory cgroup out of memory: Kill process 12550 (syz-executor.2) score 9284000 or sacrifice child [ 457.971290] Killed process 12550 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 457.983168] oom_reaper: reaped process 12550 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 457.991642] team0: Port device team_slave_1 added [ 457.994218] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 458.036514] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 458.041966] CPU: 1 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 458.049779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.059153] Call Trace: [ 458.061763] dump_stack+0x197/0x210 [ 458.065411] dump_header+0x15e/0xa55 [ 458.069849] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 458.074979] ? ___ratelimit+0x60/0x595 [ 458.078965] ? do_raw_spin_unlock+0x178/0x270 [ 458.083483] oom_kill_process.cold+0x10/0x6ef [ 458.087997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.093541] ? task_will_free_mem+0x139/0x6e0 [ 458.098066] out_of_memory+0x362/0x1330 [ 458.102054] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 458.107163] ? oom_killer_disable+0x280/0x280 [ 458.111668] ? find_held_lock+0x35/0x130 [ 458.115745] mem_cgroup_out_of_memory+0x1d2/0x240 [ 458.120590] ? memcg_event_wake+0x230/0x230 [ 458.124924] ? do_raw_spin_unlock+0x178/0x270 [ 458.129426] ? _raw_spin_unlock+0x2d/0x50 [ 458.133723] try_charge+0xec5/0x1490 [ 458.137540] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 458.142395] ? lock_downgrade+0x880/0x880 [ 458.146547] ? kasan_check_read+0x11/0x20 [ 458.150706] memcg_kmem_charge_memcg+0x83/0x170 [ 458.155386] ? memcg_kmem_put_cache+0xb0/0xb0 [ 458.159889] ? __isolate_free_page+0x4c0/0x4c0 [ 458.164564] memcg_kmem_charge+0x136/0x370 [ 458.168805] __alloc_pages_nodemask+0x3c3/0x750 [ 458.173485] ? __alloc_pages_slowpath+0x2870/0x2870 [ 458.178520] ? lockdep_hardirqs_on+0x415/0x5d0 [ 458.183107] ? trace_hardirqs_on+0x67/0x220 [ 458.187444] copy_process.part.0+0x3e0/0x7a30 [ 458.191957] ? mark_held_locks+0x100/0x100 [ 458.196212] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 458.200917] ? __might_fault+0x12b/0x1e0 [ 458.205165] ? __cleanup_sighand+0x70/0x70 [ 458.209409] ? lock_downgrade+0x880/0x880 [ 458.213578] _do_fork+0x257/0xfd0 [ 458.217045] ? fork_idle+0x1d0/0x1d0 [ 458.221031] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.225785] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.230547] ? do_syscall_64+0x26/0x620 [ 458.234528] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.239898] ? do_syscall_64+0x26/0x620 [ 458.243885] __x64_sys_clone+0xbf/0x150 [ 458.247870] do_syscall_64+0xfd/0x620 [ 458.251677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.256870] RIP: 0033:0x458c1a [ 458.260067] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 458.279753] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 458.287471] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 458.295539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 458.302809] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 458.310077] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 458.317348] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 458.326288] Task in /syz3 killed as a result of limit of /syz3 [ 458.345793] memory: usage 35748kB, limit 0kB, failcnt 158 [ 458.351579] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.366485] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.372667] Memory cgroup stats for /syz3: cache:368KB rss:8804KB rss_huge:8192KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:8920KB inactive_file:0KB active_file:0KB unevictable:0KB [ 458.405292] Memory cgroup out of memory: Kill process 14357 (syz-executor.3) score 9283000 or sacrifice child [ 458.426547] Killed process 14357 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 458.472923] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 458.498177] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 458.503612] CPU: 1 PID: 11928 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 458.511414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.520781] Call Trace: [ 458.523376] dump_stack+0x197/0x210 [ 458.527016] dump_header+0x15e/0xa55 [ 458.530737] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 458.535840] ? ___ratelimit+0x60/0x595 [ 458.539729] ? do_raw_spin_unlock+0x178/0x270 [ 458.544300] oom_kill_process.cold+0x10/0x6ef [ 458.548788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.554326] ? task_will_free_mem+0x139/0x6e0 [ 458.558836] out_of_memory+0x362/0x1330 [ 458.562869] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 458.567976] ? oom_killer_disable+0x280/0x280 [ 458.572498] ? find_held_lock+0x35/0x130 [ 458.576576] mem_cgroup_out_of_memory+0x1d2/0x240 [ 458.581450] ? memcg_event_wake+0x230/0x230 [ 458.585767] ? do_raw_spin_unlock+0x178/0x270 [ 458.590435] ? _raw_spin_unlock+0x2d/0x50 [ 458.594582] try_charge+0xec5/0x1490 [ 458.598302] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 458.603136] ? lock_downgrade+0x880/0x880 [ 458.607283] ? kasan_check_read+0x11/0x20 [ 458.611445] memcg_kmem_charge_memcg+0x83/0x170 [ 458.616103] ? memcg_kmem_put_cache+0xb0/0xb0 [ 458.620602] ? __isolate_free_page+0x4c0/0x4c0 [ 458.625173] memcg_kmem_charge+0x136/0x370 [ 458.629399] __alloc_pages_nodemask+0x3c3/0x750 [ 458.634058] ? __alloc_pages_slowpath+0x2870/0x2870 [ 458.639069] ? lockdep_hardirqs_on+0x415/0x5d0 [ 458.643651] ? trace_hardirqs_on+0x67/0x220 [ 458.648007] copy_process.part.0+0x3e0/0x7a30 [ 458.652681] ? mark_held_locks+0x100/0x100 [ 458.656905] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 458.661568] ? __might_fault+0x12b/0x1e0 [ 458.665628] ? __cleanup_sighand+0x70/0x70 [ 458.669918] ? lock_downgrade+0x880/0x880 [ 458.674082] _do_fork+0x257/0xfd0 [ 458.677536] ? fork_idle+0x1d0/0x1d0 [ 458.681262] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.686035] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.690927] ? do_syscall_64+0x26/0x620 [ 458.694898] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.700271] ? do_syscall_64+0x26/0x620 [ 458.704257] __x64_sys_clone+0xbf/0x150 [ 458.708225] do_syscall_64+0xfd/0x620 [ 458.712063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.717249] RIP: 0033:0x458c1a [ 458.720494] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 458.739715] RSP: 002b:00007ffec4947320 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 458.747429] RAX: ffffffffffffffda RBX: 00007ffec4947320 RCX: 0000000000458c1a [ 458.754848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 458.762289] RBP: 00007ffec4947360 R08: 0000000000000001 R09: 0000000000ed1940 [ 458.769556] R10: 0000000000ed1c10 R11: 0000000000000246 R12: 0000000000000001 [ 458.776814] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec49473b0 [ 458.786366] Task in /syz2 killed as a result of limit of /syz2 [ 458.792583] memory: usage 20724kB, limit 0kB, failcnt 70 [ 458.798116] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.798128] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.811110] Memory cgroup stats for /syz2: cache:264KB rss:6672KB rss_huge:6144KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:6720KB inactive_file:0KB active_file:0KB unevictable:0KB [ 458.832004] Memory cgroup out of memory: Kill process 14300 (syz-executor.2) score 9284000 or sacrifice child [ 458.832261] Killed process 14300 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 458.867732] syz-executor.3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 458.882086] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 458.887743] CPU: 1 PID: 11930 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 458.895572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.895577] Call Trace: [ 458.895598] dump_stack+0x197/0x210 [ 458.895617] dump_header+0x15e/0xa55 [ 458.895635] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 458.895651] ? ___ratelimit+0x60/0x595 [ 458.895663] ? do_raw_spin_unlock+0x178/0x270 [ 458.895683] oom_kill_process.cold+0x10/0x6ef [ 458.928454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.928469] ? task_will_free_mem+0x139/0x6e0 [ 458.928488] out_of_memory+0x362/0x1330 [ 458.928509] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 458.928522] ? oom_killer_disable+0x280/0x280 [ 458.928536] ? find_held_lock+0x35/0x130 [ 458.928558] mem_cgroup_out_of_memory+0x1d2/0x240 [ 458.928571] ? memcg_event_wake+0x230/0x230 [ 458.928588] ? do_raw_spin_unlock+0x178/0x270 [ 458.928605] ? _raw_spin_unlock+0x2d/0x50 [ 458.928621] try_charge+0xec5/0x1490 [ 458.928643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 458.928661] ? lock_downgrade+0x880/0x880 [ 458.928682] ? kasan_check_read+0x11/0x20 [ 458.947176] memcg_kmem_charge_memcg+0x83/0x170 [ 458.947193] ? memcg_kmem_put_cache+0xb0/0xb0 [ 458.947211] ? __isolate_free_page+0x4c0/0x4c0 [ 458.947227] memcg_kmem_charge+0x136/0x370 [ 458.947244] __alloc_pages_nodemask+0x3c3/0x750 [ 458.947261] ? __alloc_pages_slowpath+0x2870/0x2870 [ 458.947280] ? lockdep_hardirqs_on+0x415/0x5d0 [ 458.947295] ? trace_hardirqs_on+0x67/0x220 [ 458.947315] copy_process.part.0+0x3e0/0x7a30 [ 458.947334] ? mark_held_locks+0x100/0x100 [ 458.947347] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 458.947368] ? __might_fault+0x12b/0x1e0 [ 458.947388] ? __cleanup_sighand+0x70/0x70 [ 458.956976] ? lock_downgrade+0x880/0x880 [ 458.957002] _do_fork+0x257/0xfd0 [ 458.957020] ? fork_idle+0x1d0/0x1d0 [ 458.957042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.957055] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.957068] ? do_syscall_64+0x26/0x620 [ 458.957084] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.957096] ? do_syscall_64+0x26/0x620 [ 458.957113] __x64_sys_clone+0xbf/0x150 [ 458.957131] do_syscall_64+0xfd/0x620 [ 458.957146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.957160] RIP: 0033:0x458c1a [ 458.970360] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 458.978978] RSP: 002b:00007ffcedcf75f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 458.978992] RAX: ffffffffffffffda RBX: 00007ffcedcf75f0 RCX: 0000000000458c1a [ 458.978998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 458.979005] RBP: 00007ffcedcf7630 R08: 0000000000000001 R09: 0000000000a99940 [ 458.979012] R10: 0000000000a99c10 R11: 0000000000000246 R12: 0000000000000001 [ 458.979019] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcedcf7680 [ 458.990561] Task in [ 458.996681] /syz3 [ 459.005762] killed as a result of limit of /syz3 [ 459.005790] memory: usage 33364kB, limit 0kB, failcnt 164 [ 459.005798] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 459.005806] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 459.005811] Memory cgroup stats for /syz3: cache:196KB rss:6648KB rss_huge:6144KB shmem:288KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB [ 459.038625] active_anon:6700KB [ 459.091878] inactive_file:0KB [ 459.099533] active_file:0KB unevictable:0KB [ 459.106467] Memory cgroup out of memory: Kill process 14386 (syz-executor.3) score 9283000 or sacrifice child [ 459.137509] Killed process 14386 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 459.173459] Memory cgroup out of memory: Kill process 14332 (syz-executor.2) score 9284000 or sacrifice child [ 459.176144] Killed process 14332 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 459.270763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 459.271334] oom_reaper: reaped process 14332 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 459.288640] Memory cgroup out of memory: Kill process 14416 (syz-executor.3) score 9283000 or sacrifice child [ 459.296036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 459.300492] Killed process 14416 (syz-executor.3) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 459.326914] Memory cgroup out of memory: Kill process 14359 (syz-executor.2) score 9284000 or sacrifice child [ 459.338666] oom_reaper: reaped process 14416 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 459.380867] Killed process 14359 (syz-executor.2) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 459.419441] Memory cgroup out of memory: Kill process 14537 (syz-executor.3) score 9283000 or sacrifice child [ 459.432759] Killed process 14537 (syz-executor.3) total-vm:72984kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 459.462360] Memory cgroup out of memory: Kill process 11928 (syz-executor.2) score 9001000 or sacrifice child [ 459.474511] Killed process 11928 (syz-executor.2) total-vm:72456kB, anon-rss:104kB, file-rss:35776kB, shmem-rss:0kB [ 459.485864] Memory cgroup out of memory: Kill process 11930 (syz-executor.3) score 9006000 or sacrifice child [ 459.486280] oom_reaper: reaped process 11928 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 459.497124] Killed process 11930 (syz-executor.3) total-vm:72456kB, anon-rss:128kB, file-rss:35776kB, shmem-rss:0kB [ 459.779617] device hsr_slave_0 entered promiscuous mode [ 459.826875] device hsr_slave_1 entered promiscuous mode [ 460.315903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 460.324045] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 460.642847] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 460.972055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.980878] device bridge_slave_1 left promiscuous mode [ 460.986366] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.017616] device bridge_slave_0 left promiscuous mode [ 461.023141] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.068418] batman_adv: batadv0: Interface deactivated: veth15 [ 461.074626] batman_adv: batadv0: Removing interface: veth15 [ 461.083671] device bridge_slave_1 left promiscuous mode [ 461.089313] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.129776] device bridge_slave_0 left promiscuous mode [ 461.135312] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.330454] device hsr_slave_1 left promiscuous mode [ 469.381781] device hsr_slave_0 left promiscuous mode [ 469.430282] team0 (unregistering): Port device team_slave_1 removed [ 469.443187] team0 (unregistering): Port device team_slave_0 removed [ 469.454859] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 469.493932] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 469.591852] bond0 (unregistering): Released all slaves [ 469.722310] device hsr_slave_1 left promiscuous mode [ 469.790480] device hsr_slave_0 left promiscuous mode [ 469.830850] team0 (unregistering): Port device team_slave_1 removed [ 469.843321] team0 (unregistering): Port device team_slave_0 removed [ 469.856114] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 469.901397] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 469.984923] bond0 (unregistering): Released all slaves [ 470.052684] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 470.064457] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 470.070875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.078399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.091644] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 470.099058] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.109834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 470.117463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.125406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.133186] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.139618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.147576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.159321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 470.166797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.174828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.182797] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.189365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.205431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 470.215706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.226555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 470.238822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 470.245946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.255337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.266089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.274555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.283970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 470.296936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.305005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.319648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 470.329686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.337654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.358913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 470.365967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.374225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.384342] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 470.391721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.409797] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 470.418674] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 470.424993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.432548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.452235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.775312] oom_kill_process: 6 callbacks suppressed [ 470.775349] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 470.810839] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 470.824125] CPU: 1 PID: 19540 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 470.831956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.841315] Call Trace: [ 470.843998] dump_stack+0x197/0x210 [ 470.847635] dump_header+0x15e/0xa55 [ 470.851355] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 470.856461] ? ___ratelimit+0x60/0x595 [ 470.860358] oom_kill_process.cold+0x10/0x6ef [ 470.864869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.870408] ? task_will_free_mem+0x139/0x6e0 [ 470.874938] out_of_memory+0x362/0x1330 [ 470.878946] ? oom_killer_disable+0x280/0x280 [ 470.883467] mem_cgroup_out_of_memory+0x1d2/0x240 [ 470.888324] ? memcg_event_wake+0x230/0x230 [ 470.892661] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 470.897770] ? cgroup_file_notify+0x140/0x1b0 [ 470.902320] memory_max_write+0x169/0x300 [ 470.906481] ? mem_cgroup_write+0x360/0x360 [ 470.910817] cgroup_file_write+0x241/0x790 [ 470.916546] ? mem_cgroup_write+0x360/0x360 [ 470.920874] ? kill_css+0x380/0x380 [ 470.924512] ? kill_css+0x380/0x380 [ 470.928140] kernfs_fop_write+0x2b8/0x480 [ 470.932313] __vfs_write+0x114/0x810 [ 470.936033] ? kernfs_fop_open+0xd80/0xd80 [ 470.940270] ? kernel_read+0x120/0x120 [ 470.944163] ? __lock_is_held+0xb6/0x140 [ 470.948239] ? rcu_read_lock_sched_held+0x110/0x130 [ 470.953450] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 470.958227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.963882] ? __sb_start_write+0x1a9/0x360 [ 470.968218] vfs_write+0x20c/0x560 [ 470.972037] ksys_write+0x14f/0x2d0 [ 470.975699] ? __ia32_sys_read+0xb0/0xb0 [ 470.979769] ? do_syscall_64+0x26/0x620 [ 470.983750] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.989126] ? do_syscall_64+0x26/0x620 [ 470.993110] __x64_sys_write+0x73/0xb0 [ 470.997000] do_syscall_64+0xfd/0x620 [ 471.000816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.006022] RIP: 0033:0x45a649 [ 471.009234] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.028141] RSP: 002b:00007fb3c95adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.035857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 471.043141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 471.050416] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 471.057688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3c95ae6d4 [ 471.064976] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 471.078464] Task in /syz0 killed as a result of limit of /syz0 [ 471.170507] memory: usage 7152kB, limit 0kB, failcnt 67 [ 471.176337] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 471.183747] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 471.191035] Memory cgroup stats for /syz0: cache:116KB rss:2156KB rss_huge:2048KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2176KB inactive_file:0KB active_file:0KB unevictable:0KB [ 471.213678] Memory cgroup out of memory: Kill process 19539 (syz-executor.0) score 9270000 or sacrifice child [ 471.231310] Killed process 19539 (syz-executor.0) total-vm:72592kB, anon-rss:2180kB, file-rss:35844kB, shmem-rss:0kB [ 471.245973] oom_reaper: reaped process 19539 (syz-executor.0), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB 16:09:50 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:50 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:50 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:50 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 471.328394] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 471.344484] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 471.350797] CPU: 1 PID: 19528 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 471.358609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.367981] Call Trace: [ 471.370585] dump_stack+0x197/0x210 [ 471.374504] dump_header+0x15e/0xa55 [ 471.378336] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 471.385283] ? ___ratelimit+0x60/0x595 [ 471.389191] ? do_raw_spin_unlock+0x178/0x270 [ 471.393721] oom_kill_process.cold+0x10/0x6ef [ 471.398252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.403815] ? task_will_free_mem+0x139/0x6e0 [ 471.408322] out_of_memory+0x362/0x1330 [ 471.412549] ? lock_downgrade+0x880/0x880 [ 471.416705] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 471.421822] ? oom_killer_disable+0x280/0x280 [ 471.426321] ? find_held_lock+0x35/0x130 [ 471.430421] mem_cgroup_out_of_memory+0x1d2/0x240 [ 471.435287] ? memcg_event_wake+0x230/0x230 [ 471.439624] ? do_raw_spin_unlock+0x178/0x270 [ 471.444127] ? _raw_spin_unlock+0x2d/0x50 [ 471.448335] try_charge+0xec5/0x1490 [ 471.452145] ? lock_downgrade+0x880/0x880 [ 471.456401] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 471.461272] ? rcu_read_unlock+0x33/0x60 [ 471.465340] ? get_mem_cgroup_from_mm+0x185/0x510 [ 471.470236] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 471.476403] ? check_preemption_disabled+0x48/0x290 [ 471.481447] mem_cgroup_try_charge+0x259/0x6b0 [ 471.486048] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 471.490988] __handle_mm_fault+0x1e50/0x3f80 [ 471.495412] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 471.500366] ? count_memcg_event_mm+0x2b1/0x4d0 [ 471.505043] handle_mm_fault+0x1b5/0x690 [ 471.509124] __do_page_fault+0x62a/0xe90 [ 471.513185] ? ksys_write+0x1f1/0x2d0 [ 471.516998] ? vmalloc_fault+0x740/0x740 [ 471.521062] ? trace_hardirqs_off_caller+0x65/0x220 [ 471.526084] ? trace_hardirqs_on_caller+0x6a/0x220 [ 471.531021] ? page_fault+0x8/0x30 [ 471.534568] do_page_fault+0x71/0x57d [ 471.538379] ? page_fault+0x8/0x30 [ 471.541925] page_fault+0x1e/0x30 [ 471.545380] RIP: 0033:0x403a32 [ 471.548576] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 39 96 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 59 4b 05 00 48 [ 471.567759] RSP: 002b:00007ffc138caed0 EFLAGS: 00010246 16:09:50 executing program 2: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:50 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 471.573234] RAX: 0000000000000000 RBX: 0000000000072eae RCX: 0000000000414100 [ 471.580504] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc138cc000 [ 471.587775] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000170e940 [ 471.595072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc138cc000 [ 471.602384] R13: 00007ffc138cbff0 R14: 0000000000000000 R15: 00007ffc138cc000 [ 471.614650] Task in /syz0 killed as a result of limit of /syz0 [ 471.639827] memory: usage 4748kB, limit 0kB, failcnt 79 [ 471.647124] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 471.654910] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 471.691940] Memory cgroup stats for /syz0: cache:116KB rss:48KB rss_huge:0KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:0KB unevictable:0KB [ 471.730786] Memory cgroup out of memory: Kill process 19528 (syz-executor.0) score 8755000 or sacrifice child [ 471.747814] Killed process 19528 (syz-executor.0) total-vm:72460kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 471.760062] oom_reaper: reaped process 19528 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 471.767790] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 471.784530] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 471.790211] CPU: 0 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 471.798016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.807724] Call Trace: [ 471.810315] dump_stack+0x197/0x210 [ 471.813946] dump_header+0x15e/0xa55 [ 471.817667] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 471.822893] ? ___ratelimit+0x60/0x595 [ 471.826780] ? do_raw_spin_unlock+0x178/0x270 [ 471.831287] oom_kill_process.cold+0x10/0x6ef [ 471.835785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.841310] ? task_will_free_mem+0x139/0x6e0 [ 471.845797] out_of_memory+0x362/0x1330 [ 471.849791] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 471.854890] ? oom_killer_disable+0x280/0x280 [ 471.860240] ? find_held_lock+0x35/0x130 [ 471.864303] mem_cgroup_out_of_memory+0x1d2/0x240 [ 471.869136] ? memcg_event_wake+0x230/0x230 [ 471.873451] ? do_raw_spin_unlock+0x178/0x270 [ 471.877954] ? _raw_spin_unlock+0x2d/0x50 [ 471.882102] try_charge+0xec5/0x1490 [ 471.885831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 471.890684] ? lock_downgrade+0x880/0x880 [ 471.894821] ? kasan_check_read+0x11/0x20 [ 471.898963] memcg_kmem_charge_memcg+0x83/0x170 [ 471.903621] ? memcg_kmem_put_cache+0xb0/0xb0 [ 471.908123] ? __isolate_free_page+0x4c0/0x4c0 [ 471.912697] memcg_kmem_charge+0x136/0x370 [ 471.916926] __alloc_pages_nodemask+0x3c3/0x750 [ 471.921612] ? __alloc_pages_slowpath+0x2870/0x2870 [ 471.926637] ? lockdep_hardirqs_on+0x415/0x5d0 [ 471.931386] ? trace_hardirqs_on+0x67/0x220 [ 471.935709] copy_process.part.0+0x3e0/0x7a30 [ 471.940197] ? mark_held_locks+0x100/0x100 [ 471.944435] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 471.949098] ? __might_fault+0x12b/0x1e0 [ 471.953153] ? __cleanup_sighand+0x70/0x70 [ 471.957396] ? lock_downgrade+0x880/0x880 [ 471.961681] _do_fork+0x257/0xfd0 [ 471.965298] ? fork_idle+0x1d0/0x1d0 [ 471.969045] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 471.973978] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 471.978744] ? do_syscall_64+0x26/0x620 [ 471.982708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.988339] ? do_syscall_64+0x26/0x620 [ 471.992473] __x64_sys_clone+0xbf/0x150 [ 471.996471] do_syscall_64+0xfd/0x620 [ 472.000372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.006069] RIP: 0033:0x458c1a [ 472.009263] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 472.028251] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 472.036034] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 472.043290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 472.050547] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 472.057804] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 472.065062] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 472.073192] Task in /syz4 killed as a result of limit of /syz4 [ 472.079828] memory: usage 47264kB, limit 0kB, failcnt 8 [ 472.085224] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.092102] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.100488] Memory cgroup stats for /syz4: cache:252KB rss:25748KB rss_huge:24576KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:25736KB inactive_file:12KB active_file:0KB unevictable:0KB [ 472.122182] Memory cgroup out of memory: Kill process 12828 (syz-executor.4) score 11586000 or sacrifice child [ 472.133421] Killed process 12828 (syz-executor.4) total-vm:72720kB, anon-rss:10396kB, file-rss:35800kB, shmem-rss:0kB [ 472.162880] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 472.176060] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 472.182075] CPU: 1 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 472.190076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.199449] Call Trace: [ 472.202076] dump_stack+0x197/0x210 [ 472.206169] dump_header+0x15e/0xa55 [ 472.209991] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 472.215107] ? ___ratelimit+0x60/0x595 [ 472.219082] ? do_raw_spin_unlock+0x178/0x270 [ 472.223623] oom_kill_process.cold+0x10/0x6ef [ 472.228157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.233730] ? task_will_free_mem+0x139/0x6e0 [ 472.238261] out_of_memory+0x362/0x1330 [ 472.242266] ? lock_downgrade+0x880/0x880 [ 472.246440] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 472.251580] ? oom_killer_disable+0x280/0x280 [ 472.256099] ? find_held_lock+0x35/0x130 [ 472.260196] mem_cgroup_out_of_memory+0x1d2/0x240 [ 472.265067] ? memcg_event_wake+0x230/0x230 [ 472.269424] ? do_raw_spin_unlock+0x178/0x270 [ 472.273949] ? _raw_spin_unlock+0x2d/0x50 [ 472.278130] try_charge+0xec5/0x1490 [ 472.281886] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 472.286875] ? lock_downgrade+0x880/0x880 [ 472.291279] ? kasan_check_read+0x11/0x20 [ 472.295470] memcg_kmem_charge_memcg+0x83/0x170 [ 472.300171] ? memcg_kmem_put_cache+0xb0/0xb0 [ 472.304878] ? __isolate_free_page+0x4c0/0x4c0 [ 472.309491] memcg_kmem_charge+0x136/0x370 [ 472.313759] __alloc_pages_nodemask+0x3c3/0x750 [ 472.318459] ? __alloc_pages_slowpath+0x2870/0x2870 [ 472.323505] ? lockdep_hardirqs_on+0x415/0x5d0 [ 472.328111] ? trace_hardirqs_on+0x67/0x220 [ 472.332461] copy_process.part.0+0x3e0/0x7a30 [ 472.337164] ? mark_held_locks+0x100/0x100 [ 472.341430] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 472.346137] ? __might_fault+0x12b/0x1e0 [ 472.350578] ? __cleanup_sighand+0x70/0x70 [ 472.354846] ? lock_downgrade+0x880/0x880 [ 472.359123] _do_fork+0x257/0xfd0 16:09:50 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:09:51 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 472.362652] ? fork_idle+0x1d0/0x1d0 [ 472.366516] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.371296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.376080] ? do_syscall_64+0x26/0x620 [ 472.380080] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.385468] ? do_syscall_64+0x26/0x620 [ 472.389472] __x64_sys_clone+0xbf/0x150 [ 472.393476] do_syscall_64+0xfd/0x620 [ 472.397314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.402524] RIP: 0033:0x458c1a [ 472.405745] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 472.424850] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 472.432586] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 472.439878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 472.447167] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 472.454477] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 472.462121] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 472.474993] Task in /syz4 killed as a result of limit of /syz4 [ 472.481509] memory: usage 36716kB, limit 0kB, failcnt 15 [ 472.487322] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.494096] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.500984] Memory cgroup stats for /syz4: cache:252KB rss:15320KB rss_huge:14336KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:15380KB inactive_file:0KB active_file:0KB unevictable:0KB [ 472.522085] Memory cgroup out of memory: Kill process 12605 (syz-executor.4) score 9550000 or sacrifice child [ 472.532307] Killed process 12605 (syz-executor.4) total-vm:72588kB, anon-rss:2196kB, file-rss:35872kB, shmem-rss:0kB [ 472.558436] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 472.571354] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 472.578516] CPU: 1 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 472.586368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.595728] Call Trace: [ 472.598345] dump_stack+0x197/0x210 [ 472.602032] dump_header+0x15e/0xa55 [ 472.605982] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 472.611113] ? ___ratelimit+0x60/0x595 [ 472.615030] ? do_raw_spin_unlock+0x178/0x270 [ 472.619560] oom_kill_process.cold+0x10/0x6ef [ 472.624078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.631637] ? task_will_free_mem+0x139/0x6e0 [ 472.636186] out_of_memory+0x362/0x1330 [ 472.640186] ? lock_downgrade+0x880/0x880 [ 472.644453] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 472.649673] ? oom_killer_disable+0x280/0x280 [ 472.654240] ? find_held_lock+0x35/0x130 [ 472.658370] mem_cgroup_out_of_memory+0x1d2/0x240 [ 472.663243] ? memcg_event_wake+0x230/0x230 [ 472.667601] ? do_raw_spin_unlock+0x178/0x270 [ 472.672126] ? _raw_spin_unlock+0x2d/0x50 [ 472.676306] try_charge+0xec5/0x1490 [ 472.680058] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 472.684934] ? lock_downgrade+0x880/0x880 [ 472.689109] ? kasan_check_read+0x11/0x20 [ 472.693284] memcg_kmem_charge_memcg+0x83/0x170 [ 472.697978] ? memcg_kmem_put_cache+0xb0/0xb0 [ 472.702598] ? __isolate_free_page+0x4c0/0x4c0 [ 472.707213] memcg_kmem_charge+0x136/0x370 [ 472.712440] __alloc_pages_nodemask+0x3c3/0x750 [ 472.717144] ? __alloc_pages_slowpath+0x2870/0x2870 [ 472.722188] ? lockdep_hardirqs_on+0x415/0x5d0 [ 472.726803] ? trace_hardirqs_on+0x67/0x220 [ 472.731158] copy_process.part.0+0x3e0/0x7a30 [ 472.735709] ? mark_held_locks+0x100/0x100 [ 472.739956] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 472.744682] ? __might_fault+0x12b/0x1e0 [ 472.748776] ? __cleanup_sighand+0x70/0x70 [ 472.753050] ? lock_downgrade+0x880/0x880 [ 472.757239] _do_fork+0x257/0xfd0 [ 472.760716] ? fork_idle+0x1d0/0x1d0 [ 472.764453] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.769220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.773999] ? do_syscall_64+0x26/0x620 [ 472.777985] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.783370] ? do_syscall_64+0x26/0x620 [ 472.787371] __x64_sys_clone+0xbf/0x150 [ 472.791368] do_syscall_64+0xfd/0x620 [ 472.795470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.800673] RIP: 0033:0x458c1a [ 472.803884] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 472.822808] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 472.830542] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 472.837832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 472.845211] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 472.852869] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 472.860621] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 472.869310] Task in /syz4 killed as a result of limit of /syz4 [ 472.875495] memory: usage 34300kB, limit 0kB, failcnt 21 [ 472.881730] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.888949] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 472.895118] Memory cgroup stats for /syz4: cache:252KB rss:13156KB rss_huge:12288KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:13220KB inactive_file:0KB active_file:0KB unevictable:0KB [ 472.996515] Memory cgroup out of memory: Kill process 12582 (syz-executor.4) score 9548000 or sacrifice child [ 473.026605] Killed process 12582 (syz-executor.4) total-vm:72588kB, anon-rss:2196kB, file-rss:35864kB, shmem-rss:0kB [ 473.106932] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 473.146321] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 473.151946] CPU: 1 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 473.159770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.169668] Call Trace: [ 473.172295] dump_stack+0x197/0x210 [ 473.176058] dump_header+0x15e/0xa55 [ 473.180151] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 473.185283] ? ___ratelimit+0x60/0x595 [ 473.189382] ? do_raw_spin_unlock+0x178/0x270 [ 473.193913] oom_kill_process.cold+0x10/0x6ef [ 473.195305] IPVS: ftp: loaded support on port[0] = 21 [ 473.198448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.198463] ? task_will_free_mem+0x139/0x6e0 [ 473.198482] out_of_memory+0x362/0x1330 [ 473.198498] ? lock_downgrade+0x880/0x880 [ 473.198515] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 473.198527] ? oom_killer_disable+0x280/0x280 [ 473.198538] ? find_held_lock+0x35/0x130 [ 473.198560] mem_cgroup_out_of_memory+0x1d2/0x240 [ 473.198574] ? memcg_event_wake+0x230/0x230 [ 473.198591] ? do_raw_spin_unlock+0x178/0x270 [ 473.198608] ? _raw_spin_unlock+0x2d/0x50 [ 473.198623] try_charge+0xec5/0x1490 [ 473.198654] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 473.227165] ? lock_downgrade+0x880/0x880 [ 473.227183] ? kasan_check_read+0x11/0x20 [ 473.227204] memcg_kmem_charge_memcg+0x83/0x170 [ 473.227222] ? memcg_kmem_put_cache+0xb0/0xb0 [ 473.227241] ? __isolate_free_page+0x4c0/0x4c0 [ 473.227260] memcg_kmem_charge+0x136/0x370 [ 473.227279] __alloc_pages_nodemask+0x3c3/0x750 [ 473.227296] ? __alloc_pages_slowpath+0x2870/0x2870 [ 473.227317] ? lockdep_hardirqs_on+0x415/0x5d0 [ 473.235055] IPVS: ftp: loaded support on port[0] = 21 [ 473.235874] ? trace_hardirqs_on+0x67/0x220 [ 473.248633] copy_process.part.0+0x3e0/0x7a30 [ 473.248658] ? mark_held_locks+0x100/0x100 [ 473.248671] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 473.248693] ? __might_fault+0x12b/0x1e0 [ 473.257346] ? __cleanup_sighand+0x70/0x70 [ 473.257365] ? lock_downgrade+0x880/0x880 [ 473.257390] _do_fork+0x257/0xfd0 [ 473.257408] ? fork_idle+0x1d0/0x1d0 [ 473.265983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.265997] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.266009] ? do_syscall_64+0x26/0x620 [ 473.266024] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.266035] ? do_syscall_64+0x26/0x620 [ 473.266056] __x64_sys_clone+0xbf/0x150 [ 473.266073] do_syscall_64+0xfd/0x620 [ 473.266091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.266101] RIP: 0033:0x458c1a [ 473.266114] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 473.266125] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 [ 473.279090] ORIG_RAX: 0000000000000038 [ 473.279100] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 473.279108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 473.279116] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 473.279124] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 473.279132] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 473.279755] IPVS: ftp: loaded support on port[0] = 21 [ 473.318948] Task in [ 473.369448] /syz4 [ 473.399792] killed as a result of limit of [ 473.426494] /syz4 [ 473.461406] memory: usage 31956kB, limit 0kB, failcnt 27 [ 473.476295] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.485960] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.502412] IPVS: ftp: loaded support on port[0] = 21 [ 473.522531] Memory cgroup stats for /syz4: cache:252KB rss:10984KB rss_huge:10240KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:11048KB inactive_file:0KB active_file:0KB unevictable:0KB [ 473.586563] Memory cgroup out of memory: Kill process 12881 (syz-executor.4) score 9540000 or sacrifice child [ 473.616892] Killed process 12881 (syz-executor.4) total-vm:72588kB, anon-rss:2196kB, file-rss:35832kB, shmem-rss:0kB [ 473.636808] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 473.676551] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 473.682010] CPU: 1 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 473.682018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.682022] Call Trace: [ 473.682040] dump_stack+0x197/0x210 [ 473.682061] dump_header+0x15e/0xa55 [ 473.682078] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 473.682095] ? ___ratelimit+0x60/0x595 [ 473.699243] ? do_raw_spin_unlock+0x178/0x270 [ 473.699262] oom_kill_process.cold+0x10/0x6ef [ 473.699280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.699291] ? task_will_free_mem+0x139/0x6e0 [ 473.699309] out_of_memory+0x362/0x1330 [ 473.699324] ? lock_downgrade+0x880/0x880 [ 473.699339] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 473.699352] ? oom_killer_disable+0x280/0x280 [ 473.699364] ? find_held_lock+0x35/0x130 [ 473.699385] mem_cgroup_out_of_memory+0x1d2/0x240 [ 473.699398] ? memcg_event_wake+0x230/0x230 [ 473.699414] ? do_raw_spin_unlock+0x178/0x270 [ 473.699429] ? _raw_spin_unlock+0x2d/0x50 [ 473.699446] try_charge+0xec5/0x1490 [ 473.699466] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 473.699483] ? lock_downgrade+0x880/0x880 [ 473.699496] ? kasan_check_read+0x11/0x20 [ 473.699514] memcg_kmem_charge_memcg+0x83/0x170 [ 473.699528] ? memcg_kmem_put_cache+0xb0/0xb0 [ 473.699544] ? __isolate_free_page+0x4c0/0x4c0 [ 473.699559] memcg_kmem_charge+0x136/0x370 [ 473.699574] __alloc_pages_nodemask+0x3c3/0x750 [ 473.699591] ? __alloc_pages_slowpath+0x2870/0x2870 [ 473.699607] ? lockdep_hardirqs_on+0x415/0x5d0 [ 473.699620] ? trace_hardirqs_on+0x67/0x220 [ 473.699642] copy_process.part.0+0x3e0/0x7a30 [ 473.699661] ? mark_held_locks+0x100/0x100 [ 473.699673] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 473.699695] ? __might_fault+0x12b/0x1e0 [ 473.699718] ? __cleanup_sighand+0x70/0x70 [ 473.699733] ? lock_downgrade+0x880/0x880 [ 473.699759] _do_fork+0x257/0xfd0 [ 473.699777] ? fork_idle+0x1d0/0x1d0 [ 473.699801] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.699815] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.699828] ? do_syscall_64+0x26/0x620 [ 473.699841] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.699853] ? do_syscall_64+0x26/0x620 [ 473.699867] __x64_sys_clone+0xbf/0x150 [ 473.699881] do_syscall_64+0xfd/0x620 [ 473.699897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.699908] RIP: 0033:0x458c1a [ 473.699923] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 473.699931] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 473.699946] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 473.699954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 473.699962] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 473.699969] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 473.699978] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 473.771026] Task in [ 473.811283] /syz4 [ 473.827675] killed as a result of limit of [ 473.833521] /syz4 [ 473.863731] memory: usage 29584kB, limit 0kB, failcnt 51 [ 473.899941] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.936322] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.993567] Memory cgroup stats for [ 474.036888] /syz4: cache:252KB rss:8804KB rss_huge:8192KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:8872KB inactive_file:0KB active_file:0KB unevictable:0KB [ 474.069832] IPVS: ftp: loaded support on port[0] = 21 [ 474.104011] Memory cgroup out of memory: Kill process 19166 (syz-executor.4) score 9533000 or sacrifice child [ 474.149707] Killed process 19166 (syz-executor.4) total-vm:72720kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB [ 474.198133] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 474.240502] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 474.245940] CPU: 1 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 474.245948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.245953] Call Trace: [ 474.245973] dump_stack+0x197/0x210 [ 474.245996] dump_header+0x15e/0xa55 [ 474.273062] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 474.273081] ? ___ratelimit+0x60/0x595 [ 474.273092] ? do_raw_spin_unlock+0x178/0x270 [ 474.273111] oom_kill_process.cold+0x10/0x6ef [ 474.291101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.296669] ? task_will_free_mem+0x139/0x6e0 [ 474.296689] out_of_memory+0x362/0x1330 [ 474.296707] ? lock_downgrade+0x880/0x880 [ 474.296724] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 474.296737] ? oom_killer_disable+0x280/0x280 [ 474.296750] ? find_held_lock+0x35/0x130 [ 474.296772] mem_cgroup_out_of_memory+0x1d2/0x240 [ 474.296786] ? memcg_event_wake+0x230/0x230 [ 474.296804] ? do_raw_spin_unlock+0x178/0x270 [ 474.296821] ? _raw_spin_unlock+0x2d/0x50 [ 474.296839] try_charge+0xec5/0x1490 [ 474.309451] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 474.309473] ? lock_downgrade+0x880/0x880 [ 474.309490] ? kasan_check_read+0x11/0x20 [ 474.309510] memcg_kmem_charge_memcg+0x83/0x170 [ 474.309527] ? memcg_kmem_put_cache+0xb0/0xb0 [ 474.328512] ? __isolate_free_page+0x4c0/0x4c0 [ 474.328532] memcg_kmem_charge+0x136/0x370 [ 474.328550] __alloc_pages_nodemask+0x3c3/0x750 [ 474.328568] ? __alloc_pages_slowpath+0x2870/0x2870 [ 474.328586] ? lockdep_hardirqs_on+0x415/0x5d0 [ 474.328600] ? trace_hardirqs_on+0x67/0x220 [ 474.328620] copy_process.part.0+0x3e0/0x7a30 [ 474.328639] ? mark_held_locks+0x100/0x100 [ 474.328651] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 474.328673] ? __might_fault+0x12b/0x1e0 [ 474.328695] ? __cleanup_sighand+0x70/0x70 [ 474.328710] ? lock_downgrade+0x880/0x880 [ 474.328735] _do_fork+0x257/0xfd0 [ 474.328760] ? fork_idle+0x1d0/0x1d0 [ 474.337765] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 474.337779] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 474.337791] ? do_syscall_64+0x26/0x620 [ 474.337806] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.337817] ? do_syscall_64+0x26/0x620 [ 474.337834] __x64_sys_clone+0xbf/0x150 [ 474.337849] do_syscall_64+0xfd/0x620 [ 474.337866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.337876] RIP: 0033:0x458c1a [ 474.337889] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 474.337896] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 474.337909] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 474.337916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 474.337923] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 474.337929] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 474.337935] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 474.421262] Task in [ 474.430964] /syz4 [ 474.440168] killed as a result of limit of [ 474.453774] /syz4 [ 474.489565] memory: usage 27244kB, limit 0kB, failcnt 57 [ 474.512616] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 474.536821] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 474.550648] Memory cgroup stats for /syz4: cache:252KB rss:6632KB rss_huge:6144KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:6696KB inactive_file:0KB active_file:0KB unevictable:0KB [ 474.586591] Memory cgroup out of memory: Kill process 14317 (syz-executor.4) score 9284000 or sacrifice child [ 474.597000] Killed process 14317 (syz-executor.4) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 474.638105] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 474.665516] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 474.681586] CPU: 0 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 474.689456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.699050] Call Trace: [ 474.701644] dump_stack+0x197/0x210 [ 474.705281] dump_header+0x15e/0xa55 [ 474.709011] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 474.709026] ? ___ratelimit+0x60/0x595 [ 474.709038] ? do_raw_spin_unlock+0x178/0x270 [ 474.709054] oom_kill_process.cold+0x10/0x6ef [ 474.709070] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.709086] ? task_will_free_mem+0x139/0x6e0 [ 474.727055] out_of_memory+0x362/0x1330 [ 474.737058] ? lock_downgrade+0x880/0x880 [ 474.737075] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 474.737090] ? oom_killer_disable+0x280/0x280 [ 474.754769] ? find_held_lock+0x35/0x130 [ 474.758851] mem_cgroup_out_of_memory+0x1d2/0x240 [ 474.758865] ? memcg_event_wake+0x230/0x230 [ 474.768013] ? do_raw_spin_unlock+0x178/0x270 [ 474.768030] ? _raw_spin_unlock+0x2d/0x50 [ 474.768047] try_charge+0xec5/0x1490 [ 474.780388] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 474.785240] ? lock_downgrade+0x880/0x880 [ 474.789389] ? kasan_check_read+0x11/0x20 [ 474.793634] memcg_kmem_charge_memcg+0x83/0x170 [ 474.798313] ? memcg_kmem_put_cache+0xb0/0xb0 [ 474.798332] ? __isolate_free_page+0x4c0/0x4c0 [ 474.798349] memcg_kmem_charge+0x136/0x370 [ 474.807411] __alloc_pages_nodemask+0x3c3/0x750 [ 474.807429] ? __alloc_pages_slowpath+0x2870/0x2870 [ 474.807448] ? lockdep_hardirqs_on+0x415/0x5d0 [ 474.816359] ? trace_hardirqs_on+0x67/0x220 [ 474.830421] copy_process.part.0+0x3e0/0x7a30 [ 474.834904] ? mark_held_locks+0x100/0x100 [ 474.839142] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 474.843827] ? __might_fault+0x12b/0x1e0 [ 474.847893] ? __cleanup_sighand+0x70/0x70 [ 474.847911] ? lock_downgrade+0x880/0x880 [ 474.847936] _do_fork+0x257/0xfd0 [ 474.847953] ? fork_idle+0x1d0/0x1d0 [ 474.856336] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 474.863469] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 474.872945] ? do_syscall_64+0x26/0x620 [ 474.876932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.876945] ? do_syscall_64+0x26/0x620 [ 474.876965] __x64_sys_clone+0xbf/0x150 [ 474.876980] do_syscall_64+0xfd/0x620 [ 474.886321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.894149] RIP: 0033:0x458c1a [ 474.902616] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 474.921688] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 474.921702] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 474.921709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 474.921716] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 474.921723] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 474.921730] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 474.928078] Task in [ 474.953059] /syz4 [ 474.986747] killed as a result of limit of /syz4 [ 475.002152] memory: usage 24900kB, limit 0kB, failcnt 63 [ 475.005360] chnl_net:caif_netlink_parms(): no params data found [ 475.015962] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 475.015973] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 475.044941] Memory cgroup stats for /syz4: cache:252KB rss:4460KB rss_huge:4096KB [ 475.056839] shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:4508KB inactive_file:0KB active_file:0KB unevictable:0KB [ 475.075990] Memory cgroup out of memory: Kill process 14348 (syz-executor.4) score 9284000 or sacrifice child [ 475.086819] Killed process 14348 (syz-executor.4) total-vm:72588kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 475.115213] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 475.137085] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 475.142507] CPU: 1 PID: 12029 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 475.142515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.142519] Call Trace: [ 475.142539] dump_stack+0x197/0x210 [ 475.142557] dump_header+0x15e/0xa55 [ 475.142576] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 475.159742] ? ___ratelimit+0x60/0x595 [ 475.159756] ? do_raw_spin_unlock+0x178/0x270 [ 475.159774] oom_kill_process.cold+0x10/0x6ef [ 475.159791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.159802] ? task_will_free_mem+0x139/0x6e0 [ 475.159819] out_of_memory+0x362/0x1330 [ 475.159836] ? lock_downgrade+0x880/0x880 [ 475.159853] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 475.159865] ? oom_killer_disable+0x280/0x280 [ 475.159876] ? find_held_lock+0x35/0x130 [ 475.159898] mem_cgroup_out_of_memory+0x1d2/0x240 [ 475.159911] ? memcg_event_wake+0x230/0x230 [ 475.159927] ? do_raw_spin_unlock+0x178/0x270 [ 475.166139] ? _raw_spin_unlock+0x2d/0x50 [ 475.166161] try_charge+0xec5/0x1490 [ 475.166183] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 475.166202] ? lock_downgrade+0x880/0x880 [ 475.175101] ? kasan_check_read+0x11/0x20 [ 475.175125] memcg_kmem_charge_memcg+0x83/0x170 [ 475.175141] ? memcg_kmem_put_cache+0xb0/0xb0 [ 475.175161] ? __isolate_free_page+0x4c0/0x4c0 [ 475.175178] memcg_kmem_charge+0x136/0x370 [ 475.175195] __alloc_pages_nodemask+0x3c3/0x750 [ 475.183574] ? __alloc_pages_slowpath+0x2870/0x2870 [ 475.183595] ? lockdep_hardirqs_on+0x415/0x5d0 [ 475.183612] ? trace_hardirqs_on+0x67/0x220 [ 475.183632] copy_process.part.0+0x3e0/0x7a30 [ 475.193660] ? mark_held_locks+0x100/0x100 [ 475.193675] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 475.193695] ? __might_fault+0x12b/0x1e0 [ 475.193717] ? __cleanup_sighand+0x70/0x70 [ 475.193734] ? lock_downgrade+0x880/0x880 [ 475.193759] _do_fork+0x257/0xfd0 [ 475.193776] ? fork_idle+0x1d0/0x1d0 [ 475.202352] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 475.202368] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 475.202381] ? do_syscall_64+0x26/0x620 [ 475.202400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.211839] ? do_syscall_64+0x26/0x620 [ 475.211859] __x64_sys_clone+0xbf/0x150 [ 475.211876] do_syscall_64+0xfd/0x620 [ 475.211894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.211908] RIP: 0033:0x458c1a [ 475.220759] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 475.220767] RSP: 002b:00007ffd0fd4bb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 475.220782] RAX: ffffffffffffffda RBX: 00007ffd0fd4bb10 RCX: 0000000000458c1a [ 475.220790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 475.220798] RBP: 00007ffd0fd4bb50 R08: 0000000000000001 R09: 0000000001102940 [ 475.220806] R10: 0000000001102c10 R11: 0000000000000246 R12: 0000000000000001 [ 475.220812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0fd4bba0 [ 475.316458] Task in [ 475.346472] /syz4 [ 475.376454] killed as a result of limit of [ 475.426631] /syz4 [ 475.440150] memory: usage 22560kB, limit 0kB, failcnt 69 [ 475.440163] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 475.452657] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 475.459350] Memory cgroup stats for /syz4: cache:252KB rss:2296KB rss_huge:2048KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2324KB inactive_file:0KB active_file:0KB unevictable:0KB [ 475.480242] Memory cgroup out of memory: Kill process 14398 (syz-executor.4) score 9281000 or sacrifice child [ 475.480298] Killed process 14398 (syz-executor.4) total-vm:72852kB, anon-rss:2184kB, file-rss:34816kB, shmem-rss:0kB [ 475.512979] Memory cgroup out of memory: Kill process 12029 (syz-executor.4) score 9003000 or sacrifice child [ 475.533825] Killed process 12029 (syz-executor.4) total-vm:72456kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB [ 475.556193] oom_reaper: reaped process 12029 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 475.611164] chnl_net:caif_netlink_parms(): no params data found [ 475.654199] chnl_net:caif_netlink_parms(): no params data found 16:09:54 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 476.077098] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.085144] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.093904] device bridge_slave_0 entered promiscuous mode 16:09:54 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 476.136962] chnl_net:caif_netlink_parms(): no params data found [ 476.149194] chnl_net:caif_netlink_parms(): no params data found [ 476.168895] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.175296] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.187721] device bridge_slave_1 entered promiscuous mode [ 476.207424] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.213825] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.230620] device bridge_slave_0 entered promiscuous mode [ 476.243158] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.256814] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.264376] device bridge_slave_0 entered promiscuous mode [ 476.285573] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.293346] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.301334] device bridge_slave_1 entered promiscuous mode [ 476.312800] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.319973] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.327779] device bridge_slave_1 entered promiscuous mode [ 476.383217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 476.426048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 476.435794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 476.445770] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 476.474519] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 476.491798] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.499127] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.506915] device bridge_slave_0 entered promiscuous mode [ 476.524026] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 476.534055] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.541064] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.548823] device bridge_slave_0 entered promiscuous mode [ 476.570096] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.579511] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.587373] device bridge_slave_1 entered promiscuous mode [ 476.594444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 476.602641] team0: Port device team_slave_0 added [ 476.620939] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.629190] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.637099] device bridge_slave_1 entered promiscuous mode [ 476.654794] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 476.668059] team0: Port device team_slave_0 added [ 476.679786] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 476.689417] team0: Port device team_slave_1 added [ 476.714897] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 476.723818] team0: Port device team_slave_0 added [ 476.729450] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 476.738290] team0: Port device team_slave_1 added [ 476.743726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 476.752931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 476.772381] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 476.780448] team0: Port device team_slave_1 added [ 476.785874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 476.794427] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 476.803370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 476.813405] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 476.821830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 476.830286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 476.838986] device bridge_slave_1 left promiscuous mode [ 476.844561] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.897499] device bridge_slave_0 left promiscuous mode [ 476.903487] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.040753] device hsr_slave_1 left promiscuous mode [ 477.082735] device hsr_slave_0 left promiscuous mode [ 477.140201] team0 (unregistering): Port device team_slave_1 removed [ 477.153173] team0 (unregistering): Port device team_slave_0 removed [ 477.165719] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 477.200985] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 477.295860] bond0 (unregistering): Released all slaves [ 477.374637] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 477.388292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 477.458994] device hsr_slave_0 entered promiscuous mode [ 477.487134] device hsr_slave_1 entered promiscuous mode [ 477.531606] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 477.555795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 477.564866] team0: Port device team_slave_0 added [ 477.609949] device hsr_slave_0 entered promiscuous mode [ 477.647178] device hsr_slave_1 entered promiscuous mode [ 477.692262] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 477.710703] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 477.731108] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 477.739676] team0: Port device team_slave_1 added [ 477.745702] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 477.753088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 477.761632] team0: Port device team_slave_0 added [ 477.800519] device hsr_slave_0 entered promiscuous mode [ 477.837107] device hsr_slave_1 entered promiscuous mode [ 477.877875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 477.885845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 477.898293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 477.905998] team0: Port device team_slave_1 added [ 477.915080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 477.925747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 477.937463] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 477.949826] IPVS: ftp: loaded support on port[0] = 21 [ 477.960776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 478.049771] device hsr_slave_0 entered promiscuous mode [ 478.087100] device hsr_slave_1 entered promiscuous mode [ 478.188932] device hsr_slave_0 entered promiscuous mode [ 478.227050] device hsr_slave_1 entered promiscuous mode [ 478.279449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 478.287680] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 478.300341] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 478.308260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 478.336943] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 478.346164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 478.428224] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 478.443213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 478.489909] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 478.640663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.681802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.708083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.719398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 478.769566] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 478.790170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 478.801042] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 478.820868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.839123] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 478.849066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.856893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.877154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.897040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.907426] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 478.938403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.948141] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 478.954268] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.978002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 479.002838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 479.011923] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 479.031277] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.038120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.057009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.064281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.085110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.106653] chnl_net:caif_netlink_parms(): no params data found [ 479.117120] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 479.123274] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.132724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 479.142657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 479.153609] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 479.160584] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.177145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 479.184368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.193411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.204190] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.210719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.218884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.227099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.234936] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.241383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.269211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 479.277999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 479.287456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 479.305784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 479.320617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 479.332594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.347737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.355128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.377829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.385709] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.392167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.399524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.407441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.417132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.425318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.433486] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.440017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.447917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.456018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.464232] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.470684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.497009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.517056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.524833] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.531286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.557299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.564724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.613338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 479.628431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 479.651320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 479.664477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.677466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.697299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.705099] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.711639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.718729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.736356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 479.748566] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 479.754801] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.779381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 479.788101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.800880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.827367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.835237] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.842218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.850926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 479.858616] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.865009] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.873329] device bridge_slave_0 entered promiscuous mode [ 479.883690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 479.895709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 479.904008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.913010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.921748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.933757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 479.944259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 479.952158] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.959250] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.967494] device bridge_slave_1 entered promiscuous mode [ 479.978288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 479.986758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 479.998514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 480.006772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.014921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.026180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.037424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.045285] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.051982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.059246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.067550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.075501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.097634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.109010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.119551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 480.145754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 480.157887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.167439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 480.177834] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.187480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.207134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.217674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.237395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.245327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.254134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.262153] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.269035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.276368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.284833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.293080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.301475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.309776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.318158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.329161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 480.345703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 480.360468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 480.371055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.382482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.397582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.407221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.427621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.447095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.457178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.474867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.482568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.490990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.501479] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 480.510769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.522191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 480.532961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 480.545228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 480.562698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.571429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.580016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.591618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.599579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.608049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.615955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.625922] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 480.638518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 480.646083] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 480.681917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.704754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 480.718698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 480.739632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.749153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.757255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.765257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.773496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.782300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.800206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 480.821716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.834791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 480.848035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 480.862863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.871403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.879616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.888351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.897143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.917594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.937163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.947670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.955584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.966339] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 480.973392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.982188] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 480.990348] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 480.997692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.009430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 481.019626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 481.029981] team0: Port device team_slave_0 added [ 481.037139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 481.045810] team0: Port device team_slave_1 added [ 481.052793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 481.073275] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 481.081866] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 481.089621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.099609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.108057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.116913] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 481.123025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.131942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 481.140742] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.149458] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.165089] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 481.175914] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.192684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.200776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.208727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.215549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.223456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.230557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.243585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.261939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.273420] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 481.328081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.360868] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 481.380821] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.430310] device hsr_slave_0 entered promiscuous mode [ 481.447485] device hsr_slave_1 entered promiscuous mode [ 481.508051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 481.515796] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 481.545070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.545849] oom_kill_process: 1 callbacks suppressed [ 481.545882] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 481.554491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.559176] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 481.583073] CPU: 0 PID: 19565 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 481.590899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.594922] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.600268] Call Trace: [ 481.600291] dump_stack+0x197/0x210 [ 481.600310] dump_header+0x15e/0xa55 [ 481.600327] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 481.600343] ? ___ratelimit+0x60/0x595 [ 481.600361] oom_kill_process.cold+0x10/0x6ef [ 481.600380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.600393] ? task_will_free_mem+0x139/0x6e0 [ 481.600412] out_of_memory+0x362/0x1330 [ 481.600434] ? oom_killer_disable+0x280/0x280 [ 481.600458] mem_cgroup_out_of_memory+0x1d2/0x240 [ 481.600472] ? memcg_event_wake+0x230/0x230 [ 481.600490] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 481.600502] ? cgroup_file_notify+0x140/0x1b0 [ 481.600518] memory_max_write+0x169/0x300 [ 481.600537] ? mem_cgroup_write+0x360/0x360 [ 481.600553] ? lock_acquire+0x16f/0x3f0 [ 481.600567] ? kernfs_fop_write+0x227/0x480 [ 481.600590] cgroup_file_write+0x241/0x790 [ 481.600606] ? mem_cgroup_write+0x360/0x360 [ 481.600620] ? kill_css+0x380/0x380 [ 481.600641] ? kill_css+0x380/0x380 [ 481.600653] kernfs_fop_write+0x2b8/0x480 [ 481.600671] __vfs_write+0x114/0x810 [ 481.600684] ? kernfs_fop_open+0xd80/0xd80 [ 481.600697] ? kernel_read+0x120/0x120 [ 481.600716] ? __lock_is_held+0xb6/0x140 [ 481.631180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.635862] ? rcu_read_lock_sched_held+0x110/0x130 [ 481.635880] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 481.649588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.654113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.654129] ? __sb_start_write+0x1a9/0x360 [ 481.654145] vfs_write+0x20c/0x560 [ 481.678949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.680696] ksys_write+0x14f/0x2d0 [ 481.689236] ? __ia32_sys_read+0xb0/0xb0 [ 481.689252] ? do_syscall_64+0x26/0x620 [ 481.689266] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.689278] ? do_syscall_64+0x26/0x620 [ 481.689294] __x64_sys_write+0x73/0xb0 [ 481.689310] do_syscall_64+0xfd/0x620 [ 481.689328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.689338] RIP: 0033:0x45a649 [ 481.689352] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.689360] RSP: 002b:00007f86b8dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.689373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 481.689380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 481.689388] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 481.689397] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86b8dcb6d4 [ 481.689406] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 481.732730] Task in [ 481.770078] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 481.834137] /syz3 [ 481.889720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.012091] killed as a result of limit of /syz3 [ 482.044922] memory: usage 27292kB, limit 0kB, failcnt 185 [ 482.068039] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 482.104304] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 482.139287] Memory cgroup stats for /syz3: cache:24KB rss:2168KB rss_huge:2048KB shmem:116KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:4KB active_file:0KB unevictable:0KB [ 482.142285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.242338] Memory cgroup out of memory: Kill process 19564 (syz-executor.3) score 9538000 or sacrifice child [ 482.262139] Killed process 19564 (syz-executor.3) total-vm:72592kB, anon-rss:2180kB, file-rss:35844kB, shmem-rss:0kB [ 482.275865] oom_reaper: reaped process 19564 (syz-executor.3), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 482.287570] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 482.302610] syz-executor.1 cpuset=syz1 [ 482.308442] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 482.313810] mems_allowed=0-1 [ 482.349294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 482.357047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.371185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.379527] CPU: 0 PID: 19588 Comm: syz-executor.1 Not tainted 4.19.86-syzkaller #0 [ 482.383387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 482.387380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.387386] Call Trace: [ 482.387407] dump_stack+0x197/0x210 [ 482.387426] dump_header+0x15e/0xa55 [ 482.387443] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 482.387458] ? ___ratelimit+0x60/0x595 [ 482.387472] ? do_raw_spin_unlock+0x178/0x270 [ 482.387487] oom_kill_process.cold+0x10/0x6ef [ 482.387505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.387519] ? task_will_free_mem+0x139/0x6e0 [ 482.387547] out_of_memory+0x362/0x1330 [ 482.387570] ? oom_killer_disable+0x280/0x280 [ 482.387597] mem_cgroup_out_of_memory+0x1d2/0x240 [ 482.387613] ? memcg_event_wake+0x230/0x230 [ 482.387635] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 482.387649] ? cgroup_file_notify+0x140/0x1b0 [ 482.387665] memory_max_write+0x169/0x300 [ 482.387683] ? mem_cgroup_write+0x360/0x360 [ 482.394485] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.403987] ? lock_acquire+0x16f/0x3f0 [ 482.404002] ? kernfs_fop_write+0x227/0x480 [ 482.404024] cgroup_file_write+0x241/0x790 [ 482.404041] ? mem_cgroup_write+0x360/0x360 [ 482.404054] ? kill_css+0x380/0x380 [ 482.404073] ? kill_css+0x380/0x380 [ 482.413103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 482.413988] kernfs_fop_write+0x2b8/0x480 [ 482.421476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.423446] __vfs_write+0x114/0x810 [ 482.437084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.437977] ? kernfs_fop_open+0xd80/0xd80 [ 482.437995] ? kernel_read+0x120/0x120 [ 482.446497] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.446827] ? __lock_is_held+0xb6/0x140 [ 482.451463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.456366] ? rcu_read_lock_sched_held+0x110/0x130 [ 482.482175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 482.484757] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 482.495148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.497317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.497334] ? __sb_start_write+0x1a9/0x360 [ 482.497349] vfs_write+0x20c/0x560 [ 482.497366] ksys_write+0x14f/0x2d0 [ 482.497386] ? __ia32_sys_read+0xb0/0xb0 [ 482.497414] ? do_syscall_64+0x26/0x620 [ 482.497435] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.497446] ? do_syscall_64+0x26/0x620 [ 482.497468] __x64_sys_write+0x73/0xb0 [ 482.497482] do_syscall_64+0xfd/0x620 [ 482.497497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.497514] RIP: 0033:0x45a649 [ 482.497533] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 482.497541] RSP: 002b:00007fa22072bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.497560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 482.497567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 482.497574] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 482.497585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa22072c6d4 16:10:01 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 482.497592] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 482.714966] Task in /syz1 killed as a result of limit of /syz1 [ 482.756757] memory: usage 6220kB, limit 0kB, failcnt 150 [ 482.762405] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 482.786676] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 482.794429] Memory cgroup stats for /syz1: cache:140KB rss:2164KB rss_huge:2048KB shmem:104KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:4KB active_file:0KB unevictable:0KB [ 482.805266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.848630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.854255] Memory cgroup out of memory: Kill process 19587 (syz-executor.1) score 9271000 or sacrifice child [ 482.856345] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.872715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.886391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 482.899517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.910370] Killed process 19587 (syz-executor.1) total-vm:72592kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 482.924685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 482.932694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:10:01 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 482.947768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 482.958056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.966281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.981352] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 482.982310] oom_reaper: reaped process 19587 (syz-executor.1), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 483.016611] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 483.022472] CPU: 0 PID: 19548 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 483.030374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.039743] Call Trace: [ 483.042346] dump_stack+0x197/0x210 [ 483.045983] dump_header+0x15e/0xa55 [ 483.046676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.049718] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 483.061613] ? ___ratelimit+0x60/0x595 [ 483.065547] ? do_raw_spin_unlock+0x178/0x270 [ 483.070085] oom_kill_process.cold+0x10/0x6ef [ 483.074598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.080253] ? task_will_free_mem+0x139/0x6e0 [ 483.084785] out_of_memory+0x362/0x1330 [ 483.088778] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 483.093893] ? oom_killer_disable+0x280/0x280 [ 483.098395] ? find_held_lock+0x35/0x130 [ 483.102492] mem_cgroup_out_of_memory+0x1d2/0x240 [ 483.107791] ? memcg_event_wake+0x230/0x230 [ 483.112488] ? do_raw_spin_unlock+0x178/0x270 [ 483.117008] ? _raw_spin_unlock+0x2d/0x50 [ 483.121255] try_charge+0xec5/0x1490 [ 483.125412] ? lock_downgrade+0x880/0x880 [ 483.129581] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 483.134471] ? rcu_read_unlock+0x33/0x60 [ 483.138661] ? get_mem_cgroup_from_mm+0x185/0x510 [ 483.143520] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 483.149843] ? avc_has_perm+0x379/0x610 [ 483.153849] mem_cgroup_try_charge+0x259/0x6b0 [ 483.158548] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 483.163511] wp_page_copy+0x430/0x16a0 [ 483.167421] ? pmd_pfn+0x1d0/0x1d0 [ 483.170978] ? do_raw_spin_unlock+0x178/0x270 [ 483.175481] do_wp_page+0x57d/0x10b0 [ 483.179223] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 483.183900] ? kasan_check_write+0x14/0x20 [ 483.188334] ? do_raw_spin_lock+0xc8/0x240 [ 483.192586] __handle_mm_fault+0x2305/0x3f80 [ 483.197007] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 483.201874] ? count_memcg_event_mm+0x2b1/0x4d0 [ 483.206637] handle_mm_fault+0x1b5/0x690 [ 483.210716] __do_page_fault+0x62a/0xe90 [ 483.214789] ? vmalloc_fault+0x740/0x740 [ 483.218859] ? trace_hardirqs_off_caller+0x65/0x220 [ 483.223888] ? trace_hardirqs_on_caller+0x6a/0x220 [ 483.228829] ? page_fault+0x8/0x30 [ 483.232380] do_page_fault+0x71/0x57d [ 483.236186] ? page_fault+0x8/0x30 [ 483.239737] page_fault+0x1e/0x30 [ 483.243459] RIP: 0033:0x431726 [ 483.246658] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 [ 483.265574] RSP: 002b:00007ffe96c96080 EFLAGS: 00010206 [ 483.270949] RAX: 0000000000019691 RBX: 0000000000718640 RCX: 0000000000008041 [ 483.278224] RDX: 000000000268b930 RSI: 0000000002693970 RDI: 0000000000000003 [ 483.285505] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000268a940 [ 483.292790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 483.300067] R13: 0000000000718698 R14: 0000000000000000 R15: 0000000000002710 [ 483.310491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 483.347114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.355316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 16:10:02 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 483.439848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 483.447127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.454925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.468032] Task in /syz3 killed as a result of limit of /syz3 [ 483.474087] memory: usage 24944kB, limit 0kB, failcnt 197 [ 483.480963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 483.487835] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 483.494114] Memory cgroup stats for /syz3: cache:24KB rss:52KB rss_huge:0KB shmem:116KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:4KB unevictable:0KB [ 483.503451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 483.521313] Memory cgroup out of memory: Kill process 19548 (syz-executor.3) score 8755000 or sacrifice child [ 483.531930] Killed process 19548 (syz-executor.3) total-vm:72460kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 483.543435] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 483.543580] oom_reaper: reaped process 19548 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 483.554969] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 483.570983] CPU: 1 PID: 19547 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 483.578804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.588153] Call Trace: [ 483.590753] dump_stack+0x197/0x210 [ 483.594722] dump_header+0x15e/0xa55 [ 483.598431] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 483.603695] ? ___ratelimit+0x60/0x595 [ 483.607587] ? do_raw_spin_unlock+0x178/0x270 [ 483.612099] oom_kill_process.cold+0x10/0x6ef [ 483.616681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.622210] ? task_will_free_mem+0x139/0x6e0 [ 483.626715] out_of_memory+0x362/0x1330 [ 483.630685] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 483.635779] ? oom_killer_disable+0x280/0x280 [ 483.640268] ? find_held_lock+0x35/0x130 [ 483.644338] mem_cgroup_out_of_memory+0x1d2/0x240 [ 483.649169] ? memcg_event_wake+0x230/0x230 [ 483.653485] ? do_raw_spin_unlock+0x178/0x270 [ 483.657972] ? _raw_spin_unlock+0x2d/0x50 [ 483.662158] try_charge+0xec5/0x1490 [ 483.665864] ? lock_downgrade+0x880/0x880 [ 483.670011] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 483.674853] ? rcu_read_unlock+0x33/0x60 [ 483.678908] ? get_mem_cgroup_from_mm+0x185/0x510 [ 483.683754] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 483.689821] ? avc_has_perm+0x379/0x610 [ 483.693797] mem_cgroup_try_charge+0x259/0x6b0 [ 483.698397] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 483.703337] wp_page_copy+0x430/0x16a0 [ 483.707224] ? pmd_pfn+0x1d0/0x1d0 [ 483.710759] ? do_raw_spin_unlock+0x178/0x270 [ 483.715251] do_wp_page+0x57d/0x10b0 [ 483.718960] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 483.723629] ? kasan_check_write+0x14/0x20 [ 483.727860] ? do_raw_spin_lock+0xc8/0x240 [ 483.732106] __handle_mm_fault+0x2305/0x3f80 [ 483.736509] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 483.741356] ? count_memcg_event_mm+0x2b1/0x4d0 [ 483.746019] handle_mm_fault+0x1b5/0x690 [ 483.750078] __do_page_fault+0x62a/0xe90 [ 483.754156] ? vmalloc_fault+0x740/0x740 [ 483.758212] ? trace_hardirqs_off_caller+0x65/0x220 [ 483.763216] ? trace_hardirqs_on_caller+0x6a/0x220 [ 483.768153] ? page_fault+0x8/0x30 [ 483.771689] do_page_fault+0x71/0x57d [ 483.775482] ? page_fault+0x8/0x30 [ 483.779032] page_fault+0x1e/0x30 [ 483.782564] RIP: 0033:0x431726 [ 483.785749] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 [ 483.804967] RSP: 002b:00007ffce92b5a60 EFLAGS: 00010206 [ 483.810423] RAX: 0000000000019691 RBX: 0000000000718640 RCX: 0000000000008041 [ 483.817840] RDX: 0000000000e9b930 RSI: 0000000000ea3970 RDI: 0000000000000003 [ 483.825101] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000e9a940 [ 483.832362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 483.839621] R13: 0000000000718698 R14: 0000000000000000 R15: 0000000000002710 [ 483.858111] Task in /syz5 killed as a result of limit of /syz5 [ 483.864182] memory: usage 11788kB, limit 0kB, failcnt 77 [ 483.876471] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 483.883276] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 483.907360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.915200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.927062] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 483.933243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.936482] Memory cgroup stats for /syz5: cache:176KB rss:116KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:8KB unevictable:0KB [ 483.961300] Memory cgroup out of memory: Kill process 19547 (syz-executor.5) score 8757000 or sacrifice child [ 483.972061] Killed process 19547 (syz-executor.5) total-vm:72460kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB [ 483.988866] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 16:10:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) [ 484.005437] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 484.019495] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 484.021489] syz-executor.0 cpuset= [ 484.029122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.038242] syz0 mems_allowed=0-1 [ 484.043456] CPU: 0 PID: 19550 Comm: syz-executor.0 Not tainted 4.19.86-syzkaller #0 [ 484.046037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 16:10:02 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = dup3(r1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) shmctl$SHM_UNLOCK(0x0, 0xc) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f00000000c0)=0xff) getpid() [ 484.051280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.051286] Call Trace: [ 484.051306] dump_stack+0x197/0x210 [ 484.051324] dump_header+0x15e/0xa55 [ 484.051341] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 484.051356] ? ___ratelimit+0x60/0x595 [ 484.051368] ? do_raw_spin_unlock+0x178/0x270 [ 484.051385] oom_kill_process.cold+0x10/0x6ef [ 484.051402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.051414] ? task_will_free_mem+0x139/0x6e0 [ 484.051432] out_of_memory+0x362/0x1330 [ 484.051453] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 484.051467] ? oom_killer_disable+0x280/0x280 [ 484.051480] ? find_held_lock+0x35/0x130 [ 484.051503] mem_cgroup_out_of_memory+0x1d2/0x240 [ 484.051517] ? memcg_event_wake+0x230/0x230 [ 484.051535] ? do_raw_spin_unlock+0x178/0x270 [ 484.051555] ? _raw_spin_unlock+0x2d/0x50 [ 484.142025] try_charge+0xec5/0x1490 [ 484.145756] ? lock_downgrade+0x880/0x880 [ 484.149899] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 484.154729] ? rcu_read_unlock+0x33/0x60 [ 484.158777] ? get_mem_cgroup_from_mm+0x185/0x510 [ 484.163867] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 484.169925] ? avc_has_perm+0x379/0x610 [ 484.173985] mem_cgroup_try_charge+0x259/0x6b0 [ 484.178580] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 484.183518] wp_page_copy+0x430/0x16a0 [ 484.187410] ? pmd_pfn+0x1d0/0x1d0 [ 484.190957] ? do_raw_spin_unlock+0x178/0x270 [ 484.195453] do_wp_page+0x57d/0x10b0 [ 484.199159] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 484.203900] ? kasan_check_write+0x14/0x20 [ 484.208145] ? do_raw_spin_lock+0xc8/0x240 [ 484.212386] __handle_mm_fault+0x2305/0x3f80 [ 484.217037] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 484.221887] ? count_memcg_event_mm+0x2b1/0x4d0 [ 484.226739] handle_mm_fault+0x1b5/0x690 [ 484.230803] __do_page_fault+0x62a/0xe90 [ 484.234925] ? vmalloc_fault+0x740/0x740 [ 484.239015] ? trace_hardirqs_off_caller+0x65/0x220 [ 484.244045] ? trace_hardirqs_on_caller+0x6a/0x220 [ 484.248966] ? page_fault+0x8/0x30 [ 484.252506] do_page_fault+0x71/0x57d [ 484.256305] ? page_fault+0x8/0x30 [ 484.259856] page_fault+0x1e/0x30 [ 484.263293] RIP: 0033:0x431726 [ 484.266488] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 [ 484.285403] RSP: 002b:00007ffe9d10b200 EFLAGS: 00010206 [ 484.290784] RAX: 0000000000019691 RBX: 0000000000718640 RCX: 0000000000008041 [ 484.298047] RDX: 0000000000ab2930 RSI: 0000000000aba970 RDI: 0000000000000003 [ 484.305301] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000ab1940 [ 484.312554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 484.319933] R13: 0000000000718698 R14: 0000000000000000 R15: 0000000000002710 [ 484.329509] Task in /syz0 killed as a result of limit of /syz0 [ 484.337000] memory: usage 3964kB, limit 0kB, failcnt 88 [ 484.342732] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.349876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.349884] Memory cgroup stats for [ 484.360272] /syz0: cache:116KB rss:176KB rss_huge:0KB shmem:100KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:4KB unevictable:0KB [ 484.378708] Memory cgroup out of memory: Kill process 19550 (syz-executor.0) score 8754000 or sacrifice child [ 484.389203] Killed process 19550 (syz-executor.0) total-vm:72460kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 484.401150] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 484.405850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.421863] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 484.438440] CPU: 0 PID: 19545 Comm: syz-executor.1 Not tainted 4.19.86-syzkaller #0 [ 484.446297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.455666] Call Trace: [ 484.458283] dump_stack+0x197/0x210 [ 484.462119] dump_header+0x15e/0xa55 [ 484.466300] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 484.471436] ? ___ratelimit+0x60/0x595 [ 484.475417] ? do_raw_spin_unlock+0x178/0x270 [ 484.479925] oom_kill_process.cold+0x10/0x6ef [ 484.484555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.490089] ? task_will_free_mem+0x139/0x6e0 [ 484.494599] out_of_memory+0x362/0x1330 [ 484.499140] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 484.504254] ? oom_killer_disable+0x280/0x280 [ 484.508743] ? find_held_lock+0x35/0x130 [ 484.512813] mem_cgroup_out_of_memory+0x1d2/0x240 [ 484.517664] ? memcg_event_wake+0x230/0x230 [ 484.521994] ? do_raw_spin_unlock+0x178/0x270 [ 484.526500] ? _raw_spin_unlock+0x2d/0x50 [ 484.530655] try_charge+0xec5/0x1490 [ 484.534380] ? lock_downgrade+0x880/0x880 [ 484.538540] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 484.543382] ? rcu_read_unlock+0x33/0x60 [ 484.547444] ? get_mem_cgroup_from_mm+0x185/0x510 [ 484.552298] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 484.558456] ? check_preemption_disabled+0x48/0x290 [ 484.563489] mem_cgroup_try_charge+0x259/0x6b0 [ 484.568076] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 484.573018] __handle_mm_fault+0x1e50/0x3f80 [ 484.577433] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 484.582296] ? count_memcg_event_mm+0x2b1/0x4d0 [ 484.587863] handle_mm_fault+0x1b5/0x690 [ 484.592209] __do_page_fault+0x62a/0xe90 [ 484.596431] ? ksys_write+0x1f1/0x2d0 [ 484.600261] ? vmalloc_fault+0x740/0x740 [ 484.604345] ? trace_hardirqs_off_caller+0x65/0x220 [ 484.609361] ? trace_hardirqs_on_caller+0x6a/0x220 [ 484.614301] ? page_fault+0x8/0x30 [ 484.617857] do_page_fault+0x71/0x57d [ 484.621653] ? page_fault+0x8/0x30 [ 484.625264] page_fault+0x1e/0x30 [ 484.628710] RIP: 0033:0x403a32 [ 484.631906] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 39 96 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 59 4b 05 00 48 [ 484.650816] RSP: 002b:00007fff71e2ee50 EFLAGS: 00010246 [ 484.656184] RAX: 0000000000000000 RBX: 0000000000075b94 RCX: 0000000000414100 [ 484.663540] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007fff71e2ff80 [ 484.670809] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000025d1940 [ 484.678358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff71e2ff80 [ 484.685747] R13: 00007fff71e2ff70 R14: 0000000000000000 R15: 00007fff71e2ff80 [ 484.695807] Task in /syz1 killed as a result of limit of /syz1 [ 484.702776] memory: usage 3844kB, limit 0kB, failcnt 158 [ 484.708591] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.715822] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.722408] Memory cgroup stats for /syz1: cache:140KB rss:44KB rss_huge:0KB shmem:104KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:4KB unevictable:0KB [ 484.743184] Memory cgroup out of memory: Kill process 19545 (syz-executor.1) score 8756000 or sacrifice child 16:10:03 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 484.753804] Killed process 19545 (syz-executor.1) total-vm:72460kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 484.767250] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 484.785367] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 484.806332] CPU: 0 PID: 19546 Comm: syz-executor.2 Not tainted 4.19.86-syzkaller #0 [ 484.814192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.823825] Call Trace: [ 484.826431] dump_stack+0x197/0x210 [ 484.830072] dump_header+0x15e/0xa55 [ 484.833798] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 484.838935] ? ___ratelimit+0x60/0x595 [ 484.842832] ? do_raw_spin_unlock+0x178/0x270 [ 484.847345] oom_kill_process.cold+0x10/0x6ef [ 484.851857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.857415] ? task_will_free_mem+0x139/0x6e0 [ 484.861929] out_of_memory+0x362/0x1330 [ 484.865924] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 484.871042] ? oom_killer_disable+0x280/0x280 [ 484.875551] ? find_held_lock+0x35/0x130 [ 484.879650] mem_cgroup_out_of_memory+0x1d2/0x240 [ 484.884499] ? memcg_event_wake+0x230/0x230 [ 484.884518] ? do_raw_spin_unlock+0x178/0x270 [ 484.893327] ? _raw_spin_unlock+0x2d/0x50 [ 484.897485] try_charge+0xec5/0x1490 [ 484.901209] ? lock_downgrade+0x880/0x880 [ 484.905373] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 16:10:03 executing program 3: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 484.910234] ? rcu_read_unlock+0x33/0x60 [ 484.914301] ? get_mem_cgroup_from_mm+0x185/0x510 [ 484.914319] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 484.914338] ? check_preemption_disabled+0x48/0x290 [ 484.925491] mem_cgroup_try_charge+0x259/0x6b0 [ 484.935230] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 484.940271] __handle_mm_fault+0x1e50/0x3f80 [ 484.944807] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 484.949683] ? count_memcg_event_mm+0x2b1/0x4d0 [ 484.949700] handle_mm_fault+0x1b5/0x690 [ 484.949721] __do_page_fault+0x62a/0xe90 [ 484.949733] ? ksys_write+0x1f1/0x2d0 [ 484.949750] ? vmalloc_fault+0x740/0x740 [ 484.949763] ? trace_hardirqs_off_caller+0x65/0x220 [ 484.949780] ? trace_hardirqs_on_caller+0x6a/0x220 [ 484.970415] ? page_fault+0x8/0x30 [ 484.980348] do_page_fault+0x71/0x57d [ 484.980360] ? page_fault+0x8/0x30 [ 484.980374] page_fault+0x1e/0x30 [ 484.980385] RIP: 0033:0x403a32 [ 484.980398] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 39 96 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 59 4b 05 00 48 [ 484.980405] RSP: 002b:00007ffc18730eb0 EFLAGS: 00010246 [ 484.980416] RAX: 0000000000000000 RBX: 0000000000076245 RCX: 0000000000414100 [ 484.980423] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffc18731fe0 [ 484.980431] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000141d940 [ 484.980438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc18731fe0 [ 484.980446] R13: 00007ffc18731fd0 R14: 0000000000000000 R15: 00007ffc18731fe0 [ 485.004862] Task in [ 485.046632] /syz2 killed as a result of limit of /syz2 [ 485.072702] memory: usage 11960kB, limit 0kB, failcnt 99 [ 485.079581] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.087068] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 16:10:03 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 485.093740] Memory cgroup stats for /syz2: cache:100KB rss:120KB rss_huge:0KB shmem:128KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:4KB unevictable:0KB [ 485.124670] Memory cgroup out of memory: Kill process 19546 (syz-executor.2) score 8756000 or sacrifice child [ 485.140620] Killed process 19546 (syz-executor.2) total-vm:72460kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB 16:10:03 executing program 0: ioprio_set$pid(0x0, 0x0, 0x4) 16:10:03 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) 16:10:04 executing program 5: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) [ 485.400088] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 485.441466] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 485.458616] CPU: 1 PID: 19609 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 485.466459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.475824] Call Trace: [ 485.478422] dump_stack+0x197/0x210 [ 485.482053] dump_header+0x15e/0xa55 [ 485.485758] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 485.491014] ? ___ratelimit+0x60/0x595 [ 485.494889] ? do_raw_spin_unlock+0x178/0x270 [ 485.499375] oom_kill_process.cold+0x10/0x6ef [ 485.503864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.509390] ? task_will_free_mem+0x139/0x6e0 [ 485.513880] out_of_memory+0x362/0x1330 [ 485.517847] ? oom_killer_disable+0x280/0x280 [ 485.522338] ? cgroup_file_notify+0x140/0x1b0 [ 485.526850] mem_cgroup_out_of_memory+0x1d2/0x240 [ 485.531691] ? memcg_event_wake+0x230/0x230 [ 485.536018] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 485.541135] ? cgroup_file_notify+0x140/0x1b0 [ 485.545642] memory_max_write+0x169/0x300 [ 485.549796] ? mem_cgroup_write+0x360/0x360 [ 485.554134] ? lock_acquire+0x16f/0x3f0 [ 485.558128] ? kernfs_fop_write+0x227/0x480 [ 485.562462] cgroup_file_write+0x241/0x790 [ 485.566711] ? mem_cgroup_write+0x360/0x360 [ 485.571044] ? kill_css+0x380/0x380 [ 485.574678] ? kill_css+0x380/0x380 [ 485.578300] kernfs_fop_write+0x2b8/0x480 [ 485.582444] __vfs_write+0x114/0x810 [ 485.586150] ? kernfs_fop_open+0xd80/0xd80 [ 485.590376] ? kernel_read+0x120/0x120 [ 485.594967] ? __lock_is_held+0xb6/0x140 [ 485.599041] ? rcu_read_lock_sched_held+0x110/0x130 [ 485.604050] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 485.608797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.614349] ? __sb_start_write+0x1a9/0x360 [ 485.618677] vfs_write+0x20c/0x560 [ 485.622221] ksys_write+0x14f/0x2d0 [ 485.625844] ? __ia32_sys_read+0xb0/0xb0 [ 485.629908] ? do_syscall_64+0x26/0x620 [ 485.633884] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.639234] ? do_syscall_64+0x26/0x620 [ 485.643202] __x64_sys_write+0x73/0xb0 [ 485.647079] do_syscall_64+0xfd/0x620 [ 485.650870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.656049] RIP: 0033:0x45a649 [ 485.659235] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 485.678136] RSP: 002b:00007fb533fdac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.685835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 485.693109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 485.700374] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 485.707645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb533fdb6d4 [ 485.714903] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 485.741068] Task in /syz4 killed as a result of limit of /syz4 [ 485.753082] memory: usage 21504kB, limit 0kB, failcnt 78 [ 485.759060] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.765848] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.772484] Memory cgroup stats for /syz4: cache:120KB rss:2184KB rss_huge:2048KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 485.797172] Memory cgroup out of memory: Kill process 19607 (syz-executor.4) score 9271000 or sacrifice child [ 485.810722] Killed process 19607 (syz-executor.4) total-vm:72724kB, anon-rss:2192kB, file-rss:35836kB, shmem-rss:0kB [ 485.823376] oom_reaper: reaped process 19607 (syz-executor.4), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 485.938111] device bridge_slave_1 left promiscuous mode [ 485.943659] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.001526] device bridge_slave_0 left promiscuous mode [ 486.007684] bridge0: port 1(bridge_slave_0) entered disabled state 16:10:04 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:10:04 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x110, 0x2, 0x800}}], 0x18}, 0x0) 16:10:04 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x12660b8, 0x0) 16:10:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getresgid(&(0x7f0000000000), &(0x7f0000000040), 0x0) [ 486.208841] syz-executor.4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 486.271984] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 486.280463] device hsr_slave_1 left promiscuous mode [ 486.285657] CPU: 1 PID: 19557 Comm: syz-executor.4 Not tainted 4.19.86-syzkaller #0 [ 486.293465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.302858] Call Trace: [ 486.305468] dump_stack+0x197/0x210 [ 486.309122] dump_header+0x15e/0xa55 [ 486.312879] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 486.317994] ? ___ratelimit+0x60/0x595 [ 486.322176] ? do_raw_spin_unlock+0x178/0x270 [ 486.326683] oom_kill_process.cold+0x10/0x6ef [ 486.331302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 486.336930] ? task_will_free_mem+0x139/0x6e0 [ 486.341485] out_of_memory+0x362/0x1330 [ 486.345452] ? lock_downgrade+0x880/0x880 [ 486.349594] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 486.354680] ? oom_killer_disable+0x280/0x280 [ 486.359171] ? find_held_lock+0x35/0x130 [ 486.363266] mem_cgroup_out_of_memory+0x1d2/0x240 [ 486.368106] ? memcg_event_wake+0x230/0x230 [ 486.372442] ? do_raw_spin_unlock+0x178/0x270 [ 486.376943] ? _raw_spin_unlock+0x2d/0x50 [ 486.381084] try_charge+0xec5/0x1490 [ 486.384788] ? lock_downgrade+0x880/0x880 [ 486.388931] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 486.393761] ? rcu_read_unlock+0x33/0x60 [ 486.397820] ? get_mem_cgroup_from_mm+0x185/0x510 [ 486.402665] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 486.409000] ? avc_has_perm+0x379/0x610 [ 486.413005] mem_cgroup_try_charge+0x259/0x6b0 [ 486.417789] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 486.423165] wp_page_copy+0x430/0x16a0 [ 486.427076] ? pmd_pfn+0x1d0/0x1d0 [ 486.430630] ? do_raw_spin_unlock+0x178/0x270 [ 486.435139] do_wp_page+0x57d/0x10b0 [ 486.438876] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 486.443561] ? kasan_check_write+0x14/0x20 [ 486.447809] ? do_raw_spin_lock+0xc8/0x240 [ 486.452061] __handle_mm_fault+0x2305/0x3f80 [ 486.456488] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 486.461363] ? count_memcg_event_mm+0x2b1/0x4d0 [ 486.466052] handle_mm_fault+0x1b5/0x690 [ 486.470137] __do_page_fault+0x62a/0xe90 [ 486.474298] ? vmalloc_fault+0x740/0x740 [ 486.478350] ? trace_hardirqs_off_caller+0x65/0x220 [ 486.483616] ? trace_hardirqs_on_caller+0x6a/0x220 [ 486.488705] ? page_fault+0x8/0x30 [ 486.492235] do_page_fault+0x71/0x57d [ 486.496029] ? page_fault+0x8/0x30 [ 486.499569] page_fault+0x1e/0x30 [ 486.503010] RIP: 0033:0x431726 [ 486.506185] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 [ 486.525071] RSP: 002b:00007ffcfec21b10 EFLAGS: 00010206 [ 486.530430] RAX: 0000000000019691 RBX: 0000000000718640 RCX: 0000000000008041 [ 486.537686] RDX: 0000000001b16930 RSI: 0000000001b1e970 RDI: 0000000000000003 [ 486.544960] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001b15940 [ 486.552247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 486.559500] R13: 0000000000718698 R14: 0000000000000000 R15: 0000000000002710 [ 486.570591] Task in /syz4 killed as a result of limit of /syz4 [ 486.577671] memory: usage 19124kB, limit 0kB, failcnt 90 [ 486.583165] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 486.596203] device hsr_slave_0 left promiscuous mode [ 486.601545] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 486.607844] Memory cgroup stats for /syz4: cache:120KB rss:40KB rss_huge:0KB shmem:160KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:0KB unevictable:0KB [ 486.628455] Memory cgroup out of memory: Kill process 19557 (syz-executor.4) score 8756000 or sacrifice child [ 486.638670] Killed process 19557 (syz-executor.4) total-vm:72460kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 486.649915] oom_reaper: reaped process 19557 (syz-executor.4), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 486.664876] team0 (unregistering): Port device team_slave_1 removed [ 486.687475] team0 (unregistering): Port device team_slave_0 removed [ 486.704488] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 486.744439] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 486.846032] bond0 (unregistering): Released all slaves [ 486.923063] IPVS: ftp: loaded support on port[0] = 21 [ 486.927497] IPVS: ftp: loaded support on port[0] = 21 16:10:05 executing program 4: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x216a8ee6aa5732f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=r3], &(0x7f0000000280)=""/236, 0xfffffe58, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r5 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r6, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r5, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x89f) write$cgroup_int(r7, 0x0, 0x0) 16:10:05 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) [ 487.244003] chnl_net:caif_netlink_parms(): no params data found [ 487.337270] chnl_net:caif_netlink_parms(): no params data found [ 487.453672] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.486602] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.494595] device bridge_slave_0 entered promiscuous mode [ 487.549697] IPVS: ftp: loaded support on port[0] = 21 [ 487.575301] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.586720] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.594310] device bridge_slave_1 entered promiscuous mode [ 487.622329] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.629573] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.647496] device bridge_slave_0 entered promiscuous mode [ 487.672776] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.696602] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.704253] device bridge_slave_1 entered promiscuous mode [ 487.737176] IPVS: ftp: loaded support on port[0] = 21 [ 487.753155] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 487.796988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 487.798890] IPVS: ftp: loaded support on port[0] = 21 [ 487.810642] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 487.848783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 487.925042] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 487.933649] team0: Port device team_slave_0 added [ 487.949215] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 487.960200] team0: Port device team_slave_0 added [ 487.979047] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 487.997477] team0: Port device team_slave_1 added [ 488.016771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 488.068515] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 488.080915] team0: Port device team_slave_1 added [ 488.093624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 488.117212] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 488.141845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 488.170618] chnl_net:caif_netlink_parms(): no params data found [ 488.299759] device hsr_slave_0 entered promiscuous mode [ 488.346992] device hsr_slave_1 entered promiscuous mode [ 488.390713] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 488.439837] device hsr_slave_0 entered promiscuous mode [ 488.466961] device hsr_slave_1 entered promiscuous mode [ 488.507460] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 488.514855] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 488.561064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 488.583024] IPVS: ftp: loaded support on port[0] = 21 [ 488.642936] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 488.787952] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.794414] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.803245] device bridge_slave_0 entered promiscuous mode [ 488.845206] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 488.874218] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.897112] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.904732] device bridge_slave_1 entered promiscuous mode [ 488.922895] chnl_net:caif_netlink_parms(): no params data found [ 488.967592] chnl_net:caif_netlink_parms(): no params data found [ 489.051661] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 489.071041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.113142] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 489.150945] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 489.173977] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.180769] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.188881] device bridge_slave_0 entered promiscuous mode [ 489.214653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 489.226186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 489.247964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.256400] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.263077] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.288276] device bridge_slave_1 entered promiscuous mode [ 489.295192] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.307012] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.328010] device bridge_slave_0 entered promiscuous mode [ 489.337823] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 489.346826] team0: Port device team_slave_0 added [ 489.353204] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 489.360990] team0: Port device team_slave_1 added [ 489.370012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 489.376293] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.397537] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.403959] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.413551] device bridge_slave_1 entered promiscuous mode [ 489.421430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 489.438174] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 489.488067] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 489.516202] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 489.530183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.539953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 489.570153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.584787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.593184] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.599752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.609988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 489.637374] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 489.719666] device hsr_slave_0 entered promiscuous mode [ 489.777361] device hsr_slave_1 entered promiscuous mode [ 489.817565] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 489.825227] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 489.833151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.841541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.850180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.858499] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.864916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.877613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 489.891458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 489.900351] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 489.938092] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 489.946268] team0: Port device team_slave_0 added [ 489.967722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 489.977743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 490.006524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 490.028223] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 490.034793] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 490.049769] team0: Port device team_slave_1 added [ 490.055786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.077806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.086061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.107795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.122545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.130551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.148044] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 490.155730] team0: Port device team_slave_0 added [ 490.163892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 490.187108] chnl_net:caif_netlink_parms(): no params data found [ 490.200825] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 490.207779] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.214497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 490.223196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 490.231829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.241163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.250664] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 490.267787] team0: Port device team_slave_1 added [ 490.280602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 490.290043] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 490.313885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 490.321816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.331003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.340009] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.346410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.354111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.362053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.376793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 490.387861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 490.440382] device hsr_slave_0 entered promiscuous mode [ 490.467113] device hsr_slave_1 entered promiscuous mode [ 490.507561] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 490.515281] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 490.541914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.552122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.560491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.568763] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.575177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.583633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 490.594434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 490.668535] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 490.686308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 490.693999] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.706603] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.714012] device bridge_slave_0 entered promiscuous mode [ 490.730070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.747463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.755192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.790330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 490.809466] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 490.815661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 490.823815] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.831616] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.846848] device bridge_slave_1 entered promiscuous mode [ 490.900532] device hsr_slave_0 entered promiscuous mode [ 490.937164] device hsr_slave_1 entered promiscuous mode [ 490.979066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 490.997287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.009598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 491.081622] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 491.092149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.107615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.115445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.128244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 491.195070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.204878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.218548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 491.228993] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 491.275559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.291382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 491.304277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.313759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.325767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 491.334685] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 491.359656] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 491.367909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 491.375762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 491.389469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.399322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.407407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.414609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.425225] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 491.432458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 491.473608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.484139] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 491.505732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.541198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.557270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.568255] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 491.574383] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.622983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 491.648573] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 491.662208] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 491.677096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 491.688380] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 491.699356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.706394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.714005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.722611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.730661] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.737578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.745137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.753548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.761627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 491.771045] team0: Port device team_slave_0 added [ 491.840988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 491.851067] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 491.859946] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.899679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.908317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.917249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.925868] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.932392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.943666] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 491.953247] team0: Port device team_slave_1 added [ 491.964800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 492.013247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 492.095880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 492.109834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.124202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.139452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 492.151772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 492.174473] device bridge_slave_1 left promiscuous mode [ 492.181305] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.208263] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 492.220127] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 492.225918] CPU: 1 PID: 19636 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 492.233735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.243106] Call Trace: [ 492.245707] dump_stack+0x197/0x210 [ 492.249418] dump_header+0x15e/0xa55 [ 492.253141] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 492.258371] ? ___ratelimit+0x60/0x595 [ 492.262259] ? do_raw_spin_unlock+0x178/0x270 [ 492.266761] oom_kill_process.cold+0x10/0x6ef [ 492.271373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.277095] ? task_will_free_mem+0x139/0x6e0 [ 492.281837] out_of_memory+0x362/0x1330 [ 492.285821] ? oom_killer_disable+0x280/0x280 [ 492.290344] mem_cgroup_out_of_memory+0x1d2/0x240 [ 492.295243] ? memcg_event_wake+0x230/0x230 [ 492.299589] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 492.304704] ? cgroup_file_notify+0x140/0x1b0 [ 492.309230] memory_max_write+0x169/0x300 [ 492.313392] ? mem_cgroup_write+0x360/0x360 [ 492.317748] ? mem_cgroup_write+0x360/0x360 [ 492.322254] cgroup_file_write+0x241/0x790 [ 492.326521] ? mem_cgroup_write+0x360/0x360 [ 492.330865] ? kill_css+0x380/0x380 [ 492.334517] ? kill_css+0x380/0x380 [ 492.338172] kernfs_fop_write+0x2b8/0x480 [ 492.342357] __vfs_write+0x114/0x810 [ 492.346101] ? kernfs_fop_open+0xd80/0xd80 [ 492.350362] ? kernel_read+0x120/0x120 [ 492.354271] ? __lock_is_held+0xb6/0x140 [ 492.358381] ? rcu_read_lock_sched_held+0x110/0x130 [ 492.363456] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 492.368327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.373940] ? __sb_start_write+0x1a9/0x360 [ 492.378383] vfs_write+0x20c/0x560 [ 492.382077] ksys_write+0x14f/0x2d0 [ 492.385735] ? __ia32_sys_read+0xb0/0xb0 [ 492.389821] ? do_syscall_64+0x26/0x620 [ 492.393816] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.399329] ? do_syscall_64+0x26/0x620 [ 492.403338] __x64_sys_write+0x73/0xb0 [ 492.407255] do_syscall_64+0xfd/0x620 [ 492.411163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.416363] RIP: 0033:0x45a649 [ 492.419714] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 492.438848] RSP: 002b:00007f63a7b53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 492.446580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 492.454006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 492.461524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 492.468814] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63a7b546d4 [ 492.476621] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 492.484972] device bridge_slave_0 left promiscuous mode [ 492.496324] Task in /syz5 killed as a result of limit of /syz5 [ 492.503171] memory: usage 13088kB, limit 0kB, failcnt 78 [ 492.508994] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.516901] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 492.523969] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 492.530779] Memory cgroup stats for /syz5: cache:176KB rss:2208KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:8KB active_file:0KB unevictable:0KB [ 492.553204] Memory cgroup out of memory: Kill process 19635 (syz-executor.5) score 9273000 or sacrifice child [ 492.564165] Killed process 19635 (syz-executor.5) total-vm:72592kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 492.580660] oom_reaper: reaped process 19635 (syz-executor.5), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 492.603010] device bridge_slave_1 left promiscuous mode [ 492.618869] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.678100] device bridge_slave_0 left promiscuous mode [ 492.685072] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.739947] device bridge_slave_1 left promiscuous mode [ 492.745473] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.797976] device bridge_slave_0 left promiscuous mode [ 492.807438] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.869152] device bridge_slave_1 left promiscuous mode [ 492.874772] bridge0: port 2(bridge_slave_1) entered disabled state 16:10:11 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlock2(&(0x7f000014f000/0x3000)=nil, 0x3000, 0x0) [ 492.910316] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 492.922865] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 492.930571] device bridge_slave_0 left promiscuous mode [ 492.937048] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.943721] CPU: 0 PID: 19613 Comm: syz-executor.5 Not tainted 4.19.86-syzkaller #0 [ 492.951559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.960926] Call Trace: [ 492.963535] dump_stack+0x197/0x210 [ 492.967174] dump_header+0x15e/0xa55 [ 492.970899] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 492.976175] ? ___ratelimit+0x60/0x595 [ 492.980064] ? do_raw_spin_unlock+0x178/0x270 [ 492.984573] oom_kill_process.cold+0x10/0x6ef [ 492.989206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.994912] ? task_will_free_mem+0x139/0x6e0 [ 492.999526] out_of_memory+0x362/0x1330 [ 493.003516] ? lock_downgrade+0x880/0x880 [ 493.007698] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 493.012808] ? oom_killer_disable+0x280/0x280 [ 493.017308] ? find_held_lock+0x35/0x130 [ 493.021390] mem_cgroup_out_of_memory+0x1d2/0x240 [ 493.026262] ? memcg_event_wake+0x230/0x230 [ 493.030591] ? do_raw_spin_unlock+0x178/0x270 [ 493.035109] ? _raw_spin_unlock+0x2d/0x50 [ 493.039259] try_charge+0xec5/0x1490 [ 493.042977] ? lock_downgrade+0x880/0x880 [ 493.047169] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 493.052032] ? rcu_read_unlock+0x33/0x60 [ 493.056088] ? get_mem_cgroup_from_mm+0x185/0x510 [ 493.060941] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 493.067008] ? avc_has_perm+0x379/0x610 [ 493.071026] mem_cgroup_try_charge+0x259/0x6b0 [ 493.075619] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 493.080561] wp_page_copy+0x430/0x16a0 [ 493.084455] ? pmd_pfn+0x1d0/0x1d0 [ 493.088010] ? do_raw_spin_unlock+0x178/0x270 [ 493.092509] do_wp_page+0x57d/0x10b0 [ 493.096227] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 493.100906] ? kasan_check_write+0x14/0x20 [ 493.105136] ? do_raw_spin_lock+0xc8/0x240 [ 493.109400] __handle_mm_fault+0x2305/0x3f80 [ 493.113820] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 493.118689] ? count_memcg_event_mm+0x2b1/0x4d0 [ 493.123363] handle_mm_fault+0x1b5/0x690 [ 493.127441] __do_page_fault+0x62a/0xe90 [ 493.131512] ? vmalloc_fault+0x740/0x740 [ 493.135666] ? trace_hardirqs_off_caller+0x65/0x220 [ 493.140688] ? trace_hardirqs_on_caller+0x6a/0x220 [ 493.145616] ? page_fault+0x8/0x30 [ 493.149266] do_page_fault+0x71/0x57d [ 493.153100] ? page_fault+0x8/0x30 [ 493.156644] page_fault+0x1e/0x30 [ 493.160099] RIP: 0033:0x431726 [ 493.163292] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 [ 493.182220] RSP: 002b:00007ffc686c4a80 EFLAGS: 00010206 [ 493.187603] RAX: 0000000000019691 RBX: 0000000000718640 RCX: 0000000000008041 [ 493.194900] RDX: 0000000002843930 RSI: 000000000284b970 RDI: 0000000000000003 [ 493.202200] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002842940 [ 493.209564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 493.216847] R13: 0000000000718698 R14: 0000000000000000 R15: 0000000000002710 [ 493.227458] Task in /syz5 killed as a result of limit of /syz5 [ 493.233557] memory: usage 10712kB, limit 0kB, failcnt 86 [ 493.241476] device bridge_slave_1 left promiscuous mode [ 493.247139] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 493.254008] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 493.255336] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.260308] Memory cgroup stats for /syz5: cache:176KB rss:88KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:8KB unevictable:0KB [ 493.286930] Memory cgroup out of memory: Kill process 19613 (syz-executor.5) score 8758000 or sacrifice child [ 493.297347] Killed process 19613 (syz-executor.5) total-vm:72460kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB [ 493.308662] oom_reaper: reaped process 19613 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 493.320241] device bridge_slave_0 left promiscuous mode [ 493.325755] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.679852] device hsr_slave_1 left promiscuous mode [ 493.727185] device hsr_slave_0 left promiscuous mode [ 493.782352] team0 (unregistering): Port device team_slave_1 removed [ 493.795628] team0 (unregistering): Port device team_slave_0 removed [ 493.808931] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 493.862990] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 493.967675] bond0 (unregistering): Released all slaves [ 494.089881] device hsr_slave_1 left promiscuous mode [ 494.132560] device hsr_slave_0 left promiscuous mode [ 494.185496] team0 (unregistering): Port device team_slave_1 removed [ 494.205492] team0 (unregistering): Port device team_slave_0 removed [ 494.218191] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 494.251938] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 494.344201] bond0 (unregistering): Released all slaves [ 494.459702] device hsr_slave_1 left promiscuous mode [ 494.502070] device hsr_slave_0 left promiscuous mode [ 494.561235] team0 (unregistering): Port device team_slave_1 removed [ 494.574916] team0 (unregistering): Port device team_slave_0 removed [ 494.587407] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 494.642736] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 494.754428] bond0 (unregistering): Released all slaves [ 494.849840] device hsr_slave_1 left promiscuous mode [ 494.890920] device hsr_slave_0 left promiscuous mode [ 494.951765] team0 (unregistering): Port device team_slave_1 removed [ 494.967351] team0 (unregistering): Port device team_slave_0 removed [ 494.980012] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 495.032149] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 495.110963] bond0 (unregistering): Released all slaves [ 495.220032] device hsr_slave_1 left promiscuous mode [ 495.262119] device hsr_slave_0 left promiscuous mode [ 495.312226] team0 (unregistering): Port device team_slave_1 removed [ 495.325957] team0 (unregistering): Port device team_slave_0 removed [ 495.340532] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 495.398709] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 495.499732] bond0 (unregistering): Released all slaves [ 495.561796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.571329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.580318] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.586888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.595426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 495.629092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 495.649894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 495.683676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 495.695806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.709244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.720745] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.727266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.736063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 495.745687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 495.758937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 495.811096] device hsr_slave_0 entered promiscuous mode [ 495.857532] device hsr_slave_1 entered promiscuous mode [ 495.893316] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 495.897464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 495.907679] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 495.918270] CPU: 1 PID: 19639 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 495.926111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.929426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 495.935564] Call Trace: [ 495.944913] dump_stack+0x197/0x210 [ 495.948635] dump_header+0x15e/0xa55 [ 495.948654] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 495.948669] ? ___ratelimit+0x60/0x595 [ 495.948686] ? do_raw_spin_unlock+0x178/0x270 [ 495.958650] oom_kill_process.cold+0x10/0x6ef [ 495.958678] out_of_memory+0x362/0x1330 [ 495.958694] ? retint_kernel+0x2d/0x2d [ 495.958711] ? oom_killer_disable+0x280/0x280 [ 495.967095] mem_cgroup_out_of_memory+0x1d2/0x240 [ 495.967110] ? memcg_event_wake+0x230/0x230 [ 495.967136] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 495.974315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 495.975722] ? cgroup_file_notify+0x140/0x1b0 [ 495.999778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 496.005153] memory_max_write+0x169/0x300 [ 496.020453] ? mem_cgroup_write+0x360/0x360 [ 496.024799] ? lock_acquire+0x16f/0x3f0 [ 496.028796] ? kernfs_fop_write+0x227/0x480 [ 496.029102] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.033140] cgroup_file_write+0x241/0x790 [ 496.046994] ? mem_cgroup_write+0x360/0x360 [ 496.051337] ? kill_css+0x380/0x380 [ 496.055004] ? kill_css+0x380/0x380 [ 496.055096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.058633] kernfs_fop_write+0x2b8/0x480 [ 496.058652] __vfs_write+0x114/0x810 [ 496.058666] ? kernfs_fop_open+0xd80/0xd80 [ 496.058678] ? kernel_read+0x120/0x120 [ 496.058694] ? __lock_is_held+0xb6/0x140 [ 496.058717] ? rcu_read_lock_sched_held+0x110/0x130 [ 496.071503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 496.072515] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 496.085302] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 496.088380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 496.088397] ? __sb_start_write+0x1a9/0x360 [ 496.088411] vfs_write+0x20c/0x560 [ 496.088428] ksys_write+0x14f/0x2d0 [ 496.095502] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 496.099501] ? __ia32_sys_read+0xb0/0xb0 [ 496.099520] ? do_syscall_64+0x26/0x620 [ 496.099534] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 496.099546] ? do_syscall_64+0x26/0x620 [ 496.099567] __x64_sys_write+0x73/0xb0 [ 496.111032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.118801] do_syscall_64+0xfd/0x620 [ 496.118822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 496.118838] RIP: 0033:0x45a649 [ 496.126692] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.126699] RSP: 002b:00007f5cd8478c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.126713] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a649 [ 496.126721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 496.126728] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 496.126736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5cd84796d4 [ 496.126747] R13: 00000000004cb16b R14: 00000000004e38c0 R15: 00000000ffffffff [ 496.254401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.264903] Task in /syz3 killed as a result of limit of /syz3 [ 496.275007] memory: usage 25720kB, limit 0kB, failcnt 198 [ 496.282985] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 496.286681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 496.291526] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 496.297919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.302871] Memory cgroup stats for /syz3: cache:24KB rss:2156KB rss_huge:2048KB shmem:116KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2184KB inactive_file:4KB active_file:0KB unevictable:0KB [ 496.336906] Memory cgroup out of memory: Kill process 19638 (syz-executor.3) score 9539000 or sacrifice child [ 496.348194] Killed process 19638 (syz-executor.3) total-vm:72724kB, anon-rss:2192kB, file-rss:35844kB, shmem-rss:0kB [ 496.363088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 496.363249] oom_reaper: reaped process 19638 (syz-executor.3), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 496.384709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 496.393691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.403337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.412656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.421370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.430468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.437835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.448406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 16:10:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getresgid(&(0x7f0000000000), &(0x7f0000000040), 0x0) 16:10:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220200000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1) 16:10:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0044dff, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x400000000000322, 0x0) [ 496.467446] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 496.472154] syz-executor.3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 496.495256] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 496.496255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 496.501271] CPU: 1 PID: 19611 Comm: syz-executor.3 Not tainted 4.19.86-syzkaller #0 [ 496.514642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.524006] Call Trace: [ 496.524029] dump_stack+0x197/0x210 [ 496.524049] dump_header+0x15e/0xa55 [ 496.524066] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 496.524083] ? ___ratelimit+0x60/0x595 [ 496.524097] ? do_raw_spin_unlock+0x178/0x270 [ 496.524114] oom_kill_process.cold+0x10/0x6ef [ 496.534074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 496.557912] ? task_will_free_mem+0x139/0x6e0 [ 496.562428] out_of_memory+0x362/0x1330 [ 496.566421] ? lock_downgrade+0x880/0x880 [ 496.570592] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 496.575720] ? oom_killer_disable+0x280/0x280 [ 496.580351] ? find_held_lock+0x35/0x130 [ 496.584456] mem_cgroup_out_of_memory+0x1d2/0x240 [ 496.589361] ? memcg_event_wake+0x230/0x230 [ 496.593712] ? do_raw_spin_unlock+0x178/0x270 [ 496.598238] ? _raw_spin_unlock+0x2d/0x50 [ 496.602418] try_charge+0xec5/0x1490 [ 496.606160] ? lock_downgrade+0x880/0x880 [ 496.610342] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 496.615238] ? rcu_read_unlock+0x33/0x60 [ 496.619325] ? get_mem_cgroup_from_mm+0x185/0x510 [ 496.624203] ? __mem_cgroup_largest_soft_limit_node+0x500/0x500 [ 496.630280] ? avc_has_perm+0x379/0x610 [ 496.634295] mem_cgroup_try_charge+0x259/0x6b0 [ 496.639064] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 496.644171] wp_page_copy+0x430/0x16a0 [ 496.648089] ? pmd_pfn+0x1d0/0x1d0 [ 496.651654] ? do_raw_spin_unlock+0x178/0x270 [ 496.656178] do_wp_page+0x57d/0x10b0 [ 496.659998] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 496.664876] ? kasan_check_write+0x14/0x20 [ 496.669260] ? do_raw_spin_lock+0xc8/0x240 [ 496.673652] __handle_mm_fault+0x2305/0x3f80 [ 496.678097] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 496.682990] ? count_memcg_event_mm+0x2b1/0x4d0 [ 496.687687] handle_mm_fault+0x1b5/0x690 [ 496.691772] __do_page_fault+0x62a/0xe90 [ 496.695866] ? vmalloc_fault+0x740/0x740 [ 496.699954] ? trace_hardirqs_off_caller+0x65/0x220 [ 496.705130] ? trace_hardirqs_on_caller+0x6a/0x220 [ 496.710080] ? page_fault+0x8/0x30 [ 496.713654] do_page_fault+0x71/0x57d [ 496.717476] ? page_fault+0x8/0x30 [ 496.721025] page_fault+0x1e/0x30 [ 496.724477] RIP: 0033:0x431726 [ 496.727708] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 86 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 1c 5a 64 00 85 c0 0f 84 [ 496.746632] RSP: 002b:00007fffd62fa170 EFLAGS: 00010206 [ 496.752550] RAX: 0000000000019691 RBX: 0000000000718640 RCX: 0000000000008041 [ 496.759835] RDX: 0000000001ec6930 RSI: 0000000001ece970 RDI: 0000000000000003 [ 496.767209] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001ec5940 [ 496.774864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000718698 [ 496.782262] R13: 0000000000718698 R14: 0000000000000000 R15: 0000000000002710 [ 496.790224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 496.791819] Task in /syz3 killed as a result of limit of /syz3 [ 496.806806] memory: usage 23348kB, limit 0kB, failcnt 210 16:10:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getresgid(&(0x7f0000000000), &(0x7f0000000040), 0x0) [ 496.812474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.816972] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 496.834202] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 496.840879] Memory cgroup stats for /syz3: cache:24KB rss:48KB rss_huge:0KB shmem:116KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:4KB unevictable:0KB [ 496.861176] Memory cgroup out of memory: Kill process 19611 (syz-executor.3) score 8757000 or sacrifice child [ 496.867336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 496.878167] Killed process 19611 (syz-executor.3) total-vm:72460kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 496.889500] oom_reaper: reaped process 19611 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 496.921089] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 496.936274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.948847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.964859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.973115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.985764] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 497.008703] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 497.014813] 8021q: adding VLAN 0 to HW filter on device team0 16:10:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getresgid(&(0x7f0000000000), &(0x7f0000000040), 0x0) [ 497.029150] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 497.035616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.058378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.074096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.112843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 497.149469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 16:10:15 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) [ 497.167646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.179484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.192121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.203473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.212004] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.218702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.233830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 497.274338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 497.293351] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 497.306091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.318002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.337450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.345636] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.352374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.360721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.369799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.378974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.403399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 497.427402] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 497.433619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.447632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.475862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 497.504568] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 497.520813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.534337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.542761] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.555650] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 497.570738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.586880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.599778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 497.609028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.619935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.635975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.657706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 497.664902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.674054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.703498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.712762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 497.726057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.734505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.752732] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 497.762704] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 497.769708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.782760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 497.795202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.802811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.832586] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 497.849907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 497.856165] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.881232] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 497.921349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 497.944768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.960325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 16:10:16 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x110, 0x2, 0x800}}], 0x18}, 0x0) [ 497.980806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 498.002440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.035591] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.042077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.065952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 498.092248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.169756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 498.185619] IPVS: ftp: loaded support on port[0] = 21 [ 498.276671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.284947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.292863] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.299443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.311733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 498.366662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 498.401662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 498.439382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 498.458115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 498.467010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 498.488044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.502665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 498.562157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.592407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.632776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.658546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 498.680491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.693415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.718043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 16:10:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) 16:10:17 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x110, 0x2, 0x800}}], 0x18}, 0x0) 16:10:17 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) [ 498.765174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.783803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.825976] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 498.840345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.998398] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 499.017196] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 499.024182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.031984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.059241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.068144] chnl_net:caif_netlink_parms(): no params data found [ 499.214580] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.239018] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.257133] device bridge_slave_0 entered promiscuous mode [ 499.277088] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.283808] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.310715] device bridge_slave_1 entered promiscuous mode 16:10:18 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) 16:10:18 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:18 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x110, 0x2, 0x800}}], 0x18}, 0x0) [ 499.374060] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 499.430593] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.588264] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 499.620778] team0: Port device team_slave_0 added [ 499.631397] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 499.647721] team0: Port device team_slave_1 added [ 499.658309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 499.688576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 499.781226] device hsr_slave_0 entered promiscuous mode [ 499.837091] device hsr_slave_1 entered promiscuous mode [ 499.877827] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 499.885356] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 499.949527] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.956033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.962781] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.969213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.020771] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.032496] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.144044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.169372] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 500.190613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 500.192075] IPVS: ftp: loaded support on port[0] = 21 [ 500.203956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.212096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.239879] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 500.246039] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.283931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 500.300987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.317530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.332630] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.339102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.350104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 500.360735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.370807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.379035] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.385630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.401459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 500.413445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.442640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 500.452628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.479035] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 500.500714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.510796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.524037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 500.534332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.542791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.551876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.575017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 500.606226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.615956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.627946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 500.645861] chnl_net:caif_netlink_parms(): no params data found [ 500.659030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.668032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.693875] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 500.718064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.789872] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 500.807336] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.813990] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.822873] device bridge_slave_0 entered promiscuous mode [ 500.842837] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 500.856960] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.863364] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.884816] device bridge_slave_1 entered promiscuous mode [ 500.903652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.913097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.928831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.969920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 500.987448] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 501.051429] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 501.070399] team0: Port device team_slave_0 added [ 501.089063] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 501.098116] team0: Port device team_slave_1 added [ 501.105652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 501.128041] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 501.210086] device hsr_slave_0 entered promiscuous mode [ 501.247294] device hsr_slave_1 entered promiscuous mode [ 501.277704] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 501.299445] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 501.337927] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 16:10:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220200000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1) 16:10:20 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 16:10:20 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) 16:10:20 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) 16:10:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:20 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) [ 501.511193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.583715] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 501.650776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 501.710835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.721647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.767997] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 501.774112] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.814176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 501.822805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.832388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.841041] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.847725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.864344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.875621] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 501.885486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.894162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.902530] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.909141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.920727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 501.928847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.941446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 501.951821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 501.969008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 501.977374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 501.985566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 501.995440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.011619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 502.020081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.031737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.046399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 502.054084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.063272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.076212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 502.087152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.095116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.142268] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 502.148789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.175803] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 502.201714] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 502.208869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.215948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.240957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.345326] x_tables: duplicate underflow at hook 4 16:10:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) 16:10:21 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 16:10:21 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) 16:10:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:21 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) 16:10:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220200000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1) 16:10:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) 16:10:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) [ 502.543682] x_tables: duplicate underflow at hook 4 16:10:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220200000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1) [ 502.646392] x_tables: duplicate underflow at hook 4 16:10:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) [ 502.731617] device bridge_slave_1 left promiscuous mode [ 502.739252] bridge0: port 2(bridge_slave_1) entered disabled state 16:10:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) [ 502.847885] device bridge_slave_0 left promiscuous mode [ 502.857331] bridge0: port 1(bridge_slave_0) entered disabled state 16:10:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) [ 502.909617] device bridge_slave_1 left promiscuous mode [ 502.915169] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.923935] x_tables: duplicate underflow at hook 4 [ 502.940416] x_tables: duplicate underflow at hook 4 [ 502.977837] device bridge_slave_0 left promiscuous mode [ 502.983550] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.232428] device hsr_slave_1 left promiscuous mode [ 503.292578] device hsr_slave_0 left promiscuous mode [ 503.352468] team0 (unregistering): Port device team_slave_1 removed [ 503.377881] team0 (unregistering): Port device team_slave_0 removed [ 503.398936] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 503.455233] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 503.582811] bond0 (unregistering): Released all slaves [ 503.691620] device hsr_slave_1 left promiscuous mode [ 503.751308] device hsr_slave_0 left promiscuous mode [ 503.811720] team0 (unregistering): Port device team_slave_1 removed [ 503.830984] team0 (unregistering): Port device team_slave_0 removed [ 503.850443] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 503.920004] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 504.009550] bond0 (unregistering): Released all slaves 16:10:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) 16:10:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000000)={0x0, @local, 0x0, 0x0, 'dh\x00', 0x18}, 0x2c) 16:10:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) [ 504.230891] x_tables: duplicate underflow at hook 4 16:10:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 504.378227] x_tables: duplicate underflow at hook 4 16:10:23 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:23 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:23 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x2000421, 0x1) write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000000100), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f00000000c0)) 16:10:23 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:24 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:24 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:24 executing program 1: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:24 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:24 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:24 executing program 1: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:24 executing program 5: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:24 executing program 0: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 2: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:25 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 0: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 4: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 5: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 1: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 2: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:25 executing program 0: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:26 executing program 2: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:26 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:26 executing program 5: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) r5 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xc648, 0x3, 0xff, 0x1, 0x80e4, 0x4}, 0x20) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2002) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 16:10:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:26 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400}) 16:10:27 executing program 3: clock_adjtime(0x0, &(0x7f0000000140)={0x51, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x1}) 16:10:27 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 16:10:27 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) ftruncate(r0, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 508.532286] vivid-001: kernel_thread() failed 16:10:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:27 executing program 3: clock_adjtime(0x0, &(0x7f0000000140)={0x51, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x1}) 16:10:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:27 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400}) 16:10:27 executing program 3: clock_adjtime(0x0, &(0x7f0000000140)={0x51, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x1}) 16:10:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400}) 16:10:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x39, 0x7, 0x9, 0xc, 0x6, 0x3, 0x3, 0xb5, 0xfffffffffffffffe}) 16:10:27 executing program 3: clock_adjtime(0x0, &(0x7f0000000140)={0x51, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x1}) 16:10:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400}) [ 509.072504] serio: Serial port ptm0 16:10:27 executing program 3: openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x22, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sigaltstack(&(0x7f0000338000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, 0x0, 0x0) 16:10:27 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x400}) 16:10:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x39, 0x7, 0x9, 0xc, 0x6, 0x3, 0x3, 0xb5, 0xfffffffffffffffe}) [ 509.382697] serio: Serial port ptm0 16:10:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x39, 0x7, 0x9, 0xc, 0x6, 0x3, 0x3, 0xb5, 0xfffffffffffffffe}) 16:10:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x39, 0x7, 0x9, 0xc, 0x6, 0x3, 0x3, 0xb5, 0xfffffffffffffffe}) [ 509.622939] serio: Serial port ptm0 [ 509.690738] serio: Serial port ptm1 16:10:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x39, 0x7, 0x9, 0xc, 0x6, 0x3, 0x3, 0xb5, 0xfffffffffffffffe}) [ 510.011191] serio: Serial port ptm0 [ 543.620306] device bridge_slave_1 left promiscuous mode [ 543.625936] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.667606] device bridge_slave_0 left promiscuous mode [ 543.673170] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.728692] device bridge_slave_1 left promiscuous mode [ 543.734230] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.777553] device bridge_slave_0 left promiscuous mode [ 543.783093] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.828550] device bridge_slave_1 left promiscuous mode [ 543.834088] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.878762] device bridge_slave_0 left promiscuous mode [ 543.884321] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.939336] device bridge_slave_1 left promiscuous mode [ 543.944867] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.987810] device bridge_slave_0 left promiscuous mode [ 543.993584] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.048695] device bridge_slave_1 left promiscuous mode [ 544.054649] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.107864] device bridge_slave_0 left promiscuous mode [ 544.113554] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.150115] device bridge_slave_1 left promiscuous mode [ 544.155959] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.187669] device bridge_slave_0 left promiscuous mode [ 544.193199] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.529972] device hsr_slave_1 left promiscuous mode [ 544.583100] device hsr_slave_0 left promiscuous mode [ 544.641335] team0 (unregistering): Port device team_slave_1 removed [ 544.654617] team0 (unregistering): Port device team_slave_0 removed [ 544.667635] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 544.703728] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 544.792465] bond0 (unregistering): Released all slaves [ 544.899943] device hsr_slave_1 left promiscuous mode [ 544.941757] device hsr_slave_0 left promiscuous mode [ 545.001229] team0 (unregistering): Port device team_slave_1 removed [ 545.013234] team0 (unregistering): Port device team_slave_0 removed [ 545.026298] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 545.071506] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 545.145787] bond0 (unregistering): Released all slaves [ 545.249862] device hsr_slave_1 left promiscuous mode [ 545.290420] device hsr_slave_0 left promiscuous mode [ 545.350741] team0 (unregistering): Port device team_slave_1 removed [ 545.363211] team0 (unregistering): Port device team_slave_0 removed [ 545.375573] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 545.411824] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 545.521253] bond0 (unregistering): Released all slaves [ 545.620641] device hsr_slave_1 left promiscuous mode [ 545.664523] device hsr_slave_0 left promiscuous mode [ 545.721321] team0 (unregistering): Port device team_slave_1 removed [ 545.734814] team0 (unregistering): Port device team_slave_0 removed [ 545.748146] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 545.782964] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 545.865722] bond0 (unregistering): Released all slaves [ 545.959608] device hsr_slave_1 left promiscuous mode [ 546.021788] device hsr_slave_0 left promiscuous mode [ 546.080633] team0 (unregistering): Port device team_slave_1 removed [ 546.093578] team0 (unregistering): Port device team_slave_0 removed [ 546.104925] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 546.151709] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 546.265266] bond0 (unregistering): Released all slaves [ 546.380023] device hsr_slave_1 left promiscuous mode [ 546.421648] device hsr_slave_0 left promiscuous mode [ 546.481221] team0 (unregistering): Port device team_slave_1 removed [ 546.494123] team0 (unregistering): Port device team_slave_0 removed [ 546.505250] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 546.562094] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 546.664898] bond0 (unregistering): Released all slaves [ 574.647857] device bridge_slave_1 left promiscuous mode [ 574.653449] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.717507] device bridge_slave_0 left promiscuous mode [ 574.723122] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.589946] device hsr_slave_1 left promiscuous mode [ 578.651044] device hsr_slave_0 left promiscuous mode [ 578.690764] team0 (unregistering): Port device team_slave_1 removed [ 578.703198] team0 (unregistering): Port device team_slave_0 removed [ 578.713960] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 578.761848] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 578.855660] bond0 (unregistering): Released all slaves [ 668.256850] INFO: task syz-executor.5:20026 blocked for more than 140 seconds. [ 668.264303] Not tainted 4.19.86-syzkaller #0 [ 668.269382] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.277396] syz-executor.5 D28216 20026 19675 0x00000004 [ 668.283049] Call Trace: [ 668.285652] __schedule+0x866/0x1dc0 [ 668.289421] ? pci_mmcfg_check_reserved+0x170/0x170 [ 668.294473] ? mark_held_locks+0x100/0x100 [ 668.298818] schedule+0x92/0x1c0 [ 668.302212] schedule_timeout+0x8c8/0xfc0 [ 668.306373] ? wait_for_completion+0x294/0x440 [ 668.311053] ? find_held_lock+0x35/0x130 [ 668.315129] ? usleep_range+0x170/0x170 [ 668.319175] ? _raw_spin_unlock_irq+0x28/0x90 [ 668.323701] ? wait_for_completion+0x294/0x440 [ 668.328353] ? _raw_spin_unlock_irq+0x28/0x90 [ 668.332876] ? lockdep_hardirqs_on+0x415/0x5d0 [ 668.337576] ? trace_hardirqs_on+0x67/0x220 [ 668.341925] wait_for_completion+0x29c/0x440 [ 668.346424] ? try_to_wake_up+0xcc/0xf50 [ 668.350548] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 668.356362] ? wake_up_q+0x100/0x100 [ 668.360244] kthread_stop+0x116/0x6c0 [ 668.364182] sdr_cap_stop_streaming+0x213/0x330 [ 668.368980] ? mutex_trylock+0x1e0/0x1e0 [ 668.373081] ? sdr_cap_buf_queue+0x280/0x280 [ 668.377645] __vb2_queue_cancel+0xb1/0x790 [ 668.381908] ? lock_downgrade+0x880/0x880 [ 668.386267] ? v4l2_fh_is_singular+0xff/0x160 [ 668.390946] vb2_core_streamoff+0x60/0x150 [ 668.395197] __vb2_cleanup_fileio+0x78/0x170 [ 668.399663] vb2_core_queue_release+0x20/0x80 [ 668.404190] _vb2_fop_release+0x1cf/0x2a0 [ 668.408549] vb2_fop_release+0x75/0xc0 [ 668.412467] vivid_fop_release+0x18e/0x430 [ 668.417025] ? vivid_remove+0x460/0x460 [ 668.421134] ? dev_debug_store+0x110/0x110 [ 668.425487] v4l2_release+0xf9/0x1a0 [ 668.429257] __fput+0x2dd/0x8b0 [ 668.432560] ____fput+0x16/0x20 [ 668.435936] task_work_run+0x145/0x1c0 [ 668.439898] exit_to_usermode_loop+0x273/0x2c0 [ 668.444509] do_syscall_64+0x53d/0x620 [ 668.448490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.453699] RIP: 0033:0x4141e1 [ 668.456973] Code: 00 48 89 5c 24 28 8b 73 58 8d 41 fe 39 c6 75 15 8d 71 ff f0 0f b1 73 58 40 0f 94 c6 40 84 f6 0f 85 6c 01 00 00 8b 73 58 8d 79 39 fe 74 c6 48 8d 42 10 48 89 04 24 48 89 5c 24 08 e8 b8 ea 00 [ 668.476050] RSP: 002b:00007ffe28ee26d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 668.483837] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004141e1 [ 668.491179] RDX: 0000001b31320000 RSI: 0000000000000000 RDI: 0000000000000003 [ 668.498594] RBP: 0000000000000001 R08: ffffffff817056c6 R09: 00000000dba5b871 [ 668.505881] R10: 00007ffe28ee27b0 R11: 0000000000000293 R12: 000000000075bf20 [ 668.513228] R13: 000000000007c419 R14: 0000000000760408 R15: 000000000075bf2c [ 668.520708] ? trace_hardirqs_off+0x76/0x220 [ 668.525123] [ 668.525123] Showing all locks held in the system: [ 668.531510] 1 lock held by khungtaskd/1033: [ 668.535840] #0: 00000000eda7f1f0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 668.544566] 1 lock held by rsyslogd/7396: [ 668.548785] #0: 000000003d5d9a52 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 668.556802] 2 locks held by getty/7517: [ 668.560781] #0: 00000000f03ca270 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.569309] #1: 000000006f9dbcbb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.578508] 2 locks held by getty/7518: [ 668.582503] #0: 0000000093c67d34 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.590868] #1: 000000006a78d4e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.599902] 2 locks held by getty/7519: [ 668.603878] #0: 00000000e50eec49 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.612223] #1: 0000000072a23399 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.621173] 2 locks held by getty/7520: [ 668.625149] #0: 00000000eed9dde7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.633662] #1: 000000007713e65c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.642697] 2 locks held by getty/7521: [ 668.646739] #0: 00000000081f874d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.655013] #1: 00000000fedcac92 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.663947] 2 locks held by getty/7522: [ 668.667971] #0: 000000003677c092 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.676259] #1: 0000000071ad2608 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.685205] 2 locks held by getty/7523: [ 668.689286] #0: 00000000e573f659 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 668.697636] #1: 0000000081a78291 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b30 [ 668.706673] [ 668.708306] ============================================= [ 668.708306] [ 668.715320] NMI backtrace for cpu 1 [ 668.718992] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.86-syzkaller #0 [ 668.726376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.735756] Call Trace: [ 668.738355] dump_stack+0x197/0x210 [ 668.741985] nmi_cpu_backtrace.cold+0x63/0xa4 [ 668.746536] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 668.751465] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 668.756730] arch_trigger_cpumask_backtrace+0x14/0x20 [ 668.761903] watchdog+0x9df/0xee0 [ 668.765349] kthread+0x354/0x420 [ 668.768704] ? reset_hung_task_detector+0x30/0x30 [ 668.773547] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 668.779090] ret_from_fork+0x24/0x30 [ 668.783014] Sending NMI from CPU 1 to CPUs 0: [ 668.787918] NMI backtrace for cpu 0 [ 668.787925] CPU: 0 PID: 8282 Comm: kworker/u4:6 Not tainted 4.19.86-syzkaller #0 [ 668.787931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.787935] Workqueue: bat_events batadv_nc_worker [ 668.787941] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 [ 668.787952] Code: 41 bc f4 ff ff ff e8 33 64 ea ff 48 c7 05 e4 19 cd 08 00 00 00 00 e9 ca e9 ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 65 8b 15 48 ce [ 668.787956] RSP: 0018:ffff888086ba7cd8 EFLAGS: 00000217 [ 668.787964] RAX: 0000000000000000 RBX: ffff8880a487b0c0 RCX: ffffffff86d78bc1 [ 668.787969] RDX: 0000000000000000 RSI: ffffffff86d7892f RDI: ffff88808684e6f4 [ 668.787974] RBP: ffff888086ba7d30 R08: ffff88808684e380 R09: ffffed1015d04733 [ 668.787979] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000001 [ 668.787984] R13: 0000000000000399 R14: 0000000000000001 R15: dffffc0000000000 [ 668.787989] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 668.787993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.787998] CR2: 000000c4270af000 CR3: 000000009287e000 CR4: 00000000001406f0 [ 668.788003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 668.788008] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 668.788011] Call Trace: [ 668.788015] ? batadv_nc_worker+0x20d/0x760 [ 668.788018] process_one_work+0x989/0x1750 [ 668.788022] ? pwq_dec_nr_in_flight+0x320/0x320 [ 668.788026] ? lock_acquire+0x16f/0x3f0 [ 668.788029] ? kasan_check_write+0x14/0x20 [ 668.788033] ? do_raw_spin_lock+0xc8/0x240 [ 668.788036] worker_thread+0x98/0xe40 [ 668.788040] ? trace_hardirqs_on+0x67/0x220 [ 668.788043] kthread+0x354/0x420 [ 668.788047] ? process_one_work+0x1750/0x1750 [ 668.788051] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 668.788054] ret_from_fork+0x24/0x30 [ 668.788671] Kernel panic - not syncing: hung_task: blocked tasks [ 668.976968] CPU: 1 PID: 1033 Comm: khungtaskd Not tainted 4.19.86-syzkaller #0 [ 668.984336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.993673] Call Trace: [ 668.996252] dump_stack+0x197/0x210 [ 668.999868] panic+0x26a/0x50e [ 669.003056] ? __warn_printk+0xf3/0xf3 [ 669.006945] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 669.011956] ? ___preempt_schedule+0x16/0x18 [ 669.016351] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 669.021801] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 669.027239] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 669.032687] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 669.038131] watchdog+0x9f0/0xee0 [ 669.041579] kthread+0x354/0x420 [ 669.044930] ? reset_hung_task_detector+0x30/0x30 [ 669.049756] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 669.055381] ret_from_fork+0x24/0x30 [ 669.060876] Kernel Offset: disabled [ 669.064542] Rebooting in 86400 seconds..