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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=""/54, 0x36, 0xffffffffffffffff}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='oom_score\x00') r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x5a1240, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x200, 0x1000}, 0x8) [ 304.677513][T17305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14718,uid=0 [ 304.701553][T17413] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on nullb0 [ 304.760879][T17305] Memory cgroup out of memory: Killed process 14718 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 304.833986][ T1057] oom_reaper: reaped process 14718 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 08:41:58 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) 08:41:58 executing program 0: unshare(0x2040400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syncfs(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x208000) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x37ba, "25eeebf4343477ef945e8ae759bf90ce9df906b46ee61c5008708f5d80d59ed1", 0x4, 0x4, 0x5, 0xff, 0x15, 0x0, 0xfffffffffffffc71, 0x5}) semget(0x3, 0x4, 0x100) semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x800}, {0x2, 0x0, 0x1000}], 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) [ 305.116506][T17548] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 305.245532][T17548] CPU: 0 PID: 17548 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 305.253551][T17548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.263632][T17548] Call Trace: [ 305.266933][T17548] dump_stack+0x172/0x1f0 [ 305.271273][T17548] dump_header+0x10b/0x82d [ 305.275722][T17548] oom_kill_process.cold+0x10/0x15 [ 305.280836][T17548] out_of_memory+0x79a/0x12c0 [ 305.285508][T17548] ? lock_downgrade+0x920/0x920 [ 305.290363][T17548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 305.296627][T17548] ? oom_killer_disable+0x280/0x280 [ 305.301830][T17548] ? __kasan_check_read+0x11/0x20 [ 305.306861][T17548] mem_cgroup_out_of_memory+0x1d8/0x240 [ 305.312402][T17548] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 305.318043][T17548] ? do_raw_spin_unlock+0x57/0x270 [ 305.323255][T17548] ? _raw_spin_unlock+0x2d/0x50 [ 305.328115][T17548] try_charge+0xf4b/0x1440 [ 305.332546][T17548] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 305.338450][T17548] ? get_mem_cgroup_from_mm+0x139/0x320 [ 305.344089][T17548] ? __kasan_check_read+0x11/0x20 [ 305.349256][T17548] ? lock_downgrade+0x920/0x920 [ 305.354207][T17548] ? percpu_ref_tryget_live+0x111/0x290 [ 305.359839][T17548] __memcg_kmem_charge_memcg+0x71/0xf0 [ 305.365298][T17548] ? memcg_kmem_put_cache+0x50/0x50 [ 305.370490][T17548] ? get_mem_cgroup_from_mm+0x156/0x320 [ 305.376032][T17548] __memcg_kmem_charge+0x13a/0x3a0 [ 305.381145][T17548] __alloc_pages_nodemask+0x4f4/0x900 [ 305.386527][T17548] ? __alloc_pages_slowpath+0x2520/0x2520 [ 305.392239][T17548] ? __pte_alloc+0x1b5/0x310 [ 305.396828][T17548] ? copy_page_range+0xef4/0x1ee0 [ 305.401857][T17548] ? __kasan_check_read+0x11/0x20 [ 305.406905][T17548] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 305.413156][T17548] alloc_pages_current+0x107/0x210 [ 305.418281][T17548] pte_alloc_one+0x1b/0x1a0 [ 305.422882][T17548] __pte_alloc+0x20/0x310 [ 305.427221][T17548] copy_page_range+0x1520/0x1ee0 [ 305.432164][T17548] ? mark_held_locks+0xf0/0xf0 [ 305.436940][T17548] ? pmd_alloc+0x180/0x180 [ 305.441361][T17548] ? vma_gap_callbacks_rotate+0x62/0x80 [ 305.446923][T17548] ? validate_mm_rb+0xa3/0xc0 [ 305.451599][T17548] ? __vma_link_rb+0x275/0x370 [ 305.456368][T17548] dup_mm+0xa67/0x1430 [ 305.460618][T17548] ? vm_area_dup+0x170/0x170 [ 305.465225][T17548] ? debug_mutex_init+0x2d/0x5a [ 305.470176][T17548] copy_process+0x28b7/0x6b00 [ 305.474863][T17548] ? __cleanup_sighand+0x60/0x60 [ 305.479834][T17548] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 305.485647][T17548] ? __kasan_check_read+0x11/0x20 [ 305.490940][T17548] ? do_raw_spin_unlock+0x57/0x270 [ 305.496312][T17548] _do_fork+0x146/0xfa0 [ 305.500475][T17548] ? copy_init_mm+0x20/0x20 [ 305.504981][T17548] ? __kasan_check_read+0x11/0x20 [ 305.510093][T17548] ? _copy_to_user+0x118/0x160 [ 305.514854][T17548] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 305.521089][T17548] ? put_timespec64+0xda/0x140 [ 305.525857][T17548] __x64_sys_clone+0x18d/0x250 [ 305.530625][T17548] ? __ia32_sys_vfork+0xc0/0xc0 [ 305.535481][T17548] ? trace_hardirqs_off_caller+0x65/0x230 [ 305.541210][T17548] ? trace_hardirqs_on+0x67/0x240 [ 305.546337][T17548] do_syscall_64+0xfd/0x6a0 [ 305.551122][T17548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.557021][T17548] RIP: 0033:0x459879 [ 305.560918][T17548] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.580521][T17548] RSP: 002b:00007efc9961ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 305.589037][T17548] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 08:41:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) sendto$packet(r3, &(0x7f0000000080)="2177732280c864dfdc6f8b37f672178eb0d131d7997f37dfe663549b51221e6a6268549419ea3f30789338ebac7de1f9fdce3e73a8434711f1510a9bf1e6000732ec903d471d33b1409a349066f512c669051044e158a791dce5809088c29b99a96e5143bcded38393b6dfd305185d32265ddf04c8e6c6dba5b87ba995ab737c34c7438423d2498192205ea6d2f127bb1cb359947503ec557938cd26b6f718734cbb16dfe63595441d76f741bec8b6", 0xaf, 0xf973f66bd4e09907, 0x0, 0x0) dup3(r0, r2, 0x0) [ 305.597012][T17548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.604981][T17548] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 305.612987][T17548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc9961f6d4 [ 305.620968][T17548] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 305.763628][T17548] memory: usage 307156kB, limit 307200kB, failcnt 643 [ 305.791965][T17548] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 305.818275][T17548] Memory cgroup stats for /syz4: [ 305.818390][T17548] anon 293650432 [ 305.818390][T17548] file 184320 [ 305.818390][T17548] kernel_stack 2686976 [ 305.818390][T17548] slab 6344704 [ 305.818390][T17548] sock 0 [ 305.818390][T17548] shmem 0 [ 305.818390][T17548] file_mapped 0 [ 305.818390][T17548] file_dirty 135168 [ 305.818390][T17548] file_writeback 0 [ 305.818390][T17548] anon_thp 281018368 [ 305.818390][T17548] inactive_anon 0 [ 305.818390][T17548] active_anon 293654528 [ 305.818390][T17548] inactive_file 0 08:41:59 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "efe5f9c8e1889492d3301951d7014b564e3e6575"}, 0x15, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x1) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d0", 0x1}], 0x1}, 0x0) shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x756, 0x5}) r4 = shmget$private(0x0, 0x1000, 0x1f91, &(0x7f0000ffc000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e) r5 = shmat(r4, &(0x7f0000b43000/0x2000)=nil, 0x3000) shmdt(r5) shmdt(r5) 08:41:59 executing program 3: r0 = open(&(0x7f0000000780)='./file0\x00', 0x80800, 0x40) r1 = syz_open_dev$video(0x0, 0x401, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') r3 = dup(r1) r4 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x3f, 0x4000) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-control\x00', 0x232000, 0x0) r6 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x6d, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x8000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r9 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, r9) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vcs\x00', 0x2000, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r13, 0x4070aea0, 0x0) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/ubi_ctrl\x00', 0x4000, 0x0) r15 = dup(0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8}, {0x8, 0x1, r15}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x60000005) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r16 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) fchdir(r16) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mkdirat(r16, &(0x7f0000000180)='./file1\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 305.818390][T17548] active_file 0 [ 305.818390][T17548] unevictable 0 [ 305.818390][T17548] slab_reclaimable 1486848 [ 305.818390][T17548] slab_unreclaimable 4857856 [ 305.818390][T17548] pgfault 13662 [ 305.818390][T17548] pgmajfault 0 [ 305.818390][T17548] workingset_refault 0 [ 305.818390][T17548] workingset_activate 0 [ 305.818390][T17548] workingset_nodereclaim 0 [ 305.818390][T17548] pgrefill 343 [ 305.818390][T17548] pgscan 441 [ 305.818390][T17548] pgsteal 37 [ 305.818390][T17548] pgactivate 297 [ 305.942120][ T26] audit: type=1800 audit(1567759319.706:53): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 [ 306.011557][T17548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17303,uid=0 [ 306.090900][T17548] Memory cgroup out of memory: Killed process 17303 (syz-executor.4) total-vm:72840kB, anon-rss:4252kB, file-rss:35780kB, shmem-rss:0kB 08:41:59 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:41:59 executing program 1 (fault-call:5 fault-nth:0): r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:41:59 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x40040, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) bind$rds(r3, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) fcntl$setown(r2, 0x8, 0xffffffffffffffff) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000300)=0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x101000) creat(&(0x7f0000000100)='./file0\x00', 0x10003) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x25}}, {0xa, 0x0, 0x0, @empty, 0xfff}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x1f}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x40, &(0x7f0000001fde), 0x4) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0xfffffffffffffffd) gettid() 08:41:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0xfffffffffffffff8, 0x10, 0xc362e63b3f31ba5f}, 0x28}}, 0x0) 08:41:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="54020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x10}, 0x8001) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80000001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000480)={0x0, 0x0, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={0x0, 0xc0000, r4}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000500)={r3, r5, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000400)={{0x1, 0x0, 0x2, 0x1, 0xfffffffffffffe00}, 0xf5bd, 0x6}) 08:41:59 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x282, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = geteuid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001600)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001640)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000001740)=0xe8) r8 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) r10 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, &(0x7f0000000100), 0x4) r12 = getpgrp(0xffffffffffffffff) r13 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r11, r11, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r14, 0x4070aea0, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r15, 0xc0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)=r16, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000005300)={0x0, r14, 0x0, 0x1a, &(0x7f00000052c0)='{vmnet0]bdevwlan0trusted#\x00', r16}, 0x30) r18 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r18, 0x4070aea0, 0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r19, 0x4070aea0, 0x0) r20 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000008dc0)='/proc/capi/capi20ncci\x00', 0x200200, 0x0) r21 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r21, 0x107, 0x12, 0x0, 0x0) r22 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r22, 0x107, 0x12, 0x0, 0x0) r23 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r23, 0x4070aea0, 0x0) r24 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r24, 0x4070aea0, 0x0) r25 = openat$cgroup_subtree(r24, &(0x7f0000008e00)='cgroup.subtree_control\x00', 0x2, 0x0) r26 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r26, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000008e40)={0x0}, &(0x7f0000008e80)=0xc) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r28) setgroups(0x4000000000000063, &(0x7f0000000580)=[r28, 0x0]) r29 = gettid() ptrace$setopts(0x4206, r29, 0x0, 0x0) tkill(r29, 0x3c) ptrace$cont(0x18, r29, 0x0, 0x0) ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r29, 0x0, 0x0) r30 = getpgrp(r29) getresgid(&(0x7f0000008ec0), &(0x7f0000008f00)=0x0, &(0x7f0000008f40)) stat(&(0x7f0000008f80)='./file0\x00', &(0x7f0000008fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r33) r34 = gettid() ptrace$setopts(0x4206, r34, 0x0, 0x0) tkill(r34, 0x3c) ptrace$cont(0x18, r34, 0x0, 0x0) ptrace$setregs(0xd, r34, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r34, 0x0, 0x0) r35 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r36 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r36, 0x116, 0x7f, &(0x7f0000000100), 0x4) r37 = getpgrp(0xffffffffffffffff) r38 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r36, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r35]}}, @cred={{0x1c, 0x1, 0x2, {r37, r38}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r36, r36, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r36]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r39) r40 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000009040)='/dev/cachefiles\x00', 0x18000, 0x0) r41 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r41, 0x4070aea0, 0x0) recvmsg(r41, &(0x7f000000a740)={&(0x7f0000009080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f000000a580)=[{&(0x7f0000009100)=""/11, 0xb}, {&(0x7f0000009140)=""/19, 0x13}, {&(0x7f0000009180)=""/245, 0xf5}, {&(0x7f0000009280)=""/82, 0x52}, {&(0x7f0000009300)=""/120, 0x78}, {&(0x7f0000009380)=""/4096, 0x1000}, {&(0x7f000000a380)=""/105, 0x69}, {&(0x7f000000a400)=""/123, 0x7b}, {&(0x7f000000a480)=""/216, 0xd8}], 0x9, &(0x7f000000a640)=""/248, 0xf8}, 0x67bc0f2342a8dc82) r43 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r43, 0x4070aea0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f000000a7c0)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f000000a780)='-Jsystem\x14GPLem1md5sum\x00'}, 0x30) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r45) sendmsg$netlink(r0, &(0x7f000000a900)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000008d40)=[{&(0x7f0000000100)={0x14fc, 0x3c, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x56, @fd=r1}, @typed={0x8, 0x7e, @ipv4=@remote}, @nested={0x27c, 0x7, [@typed={0x40, 0x3f, @binary="dd3d2642cec134929c356fef47c7bf5f8f3c79f3b08118cc706423af270515518a71741545411ba5b11586929e75004a6bc55ed53915866e5dc550"}, @typed={0x8, 0x92, @fd}, @generic="09a591bd0373969f7e8c856ab4b72a425386f91688ea39da141c77f15e0433d4649de53f9cd15ae46e2d6c1c5f7694de8e28008f7dedbe7034079cc24ca644cb5a270a29ecddb5b92514f58835567faf993871229883cbca0005b5ab6eff5483380d1abffb4d06216f6dbcf00e0db23b1df3a227172ace34184d90ba9c977b4ee9f87d4583a061a1192ebe398d29de1fdbdbcacd67eb82476a85e2f2e2e9a154df177eff2736dda188b0cc19e814cf963d33d5f0f26cf4eba25d7e1638923ee61529cfdc5fb697bcdbf864dd0a8b65a84b6f6733c9d2", @typed={0x8, 0x4c, @pid=r2}, @typed={0x14, 0x46, @ipv6=@local}, @typed={0xc, 0x35, @u64=0x1}, @generic="20cdc86a847e29ac84fd0f5230df0e8cb72eb677b6874954ef6226f92242ab8db764becdc9dd553ebb63f04adff0e2b851826a0c943dfdaf63f17d3b343926d6d2eb151dcc46d2a0118232cdd067ada88dca4a745b4540fbe336971cc55644247def4091e13a07fc2ee89d92a84f198f2de3eb2aad13a409946d8f34a62175388c5b8fbc5338b1f2826c158894d55458ad35e580d5b0e89557ca4a7e7a33a2bce8130ce03960260da0bdbb", @typed={0x8, 0x5c, @pid}, @generic="e134927dbf11aa0c29cd6ad87e47e8bd7de2b7b300ed1d06dd25fafc85349da086fc78575ae9475db1348482142d08030bf4270009c33e13c753e39e7a412b3001ef3e3d87200e2781dc94426b516253bc985d3f31b56c546064a0f46e7174435c9e8eaad2bf0dcffa26dbda37705904b3b06b9757f1ced20a70e34f6ff4"]}, @generic="5b103dc51ccdd7f0c7d2e54c910a87d5aea276b1445d87d8573ffac6eb771b28c38ad4db43470b57cfde0ffd6a3d36bd91324d407eff920cb782403e3ad0928583d1452174739b1057470c8938e7239690c3230e33a8c1632c7e9fdff6bddd9320b181b30a12d24adb080b066845f003bca113b76e87e818c18ca75f7a91d8cbd551e304e6aebc88fee5a3a4a7423871845ca9a78e45c259ba870670fa95d2b5fa273b54628e37349c5f872664", @typed={0x8, 0xfffffffffffffff9, @uid=r3}, @nested={0x11a8, 0x33, [@generic="ccb34ad86864d7df30a97c0bb08400f3cdd5a937787d8c75bcf6c871474cc541ab7fd41abfb2c4d2587c6615b3c38fb65187d6a5e3ced47df6db299ae1fbbcb16a30e785ee5515f1716a6422dbe2100ed088f212c5a7ee9d8822d11225f15cd669a74be9876e58a299609272fd820e572863eccd6330e0d3dedaf7e2bd5fd695d87ffa9ec1dd6573b4fd72f7dea8a59444bced29645ecac9eafae01fbede2f725140f078f0aa63875f2940d45c46a5214906ea9fdd0dc812e538355dc879fafb94a48e622f6b74256b7232c99ae6351189ac3814d26c18a6d1e234e9d57eadf239f9f367ab5b4ad07c94019774b70a4c471d7d2f9ef8f7836c9d2bf03d921cf44d750c733d790240d3db8401a7bc592b61d2cec8b99df7549e415389357deed97214be66b45a343f76a914ce4f6d47c1c7df1d75a0bc2b1b2c41c4c4c6e74811cb7f8fd9b0d7f6d586ba1a3d6234de5b2cac5c1887dd94527991788ba4b877537921ea45cf5e042ece3d8f26738a925044db1b8f4625fc0375586e626d245ee88e98bcf180139b772bcfa9c9ec2e432504cc33b74c1ceda339d0ca4ae7a57a8be1d6c674ff1301417a2f5868f7151e29393db80ca0b4353763a2714b2b2b25b51eb343205d6e4016526337c76a7ffc3a3acf7421e8b23db946e0e6cdd9f22e419bc1945baa62303bb5058af54d01fd4dd12fb7d1facb0dcb8386a6d3e24fc01552b0626e325a990a3bda241308ff1fc454c706e53e13cae645b98a4089a5a1fdcf0815063a3efaa1fc2c8715e2ef05f54a6da9911caf826f93d8384b02ebcccee82c3397f1f0860b5e0a7276a65a0eaf7d800276f53acb450d6d1fe101f6a1ab0e7684c57c5ebdc5fcf59d280fa5ac4428235963c25bd3c12496afd77338cc3dd019f5db420af8557fdc6d2125fcdbaf6f643ea0bf5590925255698ac5a9dfae56ec51220c610e5f0d9df3a62cf7b44b13d3e98b1cedb089634c417e5a54ec88d084263f7af957ce98f5156fce3a834d180a81a7503d421ef14946f5274014d4b9346d35fe4e26f2b7b9d7c4767f8772fd88ebf9ba742b1a36962448d47d744f8ec2a7a77b5e536cf5c45b031a8770091b3d4f3f7bfa6c7f427038ec8d03fbb368e22a3650b239365877822427bfb72baa081ce77352e4cc8331165d9490e23eef3dd454ec677ffe04946fac020c3714ec655bd18fe874f3a98afab009c24f5b2489f340eff87a9e21916fc69d5b21037ddc3e3e6273b35b06507ed3a6fe7f1e58e78a0ebef79a4a6a3864ff44bafa941cee8e95986d25259744a034096e0da62fff3eee77b62b174d6c93ccbfa3050c5ab204d800a1b487f08628985fa34b2d6dfe19b8ea211b7ec7f273b409eca53163ec146c6577fccc26075882932c2211e6d5fb01bbecb46dee9a1333246a6619a0edebb952ecf15fc38203be6af00a6848c4fdeb0dbbb5a6498efe1c5ef2a6ad8c46cf485bb095b60f6610872f3f3c8fbd5f5dacaebc10bfe27a38a36c893d3583dc0313e88e6c7f163e455c16550053ec3f64c649a38d99d20d27645e92ddb46ea60ecf20f9330385ab6852fcc3228ac44ed48d2c29f3b0cdce9e03af2987a3232b6e3253badec058abd1f96c3f58f10b93e3787c5d14af888e6661c3abf3c98c0178a6bd40672e22a38467ea1189e2c0508680861e79842f0abb478e181d8b273175332943fb38846c4e95c2604f1382de778136bd66b07d8eaf373e0be77451c661dc14bee2401477c9e6edd529764a58c856765dcc7ca994287e7e6fdb92752475bb574c7e07c35724d8dd0319bc05f20ff81a614bfffcb62930b61e3b1d3b315019d8bd4519f28b0c58704b7b7732b2854941b27f2eac24d6dec1b28d55993e07aee9f0da0108286f5fe4815ef769f01202610e802439ee02bbdb9dc8fedcd8381f3b75bec430f656fbe1d2e16b76154d8a2d746628c7e0ae83d96dcc3ec7148e4f8899a8362006ba2b07aaddef864e61bfe48cf13738dad0f8b8246a03fa287a56ca612998e19febfaf1a5eae3076056650e3d3f6bc3924f8774212675481c211568fb11220e2abac509de7442141a71652ca4e21cc9f433ecf0e463ccf0c11ddaf4e9196d00fb615636bd2a3f5bdbd520d3af084d7879760ea0e7694664d8ee60c39c8264c149c832ec8c160b91b413ed728263cc745624e47ce210736f0aca1099cfe83c86244f88d3014ba81b55ea3a3af43c0d0b66401544167cde64461febc13d7fa63504a6690ae3c3732b9540c29b9e5ec89c1b5c93ca4a9affe455a964ee536e43a63cac6dace50511c3d9c345daf11b08522e13b5ee88806db2455ea93bc32a758fd767dec316fc899d25c03c0b98588ab059a927b544df60cc89614a4d510c08757e36e74eb97757425eefc4fa58fafba609034a8dcf5958891630775f4140c4162be44c4a96acebc41ca94e3f5cabdff0ad2e69ee9181976e824cc5200a643ac89bed9f2b49d56f5fd33999370999a2fb675c25012a86b641d48293613add2af0fde0611f29ca2a96ea58757f3d21b16e7c90574a0a183d3d07e73c316dbbe838c3ebe644cbf69252e78b01cd007f65ca355c8d94bb769d6f7d31fff81d345184d54c2deb6e8cc6372c9d96488eba283a5d8225d9e6763997a151970e19a62120c1f43997e307a0f1f44ec4c539526afacf6c638be803414313f39c03200a0e945f8684006affb320388f9f5bbaf1d69965b62890506c95c7a4d4aa2ce69a60b31fb88da8133b4950de8bc359ce7545f67839128516b853307b7d2a39b91d2bf2fc04e51c6e3ad06ed7a15debc56a07a5c5afbeb916d474ff536c32e7e792cce5abd83513cb8007e5cf42315211419c149994a6c3964cd097da2a04fa60a27b41e7624ecaec0d8e17973990d0a1a6a1bc40845483459f1346b800c170915f30dc28419a35be4c2c57af6d13e0138a84dc6bafdccaa898e6546fc180ebe66d80612c8b924abefbd178459e04ae016aadcafbe3ec1555b4f19f258d6133cbf27b7203906eb2eff208edaa8ec31a71e61b7844a5701ba75777abbc04e794ae75d88f49584065d7911f972d4d2e913f2d1574d475cb9a7c4864fa402351dddb6126db40cfc00c54c3972b08676f498baf377c10b383d84312209efa437a16c7111c82a3e5e6f88b277b2cf4c0581b54c26f5906b2f36d9ddced16cc80dc20153bfadf0ca372d4b5a07299c08f78ca407242258ed38d79f32c4d91471a8f825e19b71b4b80e25f3bee8e2e869e255df55c48844531ef1d234596a5470f99d11065bccda18cceeb2f316330f006401d1c7050dd0a92302bb756baafa4748e1e444d5320ca0bdb25a018f8ba8d09f88a858868e8bd518dbcd1753ca6fad8ff3f8c2b5aaaab5c0316e0804adbf79a0c9e547d61f7025bda78cb2c2f10d5e6c030d55a1ede632bea3b113aa95e37bdd1e71314400eecd7ecfbdb74019cc82c464bc691b2ebc002613926437f9197d76cdf98039b845e66a8a7838e5b387c9f7589efacd0f870494b66dfe40315ecbf09b369320cebef0670cefbcc6b8e2091c478256356cfe08ab35d6d51fd25a56cdc9711ecd55f953533c2404b68176d6bbc5f65a12662de1c7ba0b53c7c2b1d0a735df8a40f2f555e05f9178e1e09acb1d7df7a204e45892b4d5d58f4b36d46a5fa5e3c180b827c5f45e4bfa330b69c22ee27b0e956fcb540a6fcacbe3b8af1d6c69f5fe161ecb470cf717171b0d2e59203592c00ca4f4a0c1c7aca608cd4e08ba8a0e52de89b2effdf49b5f3c702dcb90b9dfe855989399d9099c5f784de7de9c6d3bb5a368a8d3ff693d3f88e191fb7a9b85494756d9a7f21aaf6adec463bcddb47b5735badcead18b6ed17e2a51ef80a37d213759f14cc1998998b7c05c740bae76f0b24159de165f3be568fbf19d453b82942c155442f6c485f1a6498dc4e2204a63bd72b45ab2530a6d14b3d49f74ab7f837c8162f56428886d877707eddb4470e9d1d361561f4bfb3d6db776e97203b6f1427b2153b56902193bb13ca04cc2ca1ea7a54f77d98eb3a450a80ee23c50f9a36f71725ee34fb85323df14615ed2e99f30fe4cf43ba9928f95082a4815925b917fcad6d97d00a60009f36700bf0f9b674851080392940bf6005d4e3795db906a2fa8927fceb0f7a1923b7091cd7270e4f62641c6ac948ef80a728530c070b200e7a0195686597abcbb21c2218422e41bd7c33bf283cf3203354e71e3a0c6773101e060ad1c3f83738f3da402b975fb4330b78faee45e5c4c89c51ec877190418de98840881c772d68b5c67debbc67cc6951ae2d302b47bc61b72cc52399e8955826982ea6e54c732662e314b5d7e2bb94bc267dd8fdc516e111f410f366a4f4df958e7f61c8d4a3b7ebc836784a8a6d7b0017b9860a515d8c21dba48f7df290f7ba5adfaadb053c376bafedcbbad6fc6f968d4d59b07447ed49ab5c037453cfc055ed014ae46fd6a5256d8d18df51cac946510b7390e8987f094ce748ea6a1a04b90e3bce96813472ce4b79ddd899d1112476e96de1aab3abd0c0daf7448711644b18a4c26676072a0b99fe19ab67ed82fb2f7265dad6085b9e98af26726f2e0c0dc63fdba20654ac073472c7dbf2945cab4c06ea1b79ecfe3ad0944bc895e40ebd45168b880bdd48a61a3bb35a2cea781876c8371bf06fbc81d47e26a411fc42d7eb2d4fdb22f5a9a7f2faa06b4f5cf106f546465dd36356cb81dc1feda9f63134d0f39770965192e7d834cadad5af18f43370e554872b3376059d8a3073cc2fd1444725ce6a6cc125fe2ac793242d6823ff0604db81d78774b4a73783b30ec485c5e38fe1374dbe5dc888104b83f0edf66b4ff50a9746b21c9404ad534e66f27c5b8d6204b27b5492d451b4758b559459b18bd4b9d0c63ef3bd6e3eed72cfc92949651d6867dcf09c16d5c825de7a20491a5b5e5c8e6f57adb01b583f657eea3069c6436f3bd6a8920fa39f2028e3b41d8dff691b61665981ebadcf80e2948fe6d249f1fa959210b643ed6b73d7e44672d9afdfd3778c8471f92643bf7b3b6579aedf2dcec7bc22d9a4edc154e6cf787696136942fb564990c62d0708de5f7af711c70a3f940b57310cac737ea2dd01aa2ebf397c345eede4d360a55a1c6398a135bb8d5c81efe0faf4f159f1fddd1dddfe74726d8bcb24eeeb21c3af297c540051a6eb504ea73a6b896a7e1a3e48cbea029de055f7185eb26ebbeeb43f62857c76cc18caad4e327a530c4f38c0ca660935e297b3623e9d2f3663cea705830fee385c66daf60831eee1882915e9e2655677a21692b054269cf81a491bf59ed00e4a653fce323394c53ac8faa90a2ec53c3bdc572b08bae0f47a588e0a3a2d9dc2595c96ea50d435a5fac8866952f4b806cf402b9cad4063d0903b31f3843b305f179c1555dba2971e7013d2abadfd3795eb13ba04d6225aba88ca603083f2dc3fb672b56f96a85e7d038d09f99d3a0bc7fefbe2832c934628c557750862b09a46c0ba4744597d05072087bbd245947b0f696cd67dcb3e70b4791a956bed40b5090a4d4f9563347217e98b8c120c1a834a479703bfb4a573bc47a8572710707c9bde990d76a68aff36e73896c4645856b9ec5b209ff5e1c53717dd3dc304ef9caa505bb0012024639b59fdf6f2d46da60ff53d37e8b17d7ce695180bdd24ae672b3a07844ddf6fb2ee240865cc0ce3943c5d406fd714e45029c9e81c490ffdab21ca9de109a75c4cb4452fcd1960ce874f4e2d1667b18ec7f21439b6f8381c1e026beda892799edc7a", @typed={0xc, 0x63, @str='&-user\x00'}, @typed={0x8, 0x54, @uid=0xffffffffffffffff}, @generic="1437106a3f1f8e16d6f029492bd30eeb8d2c21de10eff677163c49891631ca4ceda92374f6a08ebed1ddeeff2e6346360dab0d2aef973a9d39ed1714a23a6f7b3a66b64b1c73904bebacc53945f0946b728611941151d798ca0cd67f68ba26f905111aab5b171542d5946fd3978c93b228fcf98b7479b8a28ed5dbb92971cf3aa022cd9a1fc3c93b", @typed={0x8, 0x66, @fd=r4}, @generic="e8065013324925ef996ac81a5c7b653e2120aa13bda42f925f0b08760a1d26475fa3351920dd147606e00361514347448c821714d6d39d6fbdc0acb5070c6fe37da97a3e4f9fda9e7395a4827f59e79f3ad494ef7456ae3fb3cfaffa442ad75af78a1034725e66efd4697db35a8bb0bb732fc2eb3325b6b2fa69c6d60adeea0b952412b13c61df4633f01e3c8ba3b8790cdac548254f871d083b110bf6696068fc5f12000ef3344440f93daa9b11c094a8a0df026af36e16a66dbed2e227f3492ac9c64ee931a67e4e0f90f3d5032b10349cd7ddc389aaa058db66a25c6ebfdb9c8f5a525ed947a40c63f74b", @typed={0x14, 0x63, @ipv6=@loopback}]}]}, 0x14fc}, {&(0x7f0000001780)={0x3730, 0x10, 0x100, 0x70bd28, 0x25dfdbfd, "", [@nested={0x117c, 0x51, [@typed={0x8, 0x1a, @u32=0xfffffffffffffffa}, @generic="15fffeeb7f768072dc25cdb020573cb4637268abe0e5800e07ab40447fb3fde49db98aecc912c1861b", @generic="c9ad9c29cf5fc8998e5fddf9bc8139437b110f1fd2590f2783c1732c7d825b11109e075ebc02e7fc6fb85e8f0593f43d024896dc3ebb6db2fdaa5dc8aa747efd489f", @typed={0x1004, 0x28, @binary="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"}, @generic="2e7dc358ae85d246d4cc70bfd9cfc677d2bb92024ea06a227a146ffc0062033b37a85a315d9c5286446f9010aa89e4b47782c46838630b836dc9c61a23acb8ded89dda98e7e38b0df475c3414b07fb2051171235968f66fee9aa75591d6dd3007e1a3c78a838625c03ee6c5362af8f1b8a525ddd6854fe28969ba5a42cf4669288f95007814f708a63ff2384e365945c3b62ee97741b0f6c29eed2a5bc379e0741db39392a39cfeb8078f400967d1f4b7e501368a0dcee2e5307b9c64fa3d30ae44406297a7be51de4e5c1e7d117cbe22308e02796c043e6855289ab", @typed={0x8, 0x84, @pid=r5}, @typed={0x8, 0x7, @pid=r6}, @typed={0x8, 0x5e, @uid=r7}, @typed={0xc, 0x3, @u64=0x4}]}, @generic="2f82809ca4583b413ab7c9df62e4a7a863440ac344be71c7600c444b982c0f5fdbb9b4d4220d8034", @generic="ea83ac103f5d9eee6c99fe7afcc72e125c375c18b04cd023dd4e953e4f0716a9107319e675d0be3ddb0ec364afdb1a108bfa46bce76b354a2b22c386c32ca9a8fdc8e5d006da748f4d3e19228b09670b59c357fbe402652442966337f72f462d619da4113950bc0d8a568a410d45f6b15f92", @nested={0x14c, 0x69, [@generic="04ebda648bb7a70b65d0e88b988b95a46980", @generic="5f2d11cd0f52775b4bcc61e2c40645c443e7abdc08ed05d4bab2c01ca35db4d03e2c2c22d04c181c1b4aa411ae2902f1c069070f99190944d3a89cb561c53c9341391786497d14866d827416065b06d4e6a6f5e408d69351826ce9b589fafedb2b305bd5cdacaac71f74a04b5443fe48cd1ff43a9360396a099cc4b6c689173b6bf28f6a5fba3afa789e8a9d212842f74ea778e65500307a273bd109949562a09e76634f8b2d9de29836dd9b88edcbc6f9042cf67058f90d9da1", @typed={0x68, 0x2, @binary="38ae8cc97081e08c1f807a9443d7fd2ddc1b84d06f35e4290dd955a616140d1f4cbb6a148f534d1b524f7277cfcf55a5f96072a800296001b2d6d8c2be5505c52ae751783c41ad7696953cd5f4ae3ad0df8ce38152e8b1d408a6e439d0e663e747bcb102"}, @typed={0x8, 0x24, @fd=r8}, @typed={0x8, 0x12, @str='*\x00'}, @typed={0x4, 0x65}]}, @generic="368c7dc2923d6f40fdaa2ee83edbc3bdf20f908eaff33b74125dc172e1760a15cc5c48bbf6a9d5ce45358fe74e90ca55", @typed={0x1004, 0x18, @binary="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"}, @nested={0x10c, 0x7d, [@typed={0x10, 0x3e, @str='nodevem1\x00'}, @typed={0x5c, 0x34, @binary="c6d8ddd42015a406cd6f3d85c8399c3723f051eb02add174108e86d0fe0d1659ecec5aa5d72faf03a1be0cc99b9b7f36174b1fcdf4f5abc6cad6df7438ea0370b1cab9123a2a300c1ca0a14a19f3a060304c5cf3ec5e2b89"}, @generic="ca0a90a91eef8b8a24ba9c8b8b1cf2fe35eeca35b68e944003907d8ac05fb6f962198189e3827b37", @generic="84378f9bf013d18ab0feb4428cf4453480735ba2a27090a671c9ca7e3c2b3f6a602306fe1a79aac27283a26f5e4676d995efe5fea3c714ebc2e12d67092163a6587515c6529b0ac639f969bf86735690d3ca57418c78f636ff6916487b0b724e2f38ea798389c5fdeaf0494c881e01b2b3a0ea"]}, @nested={0x1200, 0x3a, [@typed={0x14, 0x8b, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="8059bfba26204eb0394f8573c25d714c9e8f9dc39b4c0c0daa43efe1742b2c771ce2fa848dba77aca3ed36363e415f4fa921e742b8545236d1d147cc30017b3a568149c13fdedb9b5de7d0ade8e39e92c9a1abd20d305b0a0336cf65e0f8c2e27f9710104285252cb670779896f2327ce87a89f8242992cf1c7ae6c5fd14bb5ffa4720fd6df2369e1f1957b090d914945b15a57d02190aa4828dfc92a524a7d8b381c339df963936e431a6103754184d1e6b0350ca1a53721f4bf2ce0c2e8f3620f84fc005850204e72912437c49460680944df455c59a16be709dad9c26f7b5427a7312189a4d067a86c953967f00e326adb12f15a28ac7b06ccfbf8a56b031443f53f74b4eb53ca3d13128d1f0583d5a691278213fb1cfa7ba706ed3ebd568369882e9845b3693a5b5e745665efd499d2db071a9bae18165f3eb07d3ef98a87fd5499dca51f36a3529971fa9052191de5d4fb9ffc5a61437940bc0ffd3e54b633db13959de2f68205c23bbc085d0f2928239ce1d0c21c1abed88c2b863e72828ae4460d899617dd28d2bb17e104fe5900764c19fb70c2a3f7f49a30d84c572c0e48d56a6cd249b4da07d871cc9df43633f9eb6381585036b9bc03b513be596d7dfcbb94a2d34d5fc03cd6d063b7a03bb5888eab018578db4e6dd55cf708e7b87f4f0f096c6564087883b1be9c76561166681712d92441078fe2839b2ddf5da791693afd2ddb67689929937c8acba5789ba541a49e6597b759d3af0af4446e81024c153059936e8cf10d1b8e9de5e23976f83fc6c0e20337e96fe33ce855faffd3d1794bf7c7db1f6c124e9bdb0bcec36e5977df3a9e78b050abe219ed405a2ea9e1775da4e75e064bc08cd1e712083db00014d8665ebd9ac0f3d97e7ecfdedd48d07c68894b8c5aee223c70418b3914a10f0fcb52bcf324e19595cb2fa4aa666d9c8a49f7a526911102d3286ab168e136bb69a8601d727d11c065d80dfac5eda734fe03c5d413c73e334572e84b8cd1061d8f0e2ddfd5150e2c8cb82c19a754adc56f6dde7b776a60c966e2ee305e9902c71f30aa16ad8ce841ae040909f19e3d99f610866c829421f0f5f8ecb2a14467c665eca2650d6c17b60a66558e3db50d87b5aa04cea41a488e0b63af64bc77d5e1917199fb0f4586cbd6ddfe194a19d0b829c96ba149bb947e995b2cf68865cae6d2d3649432e1ec580af3f6ee1012b89dce3cca9e58b5c36338f11f612600cfd1639b58b1d1d9bd42adbb9f3d9561c5de986a9bcf9918f9355a4f6e4369a1a84ffb1816a151eb89ae9f7b79cc1326794adbb4ea896055ce6390361d48b2903b693c869468e8afe1cd02d066cf779ccc5a50f79b569f883f4d8c6e350d13ee113416ced5d1eed29fca5ecbb15ade07b55c1b189445ad0de7c9447dbd2a72a7caf9df5ade911f7f6f0afa4f2f456c5ce1d8217c02f3db8794c0b37aa1fd303588190d8778d6934c5035a609a736102f31135b08bfefc4cda8fe967e2df5b9e33d9c32b73f7da9f2782deb026c871d2bb6e4fb0dd6fdf387c9387a7344442aa071f7caf2fdbca8d9ae1819c72a8a9e19cf05e400aedbfccc0b7fc495cf9c56bbb80a426c926245b289627e3d458de2385ce501cd3eb73ed2d6c8d14ba171671c69f5a5694caef77278dc72429569333d83119be2dff1c0cdfdd83a7a77389f718fe11a16436349b101a07d7d8677676c81a2b6d16de27f34706eaef9e26f0d27acd132c75648f1507c18cbfb3e03da6cbe9daca01a622cdd04dc3aa046ea7f7f06c5276dd5876a8e938d8464126780e0445533d6f005323072422365008826a3184b8091998560ed47faa8b16567eae76a862cc35b9cadd17f95a89e553417264cb02188d884f4c2fa35b6b297c55a67a89cfa0132b6e81abbef00c942cb202fe2d615a524747aebc9674c837d45e2684a7808416f7050caca9410f679dbcef5e024e28675bc48148215e62a13fd5164336db4472b467c9e4094d61d91f1f5c829ee569bb83dfcc59ebda6cf54eb8b47c483cf110a965a8bf11237af491dcf0e2465e4f08702d3ad1608cc3168874b581f4e1de4a4ac290d243aa19ceeac78373df54e0f934fbc2c772e1a3e2787d0c306353bde86ef51ea95d6582a3e97b572aca9a5b3416c4db68ba447a46c5a00e8b9d28a11f735ed38f233b3a1bcd507bc4980dbc84fe8b5140d85128a347824f30d79431be8290da03ac468ddce89460c2b8154f2a54a6f3d9bde5159f9233bcc7267d8b5de7582ec8c3ea363dd0a7d155187e7c89242265715b62e200eaf18020814522898fffc0fac8cd1ee70bd7b7a7147ff7127f2cca0f070adc83c89faf0193b3d92663a79e1131884042fcde08ef07624e3c4d548e4bc2ba742a4bf2dbcad14ec3d99bbb5c60e1920eb138f9c0d3f9f86bccdb36008a40ad95229d7378e04186683dc83dedf1cea9e9bcdbf32f36251bab046fa6eb27fa267e71ad0e4d51c4fb27cc6d21292f55869bbbf9ea44ac8abae887d8e61dac70828ed9371d54884389c85b5022a3b8eb61ecedcfbdb80d9d3f8dd7530f6eed96fb13a191431896ef06239babf1d2582ac7ef4f931afc1c43030a964e98989b906bf96e198e60499c8216f64c2277419d67e983468923291a9d5ae4d4904267a10a2c5db6dfac16a856ee7ddd472a899492b3eb83542305d88a5ebadf9dd440a454e47465b94e600ae1b5b0dd5d44c36991ef2fc43b037b03ac406276b0d7416c9db2bd97a35992bea7757aaace004d3bce4ea0dd4ef1092c2ba00a204977f3d4a9c9e30f5e7d68547e0e63d2e7e3aacb501432de8dd17b2e69edc40149860e50314a2992f23766116a8d606b388af4745b009e910990eb372db6aaac3a7b1409c17cea74ad678ce87bca91ed80a52ecfea7620b528009ae7939139888af40345ae777462853eadee7b8ad799e4e2b197afcafe6915b7f7ead0ff58966eb9443acea968cd9f4b607001eb798c6c42f501130fe3ea71b92be4f8b62dba288a318517aeaf245414c151bbbccd42a71f66a2db25f9ad31a3442364daec082e8802dabc35fb6dd284fa9a0a49e14abaa181863230cc09c57b06755a0b0a57d13601a87f308162810229f88e0928bba5799b2ca3db826568f871113a319a9c103f5bb01ecf38915e6e724f4eb52f0ae14440c1f290d5bac70692e74b918e8f9cf7eab4a7d3ddd28e8e652e0890516ba05bb797907447089be13fc960a6dab4fa834caee8864b916dd4623afa065265089a5ca71872b5e3348160845448a6c7ed0be6db650d14942e09412150d15a76757cc3ad2e6b536892bb64c89a7ff97d840cdcd81621770cb6667bf3119d6d79c09d0ecbd589a352114bd61a5988c35fa919b3778fec46003ffafdb4ac5306505de0759371057e6cdd61b100de9210ddb094b662b67db73dc6c7934a47ff85deda87b2c9ca0cc8166aefc8fda4a1977ae25632ed80a14a5a690f18888c50582ccf12d3699202760b85aa1cc65273ddb8fe0c1aa558009161117fa0c7ffb80ee2c699d4ee6309538db56447fdad0895cddf21e994a567f68e082710739dfc6eebd460617ba4d69718d50a92126f6b070143e1c754494d0beb612d9fe63fda51a9b448bf1bfd8864998277008edb05279bddfc6f0571fb8214609cd5df93b71b8daa97d636ef98eca165a937aa0e14d3a4fc84ccf5f858fd45a0f8cdce56fbeb3108798038d8b5b3819da29da9a9bb49a7f5d4a7cf47c0fd50ba9d3452e5ea764404d8e99eeeafa26e01d9e19146e5db91456126240be66703aa8a502d8ab62cf4bf622c662cb4e7ccf4beb1634a9f96f4971fc1817333d96861cb60c9e91d2e04bcd75745fc638bbb1394f3113fb90a80b60098eb174126cb2046fcd78320b584d765aff6cb52aec20556a205a2ecc03d6ac97391245e772612affe52478f524f6f60a71bc47170bc0a0f9d6b7ea7543f21d509e0ac2539181aff03211b9726ac7bde0e6a2fccb274e3d23fda18d97761e910f8ddeb351ac208f5c64f430b0f08e01dbd629646b5491af28421702147b885954c7e0acc6a7a30cbd8403b607f73ffb41b5d693f609827dfc22d7431afe5b5542869bf24462055ffdd97affb215142517cbf42fda332d21a22889a8bb26350ebb34eab0243d07742fa3162a05c510d080e548f5e4ff9be0e53ebac8334b1009c3a4287a3c19e336fb1c300b7195692a5ea970a1686eab437e6b952ad7dd81d6f4fe7324364cab51149a064460a68612c930af095ae042dd147db6a93fe66198dc765748290748a98a1ea0428ca9bc51c923e9ded75e215daada3f3de0935a6a14e28bc0eccd9cc239729bbd6d32351f53e9ce32331bec337c65694f94f24b99684676ac12ec4f3839a3f9226bb3efabdff5ce73ec3cf264ff37457d8d9ef29c9b262c98dd5be712b66211ede0c1b18e611f055a1e44085c2dd47ab4261c355c60965aa752bc1c6c6c60108c6da642d747025f223bec897568db89cd797ff4eb157edbac51103cfa8f9b640b6195dfb2722a3e697a4a979afed0945354559d6dafe06ad8da4f0f28bdda9e697b53c2a81d413f73a245e41d1195b7e4a5f0f2b3975325708674088e989cca4c8f182b0060d3e96d4b265a496a2908540d74fca87509ef05898588e7efed2929788bdc845f3f31a5b4e85323cfceb8a9b1c62ba869d06717655d6ad76a496c122e2c50dfde74a8b48cae06ebf34d7e3c5568a23e9e056dd0aee5105c00f4977497e2789698c4fb91884331a96883c2b536425076e4e23bb5e64d57f25a13a03aa274850d1e576d4394ae0cd0e96e4c8721e2ef121c7bd168ebaff3f88e4f9ded2efdda2633139315dea0e9405a1deda7f27c37526515b5b0de5c6be5ea5d0c4acdf781d0b13ee33700e2bf653ca6ad7886e9ff347a52c705112d57552f02969c5a9440df23767460d25cbcfb4b952da967d6a9153eb93373d5b7a5e1e69c857a09ca160a7f9b82ffa3b3a5aab722458562c426d6455b841daa429a89fc70431e292e457d8dce0fd40525767e169ab56c648895903877b97dcf982f5e4fffca3a4f2ae07a41da81df7610a0e9330f6433efb00355de5198df01380f1b860991ded2eb7b6b7f4d1eb8b0e1b234c9c79dd75b097b451ce01d14a8d0ecbbb808d64f6ee29429aadeb1030417aaf2cc895180ddfceea9ef9a285a1131603653851ba9c966f2330beaae0474d7e3706de78f32df7a87326ca9bfa5f22dd912f44330596be22807582389a1edd0c15b1d2fda99d9c0941cf6edd7b092f7f575c74e848e4a386850437fbce5591989853999c6bcb88fe0a1757e2dd71cfec9296b5c118b5fbabde0278ddb6f606f2d0ebd706a0ef9fea53b895b37d40fe0ae25461b2da71b427698f073b50e5841ed996a80d3a763b68bf56df896da23044e2458b50420b03730a2e177fb5bc3b3b530e3f7e4703b31de87dd775b18437eaf3985fd4bf35c0ac07439b7bed3f56b8169349e6daf43cf83f0756e52a84e49c99211f2e11653378dda845e95c20cfbf4bc7a70a288158a8b0e0a01e626606eef153c38ab8fbd3ecccd1e885ea508182d5383c1b171126ba5904869bb4cf98523e464f56c271548111ff7584b47e923c741a6b708769bbc591ce983d97fff35c31b7ebd6a7d1e6ecdb26454216c5e9fd8eee413d5b661295a84dc24e898954d1207c4d776e5aa82a613b50883fc78063f133749041407871d1305dd3ea9cbcc55076bc9bb37f67bdf566a6c9248c6cf55dacbe393a4911a76e0ebb778c63baf970c9", @typed={0xc, 0x64, @u64=0xca0}, @generic="7694c6f5c14fbd10369959bcd7961fe3a414c5e135076fecbe929565bdb82beb772e105cfbdc569269ff57de987ac86dd994d11be753257cdb4c7e03cd75f559ee8c7c6423dcc656a2c4a34bc44aae1a30604dce89bd15c4701582214a07c8b3fc084ab1ea7675fed0723b36d2590946c9dd714dd57227c2ebbb9fdac02ccb720909d2e00147ce418d5df8f4a8d0667593fe603ebaa96dd87aa389fa4c04e3879fd08bd4c8cbe32adced63c640fbd9f1d635c566f7a395d6078cd7fff440a565", @typed={0x8, 0x13, @fd=r9}, @generic="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", @typed={0x14, 0xe, @ipv6=@local}]}, @typed={0x8, 0x79, @u32=0x3}, @generic="15ce369383e6849a088c23becca729e23bde9e2845c99d5b2895a82b950971c6b854be4573c711adea2884882561bca042e33d03b32082296cd2a672ca6da5b2a5a90b86efab411098c0e1e53eb3e79e993ef8580183459836f221b1534266b2023d800bddd205c730dff7e0e24ac0a0f61ee725"]}, 0x3730}, {&(0x7f0000004ec0)={0x3c8, 0x10, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@generic="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", @generic="039f33b25c40c33fe1b5200207981380b18d157dccee8496dd3f05fe8370d5b659bb4113e48c48239498eeff5f6fd604743295b80f9597a8e8db5b0c63b7baa64ec151c36e3d81e780817dccae", @nested={0x26c, 0x33, [@typed={0x38, 0x4e, @binary="0f7b6e6b30501a6255e009641e387ad83095dc690f34bed85b361d5be8637506683da8e491e5c7a85f963eac9e37614aff"}, @generic="a9e817c411c981df97b01816a14b2dcc05c31a4213aa251c43e6c64f0f1442e102e8898929a6afd7c5a68e58facde081b2aa6793de74c0d632cc1c0b60e9d085266124ffa3b3893f1f6f4b7f9e8adccf8bf0b9a40c0ff823962934e44828cfb014917d551e95d25fe8abe23c2a37b069b2518f343637e4df2f8bfcf73435a1d8fa32026773446d4b16bd3298f250d1b5b476d51fe7494410cbd540e07bddf754ad5ea797c7e77742ca39373107b95099d15a8b82ee7135dc7af1509d9200", @generic="3e4f1612cbcf8917ec88910e161a27909b7679187b0d9a4329432c2ade158eaa6de38a0242639e3d89749e596123597f526f6da914b24fb6c2b7a959e293120bd56fe9b1cca2edaeec1695d9a19d2f33f60f9f7062dd18f6bb6768f4ff399d16211563826ead371ae5dac6656369d1337b80195d0cb3a19e04b745e75473d19382655a109fc35d6f87731a3cb86170f47d58b5e8e4e7ef650adf77c7b27dfb45933b32dd2017f0539b2308e8462718607e135a008245aab7ad22c99911e0cead88635ccb2a2ed25d12a61c2a5e346d54ce40ac7fecab88d850e9f46414f199ead05d825b6b9d8a07ac6a47", @typed={0x14, 0x75, @ipv6=@mcast1}, @generic="c3a060d3e04720520f7f2f0782df1a2402f9d3c41efca15e521daadf4f3ba401055dfc9ab105cfa074fd8951c4f4fe6b5710b7263822435ce2ea72186813701e2daeeef8cc425aae7cd161cf599e77147b1896637a938d533b9741a0b1f04d9f6986569392959612ef72e932b50aeeec77e463"]}]}, 0x3c8}, {&(0x7f0000005340)={0x400, 0x23, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x68, 0x7a, [@typed={0x8, 0xf, @uid=r13}, @typed={0x8, 0x19, @u32=0x6}, @generic='9', @generic="5b25ebf6ed9c00424058b51badc6847e5c02add85ba99e333f910d52f809f472722e90cfdc0bf84c9a010ba700fe5be4caf2aebf0ea2564ce69e67090d6bcaf3702657f7eef5644a7b4f5865f3c5f2cb9c230b"]}, @nested={0x120, 0x7a, [@typed={0x8, 0x8, @u32=0x7fffffff}, @generic="fe044d2a47c861dc97a25173c2aa913446e0b2ca9f71265e81928cbe51f1291583b75bee8eb7ce34ca8291d30cbf97471c19b0da16e6c98982b0b202042985adbbe8475e89162a64065286b31e21acb93cb42ff44ababb64d03c10922af7f0d4dd148325b46ddf4d3d9f6aa45426e6bba72f72d9927c8f24cdc66d2ff6b8dfed52d57f823c9d95495c6b342f0245d31bc0d74fdc057df5a1a0495debb37cdbd512ed38f8e306fffa34bc633617bfe86704e38b1f36c3396a5f267c1feec04144d12d1b", @generic="19496e1bea601831d812352c9a52ca8fe81618ff06535a18a89ae89528bfbd189b4793ab69799e9d00126dea4e2fbf8ff5418fb72c39464bae7d44c2bd12b320dfbb098377f825", @typed={0x4, 0x3f}, @typed={0x4, 0x4d}]}, @typed={0x8, 0x7f, @u32=0x9}, @nested={0x44, 0x2, [@generic="76880ea9b080246bdb1ef7f09cd4e3767180ba504428ece52665", @typed={0x4, 0x79}, @typed={0x8, 0x87, @pid=r17}, @generic="3a668c697f0b79b9ee8d2016742fa2ed17f82cb812fc1690f0"]}, @nested={0xf8, 0x3e, [@typed={0x8, 0x93, @fd=r18}, @generic="5b93858d4239a2dd60", @generic="047dc73ddfc2a08355bc5028ddbbd8a3345865d96ac96958bd717d729c4fa33cc6ba1a7b373bed0abde004b472c07cb5a0df433c5ee89fe9b92faad280f321fb6c011d764fc8be38be14263d90f33b491ff19f382a804164b1bac615a5a4f7817aaa06dfe2c1a9817f8c27f0d6d80fb852e96d6f557f6200094326344e3d7410179c5e99c09133ab5e7f85e125d753a8a1289eee7a237257afd9f75e2997d69381c86e9388c4ab239c11a007ed051be67f4b56196ea9e574a83230c8426e13cf2fdf2b84015502ddec3dac5efbbac5b8183ba288545b337a6a25257e2c424484"]}, @generic="941657fae26bac843b2e91e0c7b2edc6fc4ec97afdbd4fe08025156dba9ce8f0d52c3106e743365d74919601f5307cbd745de1c01c570c70facff71592bf2da2f77c05c60b6f9c57247d690168116726e2650332415e21447d2f4cfb4b45929cf4759e7940054efe5053877c98ed02293071a9304921d861b9914a82f248950b51bac35c76f4f209839c42fdf2d59161165987a6047ec6f4b158ab17", @generic="42cc58e60bde75d3d8e253d1efff9720ced84305dbcc3a0bf02c883e04909a8af816f6ceca7695ac889f8b6fbce34e7a5d8cdaae0cd7b383b290beadc6c27401952b9888f2216d9ff6e29160663c0feef8eb608cf9d010a8c239b14329beeb481cc19729291a6bcb48b4d4c8528414c11e2c90918e8b9aa68a", @generic="94189c1bbd319ad61a5e68b117"]}, 0x400}, {&(0x7f0000005740)={0x237c, 0x1b, 0x100, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x3a, @u32=0x74}, @generic="e31c7ca26f7d83762fac5fa35f2a87c97e711f339bf887fb2bbc7aa82c5e67c6688015b43f09f2112c850672003e756aedb64bae6e751a231c1ae87264a6d2407fc3acf00d9851479264e4827b6772d460b72775b5a0b5f7cfc40d", @nested={0x68, 0x71, [@generic='=', @generic="48801fc388248239c3239737337b315cc22d4483f1368d555a3f4e842f8b63da738969ce6518abe270ebabfb88fc6594d3451f05707ed86e87b87d9437584f9689e71004eccae68a3796e40981d9f36329724cab5bd34c8354a6f03bb42b9c3aad"]}, @generic="f41364f2342bda804bc291987a5a9eab9c99168898df3c6c206c0f470c573bdfbe45aec46bedbb0b34dc130932b2fa14c71ab67b6786ddc652f4ce70fec5032b22950a439fbe47fe73ecfb4023843ff4841a591008c829", @generic="f3d71cbef468bb98fdd2299ceab22e8392766cd0368afcade4eda6eb7be12e8bb64097e20fd4a8902ad3d2729b8388f0852800aab36e20a549c46a2b3e2f38d5130b70f9e0520cba5e2ae408c7d04b5f72431ad9caa1b6d0b98d8b7de6f3ae286d3ae05e704175c7c7ef6bb3c6f488", @nested={0xfc, 0x86, [@generic="aec9d1b7d9fecf3d7626160f05079ea646cabd586171633fc2112515958655dea02d65af8017857c03b5e1098eaa4ea9102f54fc1267ae4fcb6c245c196815f91ecdb4cda1b861877a0bbb05e7ac870e73f86c353c3014d180bd9b659daa8ecb860217e526a0a75cbe077b4c99dcdbd4a7f7176c51ec9a58013ad29743beb1c7753994615cdb9e136fbb52aa2be02f38f7730ba95f7d1c4f5836c421dcdd7b953201575ca01138182e3c13ece1db805473715b03031b4e4eb2e13df2f025339a5056e8cb30e893e552877431df40d9e5bcf1276aebb27d3f69d8c048d3216f9d33d61af45551d173829043b858", @typed={0x8, 0x41, @fd=r19}]}, @typed={0x14, 0xe, @ipv6=@remote}, @nested={0x209c, 0x16, [@generic="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", @generic="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", @typed={0x98, 0x31, @binary="f5179cf4c02f574e38fb70729aa364b604d6e81d793ba5dcb36215caf69218e980900ab05f2388582ad6195496b1694d91a09f83fa8e7c67debfdbea00e2cd4e0a247f61891a258a8104ae623512b2f06bd34d7a1cc65ad4af0aa7ef2b2cea16854695eefe5d80f1021f29ffac1691247a30cb3bf191ae82b2c8fe92c7382920c221ca743f0728a93fb3c88689a3be2383dbf0"}]}, @typed={0x14, 0x58, @ipv6=@remote}, @generic="c091d599f34c6d4211e5f817536a970b040f7b479e7ca4d7"]}, 0x237c}, {&(0x7f0000007ac0)={0x1214, 0x36, 0x400, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x30, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="d1e04762e5e3cb50", @generic="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", @generic="44796e648721d8bfeefecce0bc5274ab0592ac645f5a23b4e2f464782ea52cabec6db11125cdb2cd681388bcf78008c71e0b038608aef36ff4e7046a4b5fd00b3700f31b", @generic="65ae92b2932de412b2597e1eaa249e2478441cc19418acb0b4dd853cf59fa36d7ad5866dc6d2c8383d8d596e9f8ff745130d1a95e441491ab14685529ca4482011763ec586829294a1d24da9363d223a68ee74c4027461850217fadc726e5c9fddd6b463a9f1134f3459697d5c620f731250748d80b65cd9fc8c287a198d04d03f14034b2817a8821c7484214695c524376b22b15abf0401687579482e322e7928ea91239c199fb030168e", @nested={0x104, 0x17, [@generic, @generic="b22a1583d7e9114140ccc0265fc025cd087028a7604920ac1c59f8535b1dd1749613a5d313252806d7156a334ccc281115ce56d8457a712c96401c8b4a97a1d72a57f52150b6405e71117149155d2740eea6fc70a6e816cbc1927eab7d673067a2847713c5b376386a3a912c23e545a2ef78820468392a09aa681678760f550cb9d91d5b51fec3bb2281e431af7c67e0e2f9775b72d48e6d57393f74d10f256c339d8295e32679b2e1e3ffe0d2ed518880419b323125ef12599aeaf935d3af1d23b2757353c80f34ab95f413f2e2ad604e4f31fc2d9e40ad4d88ea3d1be79d", @generic="59d769c5cefb546f934558760c6cbfcafbaff1554c2230d3739e1220514c5cfe"]}]}, 0x1214}, {&(0x7f0000008d00)={0x18, 0x16, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x6b, @pid=0xffffffffffffffff}]}, 0x18}], 0x7, &(0x7f000000a800)=[@rights={{0x24, 0x1, 0x1, [r20, r21, r22, r23, r25]}}, @cred={{0x1c, 0x1, 0x2, {r27, 0xee00, r28}}}, @cred={{0x1c, 0x1, 0x2, {r30, 0xee00, r31}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r32, r33}}}, @cred={{0x1c, 0x1, 0x2, {r34, r38, r39}}}, @rights={{0x1c, 0x1, 0x1, [r40, r42, r43]}}, @cred={{0x1c, 0x1, 0x2, {r44, 0x0, r45}}}], 0xe8, 0x2111}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0xe) 08:42:00 executing program 5: move_pages(0x0, 0xa897e42afa3a25, 0x0, 0x0, 0x0, 0x6) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) 08:42:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setopts(0x840c, r1, 0x8, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x4, 0x0, 0xd}}) 08:42:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x200) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'rose0\x00', 0x9}) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)="7d0000001200192340", 0x9}], 0x1) migrate_pages(0x0, 0x81, 0x0, &(0x7f0000000240)) write$binfmt_elf64(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="7fe34f40e308b4c0b425fb0000000000204000588171001000720155c4af96311d39961500001600380001000900ff030100029ebd6ce1afd40e4ec61030cf4b0794000000"], 0x45) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:42:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000400000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0xb, {0x101, 0x4, 0xbb, 0x5}, {0x3, 0x94d, 0x0, 0x1c80000}, {0x5, 0x100000000}}) 08:42:00 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:00 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) tkill(r0, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000002380)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x10, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r6, 0x4070aea0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @remote}}, [0xfa26, 0x6, 0x4, 0x9, 0x401, 0xfffffffffffffd6a, 0x5, 0x8001, 0x3, 0x7f, 0x4, 0xfffffffffffffff8, 0x9, 0x6, 0x3]}, &(0x7f0000000100)=0x100) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r9, 0xc1105518, &(0x7f0000000340)={{0x9, 0x5, 0x5, 0x101, '\x00', 0x6}, 0x2, 0x20000000, 0x401, r8, 0x1, 0x2, 'syz0\x00', &(0x7f0000000300)=['.posix_acl_access\x00'], 0x12, [], [0x7, 0xf1]}) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r8, 0x0, 0x0) ptrace(0x4208, r8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={r5, 0x4, 0x80, 0x100000000, 0xe3, 0x7fff, 0x4, 0x9, {r7, @in6={{0xa, 0x4e24, 0xac9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, 0x6, 0xfffffffffffffffb, 0x4, 0xfffffffffffffffc, 0x9}}, &(0x7f0000000200)=0xb0) [ 306.557302][T17671] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 306.571087][T17775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 306.603252][T17671] CPU: 0 PID: 17671 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 306.611182][T17671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.621466][T17671] Call Trace: [ 306.624763][T17671] dump_stack+0x172/0x1f0 [ 306.629106][T17671] dump_header+0x10b/0x82d [ 306.633538][T17671] oom_kill_process.cold+0x10/0x15 [ 306.638827][T17671] out_of_memory+0x79a/0x12c0 [ 306.643505][T17671] ? lock_downgrade+0x920/0x920 [ 306.643521][T17671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.643532][T17671] ? oom_killer_disable+0x280/0x280 [ 306.643544][T17671] ? __kasan_check_read+0x11/0x20 [ 306.643560][T17671] mem_cgroup_out_of_memory+0x1d8/0x240 [ 306.643577][T17671] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 306.676014][T17671] ? do_raw_spin_unlock+0x57/0x270 [ 306.681153][T17671] ? _raw_spin_unlock+0x2d/0x50 [ 306.686013][T17671] try_charge+0xf4b/0x1440 [ 306.690443][T17671] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 306.696006][T17671] ? get_mem_cgroup_from_mm+0x139/0x320 [ 306.701558][T17671] ? __kasan_check_read+0x11/0x20 [ 306.706594][T17671] ? lock_downgrade+0x920/0x920 [ 306.711461][T17671] ? percpu_ref_tryget_live+0x111/0x290 [ 306.717017][T17671] __memcg_kmem_charge_memcg+0x71/0xf0 [ 306.722486][T17671] ? memcg_kmem_put_cache+0x50/0x50 [ 306.727704][T17671] ? get_mem_cgroup_from_mm+0x156/0x320 [ 306.733273][T17671] __memcg_kmem_charge+0x13a/0x3a0 [ 306.738400][T17671] __alloc_pages_nodemask+0x4f4/0x900 [ 306.743772][T17671] ? __alloc_pages_slowpath+0x2520/0x2520 [ 306.749500][T17671] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 306.755754][T17671] alloc_pages_current+0x107/0x210 [ 306.760875][T17671] pte_alloc_one+0x1b/0x1a0 [ 306.765652][T17671] __pte_alloc+0x20/0x310 [ 306.769992][T17671] copy_page_range+0x1520/0x1ee0 [ 306.774930][T17671] ? trace_hardirqs_on_caller+0x6a/0x240 [ 306.780586][T17671] ? pmd_alloc+0x180/0x180 [ 306.785010][T17671] ? vma_gap_callbacks_rotate+0x62/0x80 [ 306.790567][T17671] ? __rb_insert_augmented+0x20c/0xd90 [ 306.796043][T17671] ? validate_mm_rb+0xa3/0xc0 [ 306.800758][T17671] ? __vma_link_rb+0x275/0x370 [ 306.805551][T17671] ? __kasan_check_write+0x14/0x20 [ 306.810690][T17671] dup_mm+0xa67/0x1430 [ 306.814774][T17671] ? vm_area_dup+0x170/0x170 [ 306.819373][T17671] ? debug_mutex_init+0x2d/0x5a [ 306.824224][T17671] copy_process+0x28b7/0x6b00 [ 306.824247][T17671] ? __cleanup_sighand+0x60/0x60 [ 306.824265][T17671] ? trace_hardirqs_on_caller+0x6a/0x240 [ 306.833847][T17671] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 306.833864][T17671] _do_fork+0x146/0xfa0 [ 306.833881][T17671] ? copy_init_mm+0x20/0x20 [ 306.853562][T17671] ? _copy_to_user+0xa6/0x160 [ 306.858252][T17671] ? __kasan_check_read+0x11/0x20 [ 306.863286][T17671] ? _copy_to_user+0x118/0x160 [ 306.868062][T17671] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.874321][T17671] ? put_timespec64+0xda/0x140 [ 306.879102][T17671] __x64_sys_clone+0x18d/0x250 [ 306.883905][T17671] ? __ia32_sys_vfork+0xc0/0xc0 [ 306.888785][T17671] ? trace_hardirqs_off_caller+0x65/0x230 [ 306.894507][T17671] ? trace_hardirqs_on+0x67/0x240 [ 306.899535][T17671] do_syscall_64+0xfd/0x6a0 [ 306.904064][T17671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.909957][T17671] RIP: 0033:0x459879 [ 306.913854][T17671] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.933559][T17671] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 306.941987][T17671] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 306.949960][T17671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.957958][T17671] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.965934][T17671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 306.973927][T17671] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 307.053242][T17671] memory: usage 307200kB, limit 307200kB, failcnt 664 [ 307.070322][T17671] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 307.079235][T17671] Memory cgroup stats for /syz4: [ 307.080020][T17671] anon 293695488 [ 307.080020][T17671] file 184320 [ 307.080020][T17671] kernel_stack 2621440 [ 307.080020][T17671] slab 6344704 [ 307.080020][T17671] sock 0 [ 307.080020][T17671] shmem 0 [ 307.080020][T17671] file_mapped 0 [ 307.080020][T17671] file_dirty 135168 [ 307.080020][T17671] file_writeback 0 [ 307.080020][T17671] anon_thp 285212672 [ 307.080020][T17671] inactive_anon 0 [ 307.080020][T17671] active_anon 293699584 [ 307.080020][T17671] inactive_file 0 [ 307.080020][T17671] active_file 0 [ 307.080020][T17671] unevictable 0 [ 307.080020][T17671] slab_reclaimable 1486848 [ 307.080020][T17671] slab_unreclaimable 4857856 [ 307.080020][T17671] pgfault 13695 [ 307.080020][T17671] pgmajfault 0 [ 307.080020][T17671] workingset_refault 0 [ 307.080020][T17671] workingset_activate 0 [ 307.080020][T17671] workingset_nodereclaim 0 [ 307.080020][T17671] pgrefill 343 [ 307.080020][T17671] pgscan 441 [ 307.080020][T17671] pgsteal 37 [ 307.080020][T17671] pgactivate 297 [ 307.181855][T17671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17523,uid=0 [ 307.198574][T17671] Memory cgroup out of memory: Killed process 17523 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 307.274796][T17892] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 307.297156][T17892] CPU: 1 PID: 17892 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 307.305085][T17892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.315151][T17892] Call Trace: [ 307.318459][T17892] dump_stack+0x172/0x1f0 [ 307.322801][T17892] dump_header+0x10b/0x82d [ 307.327225][T17892] oom_kill_process.cold+0x10/0x15 [ 307.332345][T17892] out_of_memory+0x79a/0x12c0 [ 307.337031][T17892] ? lock_downgrade+0x920/0x920 [ 307.341888][T17892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.348205][T17892] ? oom_killer_disable+0x280/0x280 [ 307.353436][T17892] mem_cgroup_out_of_memory+0x1d8/0x240 [ 307.358998][T17892] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 307.364635][T17892] ? do_raw_spin_unlock+0x57/0x270 [ 307.369762][T17892] ? _raw_spin_unlock+0x2d/0x50 [ 307.374617][T17892] try_charge+0xf4b/0x1440 [ 307.379045][T17892] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 307.384601][T17892] ? get_mem_cgroup_from_mm+0x139/0x320 [ 307.390154][T17892] ? __kasan_check_read+0x11/0x20 [ 307.395636][T17892] ? lock_downgrade+0x920/0x920 [ 307.400501][T17892] ? percpu_ref_tryget_live+0x111/0x290 [ 307.406055][T17892] __memcg_kmem_charge_memcg+0x71/0xf0 [ 307.411541][T17892] ? memcg_kmem_put_cache+0x50/0x50 [ 307.416799][T17892] ? get_mem_cgroup_from_mm+0x156/0x320 [ 307.422407][T17892] __memcg_kmem_charge+0x13a/0x3a0 [ 307.427509][T17892] __alloc_pages_nodemask+0x4f4/0x900 [ 307.432880][T17892] ? __alloc_pages_slowpath+0x2520/0x2520 [ 307.438616][T17892] ? lock_downgrade+0x920/0x920 [ 307.443456][T17892] ? rwlock_bug.part.0+0x90/0x90 [ 307.448390][T17892] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 307.454636][T17892] alloc_pages_current+0x107/0x210 [ 307.459743][T17892] ? do_raw_spin_unlock+0x57/0x270 [ 307.464837][T17892] __pmd_alloc+0x41/0x460 [ 307.469145][T17892] ? pmd_val+0x100/0x100 [ 307.473389][T17892] pmd_alloc+0x10c/0x180 [ 307.477735][T17892] copy_page_range+0x610/0x1ee0 [ 307.482570][T17892] ? mark_held_locks+0xf0/0xf0 [ 307.487314][T17892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.493632][T17892] ? __kasan_check_read+0x11/0x20 [ 307.498662][T17892] ? pmd_alloc+0x180/0x180 [ 307.503061][T17892] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 307.508780][T17892] ? validate_mm_rb+0xa3/0xc0 [ 307.513465][T17892] ? __vma_link_rb+0x275/0x370 [ 307.518223][T17892] dup_mm+0xa67/0x1430 [ 307.522290][T17892] ? vm_area_dup+0x170/0x170 [ 307.526862][T17892] ? debug_mutex_init+0x2d/0x5a [ 307.531703][T17892] copy_process+0x28b7/0x6b00 [ 307.536372][T17892] ? __cleanup_sighand+0x60/0x60 [ 307.541286][T17892] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 307.547082][T17892] ? __kasan_check_read+0x11/0x20 [ 307.552092][T17892] ? do_raw_spin_unlock+0x57/0x270 [ 307.557980][T17892] _do_fork+0x146/0xfa0 [ 307.562126][T17892] ? copy_init_mm+0x20/0x20 [ 307.566655][T17892] ? __kasan_check_read+0x11/0x20 [ 307.571757][T17892] ? _copy_to_user+0x118/0x160 [ 307.576705][T17892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 307.582940][T17892] ? put_timespec64+0xda/0x140 [ 307.587850][T17892] __x64_sys_clone+0x18d/0x250 [ 307.592612][T17892] ? __ia32_sys_vfork+0xc0/0xc0 [ 307.597455][T17892] ? trace_hardirqs_off_caller+0x65/0x230 [ 307.603167][T17892] ? trace_hardirqs_on+0x67/0x240 [ 307.608181][T17892] do_syscall_64+0xfd/0x6a0 [ 307.612699][T17892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.618579][T17892] RIP: 0033:0x459879 [ 307.622466][T17892] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.642068][T17892] RSP: 002b:00007efc9961ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 307.650463][T17892] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 307.658425][T17892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.666385][T17892] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 307.674351][T17892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc9961f6d4 [ 307.682314][T17892] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 307.691818][T17892] memory: usage 307196kB, limit 307200kB, failcnt 675 [ 307.698639][T17892] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 307.705513][T17892] Memory cgroup stats for /syz4: [ 307.705628][T17892] anon 293617664 [ 307.705628][T17892] file 184320 [ 307.705628][T17892] kernel_stack 2686976 [ 307.705628][T17892] slab 6344704 [ 307.705628][T17892] sock 0 [ 307.705628][T17892] shmem 0 [ 307.705628][T17892] file_mapped 0 [ 307.705628][T17892] file_dirty 135168 [ 307.705628][T17892] file_writeback 0 [ 307.705628][T17892] anon_thp 281018368 [ 307.705628][T17892] inactive_anon 0 [ 307.705628][T17892] active_anon 293621760 [ 307.705628][T17892] inactive_file 0 [ 307.705628][T17892] active_file 0 [ 307.705628][T17892] unevictable 0 [ 307.705628][T17892] slab_reclaimable 1486848 [ 307.705628][T17892] slab_unreclaimable 4857856 [ 307.705628][T17892] pgfault 13728 [ 307.705628][T17892] pgmajfault 0 [ 307.705628][T17892] workingset_refault 0 [ 307.705628][T17892] workingset_activate 0 [ 307.705628][T17892] workingset_nodereclaim 0 [ 307.705628][T17892] pgrefill 343 [ 307.705628][T17892] pgscan 441 [ 307.705628][T17892] pgsteal 37 [ 307.705628][T17892] pgactivate 297 [ 307.801741][T17892] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17661,uid=0 08:42:01 executing program 3: ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dXv/null\x00', 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000002c0)=""/241, 0xf1}], 0x5) 08:42:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe172, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="91e9faff000000000000040000001800010068bf0414000300fe8000000000000000000000000000bb"], 0x2c}}, 0x0) 08:42:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0) r2 = dup2(r0, r1) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0b010000e6010000fa020000050000001003000001000100000000000000000063ec2f3de83329f4ff4f3a865e0c818013d86fa525d728c5db89e6c3ad8fd9563986c288b3e3cde54c45d486796d442819cb0e40d4b1feef77daeb82537a3a07921fb135c976b1ee967531e917f8077001b50a8ded25dfc19019f3530509c8fad00c892c78b3a2d9abba1fbc696cf21cffa601068bfea1aa013d36969b28117ae162ab1e430bd9498a854593b0a8ad7c8bd560545c6ce525191612f375bd9afb9a5494ccb407e228c29bd59d1eaacc4efb0ccbefa9a110529eeabd88f448c1b21250414ae21ae42505709401bd0a4759df35588d96d54c5647c5ba44718560b005d064fed11f481d35ee8d4ccc56ddb97b081e944e6bb77e9b9109094b1667ff3783ed23df0dd660645d02ef59c2492f0921818d16e9ce5846d6ed777a77bf8ca1c77545506f73fbe0136530e02caaf36e7225abf5d62bc55eb3447515391a8f468b37c71657138b78cd89728fc7e03bdeaa7e03875e7a6d2a46e1d8584a50890ad6ef504ac8f741c06391b885de6ebd3b776614b8c301b6ef1e4cbe65349d9e2f4dc5109b90eb7fd569dc8f14218db13e6934480f9a8a64b228ec013d5abe3f0ac33b9748dd053d89219f39a262e8cabe8488709bddc8e17b011dec1f43e3f6c5e8921a6fbe7407d232468c45abf4f0fae826fb8f14f20253785f8ffee82ffbf32ee4916d63ea7629aa75e3b9151d3d42da75617e073ff2ff67177f954b6808aa66c5bd2b9af84ff3df7d642480ac183adfd82f48939b3d874cf4dbb8df5cfb7f6df05e3354787843f196a5e92a75933ec73114644105d67d9adea55a54e72f96a4546ab4696d0ae0eb3332b18f39513a6fa83e38afdceec2374174c6334a43270ee86737b1537abc65cc3fe5daca64617a7c1527738ed3cba7273f485f34a744fdff1af786a94dfcc4a5c62ca95cb76a3d8d99c29a7f6359c0eb2f094f2920d0f09ffebec18821dae31104f944cbbff4155129bd279f95577d74a4426b5db9d747b000233eb6749c9bbd8758125fe39dc6ef1d191168764409c9e2b55625d652a5076a07695e7c88990c0f37ab64bbd1548240fd5288038c3c9deaa05410b791d6a62a696030028dd405352a6199641475556e5f3bed963ab06771ade533bf687c2abb4a2db9a0ae1c4eb2e600393c31d7fa86337faac03efe36082a49da7a63a2c50333ac5e3ac50ae6abfc370e6238b538a3d66be8099be9f57f48188f71d52793874c0f10404bc5269b3710635365a99bfe5006099a50a9dc46b7a4666b2bd7c0cc849b6e6fe631d7076cf352a3196aa9f5f1234b0801403aba004639a242a204a3f1d525f730e3327af7ea8a08ca4ff4275c392eb367bbbc6a4e4acdd595e4659bf2b5695ff9e836f983b02898303e5b69c425f4a692e95922bbf6b18f3162d78bae04903ddf2198de044208644087ed170491cd10a5759a496af6eb6f7e0debcb1e029012252c75404c891ecf3b194642073141ac04abc124780e575e4da68fc52dd443c0c9803dad1ca2d52da78f77bacf3c2f0c190dab4d9b16fb2d6a166867ea1ef5d36ab3e2ef1d47871c54d904430b739f5da1dc8a7cf66540b9c9fd72633dcfbadbe9194e1900f530c951ad57db1be74d978d40a1de7a930be2c05507ce52c87e4d8be74fc6702d37a5325deb250d8a71eb09c4d6315c5323e8476ed55d5e5e2e2bf33473eb4a39987312eae03d53cdc3e82e7158f9ae412db216b2b62cd8afb4ea1834fba24418ae2f5012f98d0e8188340720287e58b8586c96305852ef6d73f16b37af85cc18ad1bcdbefc99252d67eafecb51a22d2d63d855e085acd88cb3a7f4b679938e35b5e084cf37a9f3be98e78f99d0b7abaa42f516ec1a6a81bea6de47c2331a37d8f2f4253dc4a9d7964a88c99263f203427828d3aef97e232eb9b8a5251de3f900d1cd81ed5766ba7222820f089e82432efe19f3fb036ea33c752c32a612b4dd90c9542e1e6cd29f2b65f58c518afbfe33b499457b69a108d487fbb4dcf388deb3d03dbabadc3b4efd89bd4bc1f079104aa79b48f8601ed26cc437f6f070d2696bb65b9d8011abc84668ca15e9b4bc03d9aa6d9ba5722c4c630d0fae550c8f091195935bb1b10732e1490494f57ab246aa84da0610de7e287df06e65de289571ab5b72d63f2549763a767432a5f2afcc05bbf0bdd162ed6f4a2598cd3146488cb8352e274a07e2e5063f1b63b121c8dd5c0b4bc4ea6b295e5c1d92d0c5935468d34273337255df8f766438c7a1e4ee10e8672357fdc872ad67d42aa9627067350ba6b9b0c0c5fd10f13f5f2d406e87d9e46f50db6db976694a8547ae8449eb0c62fd3a333a3e0ba0e5e879d8f3cb8bc335ef17fbbee499a6e2eb2f76c9fea69dd4615c28bd3539de37e1a0095f298e9edae03a532321c65944d1f4702db10dc19767fc744c3b6b9271c96513806d6638a9247f5810e44f7a832251e36302b4b134a3fb1bf2808e149afb9b505033862315f456e9638004d0b12fd5ece4bbebdf7e4fb737f136ec089a68fa333c1084e89493a3e0ab9c84a8a46669a9a5903ce86479cdda9e0fb6ba32335409262af48aba6b4be1de76df919af1574f5e5365e18c8b5b5dbd787aaae79125b3f943ec0cc040d8a38cc5454c0267d0707626b107be0434e25397eda01551d2f5fb049e9598e4fc99356c9d89c4993315a7d3fdbc8fc4f4201216ac34013214e17f3cf4954f5814274da5bfc946c3303c0b0d0363b52a1454bf67bb2ff06bb4c2d9bc01e816fd340a213c596798f087c52643228e6fa86128ab89dc397bc6e0fc0fb0f43cbfb15bf778bbdfa7079dfc0c26354bf701fe539ec4e3837ae078aea26d5f01e866cde876849488629b95af7743d8123af352ae10c59ecf01596e7a97dc5dcb36871998af98100858ccd15eeba30f79f09fef3123f15765cb106e7b525d61941592d214734dcb5c1ac842e1a915b53306204dc7fd92e6a9c1db9f864cca119a106566926c3c3ba0f79b56f704db8eb59767321718c9d53b80c27799756226f3b7c2afc20644410638c5ad1f033b439157cbc70c46a01752a4c9dffce5376fb159c7da88df8b3b7509529302d974d3a5c8d8c28c867c2c35352e7f8bd120fa1eeccad881121c321523031a14163241f10d8fcfadf5d01e4d4aa6f71dc734ae1d06fec083cee121f226bec3746545fabd563afae49535835bc5908176f0d8b1f880e618f912825d89666510ee78a014fcd649c2f5a6abbe72c0443c9f0fa0d176ed1a2ea6d1328cf813d24ddea848ea1e639e838ee4eb04a2792232e5df580a4723720048420840d2e9ed6251df551113c8b88eed07f3dbdff616639231dd9cd948fb76362b7e96b65af0b18b6a08b6f118601c9e84a228433b60968933146077492b0b13c3b54d7ddfe62c203e069f0e57308f896015fbfb396b19b6452d30ce4bc317a8ebbd80a9ed95212f5a389d513de52337455705e65c9a7747fb1d61df6609b166184bc179389dfeef02f8d201ddf1febad5a909d22b75d5100f1bd1d68af18b69e3626ea811e4da0dc49a316aaccaf3e095e58d55f459d3a4f4a23a900cae4e21323bf54da189c0bd82fedc15aeabfa6db97a3e8d7ad11ad2c834a2fd13d47ecd16e204250ab0cb02c553c360e6967c56525b0ec673d9b34aee583d27de14f97b06a0caabaa171e3f0c14a301492168bd0c268bbbb2629c04bf3e57f97995a104729b7c3e7b8cc5dbd60af0d6cd9ba986fcca4d9710c86b4868c7d3ed7832f8cc3694aa80100cbe812d438e5016395d2f051a1b198e4d627f7da09bb5a1294502d72b7215c37b4dc3ccfb6136ee998a153ad16641858c1b6dfa6bd3adb7a3778f7381f8fd82b2927b228ad3f8479920c930ed86413caf36745228eb8ac48cb305ff16af4198d994d94b53ac28a251fed209fbb41271f0e0bf44344c8b328653d26cd15b97a7885bad18c7470268cf3ad49e5f702a7c201492de7c1dc8e0872d0d89ec8f619095e631040925b08de382739e352f4fcc02ce92377370c95ea6194b37734e3585364e1890e9169461d9f88fb08afb8f3c2c8d0f18be0c24e7621b7a406ab0f220c25014a5d43b2d433c8b47b0300e3d82b72bd57ca780ddf0fb427bb989c2606a5ea7139153e6378bfbc0ddb73a3724a242f29dda388ab2653581a03746ec0407f09f41d58fb3646e2f174cf6b20b692b270e7fa068d4aa3164d0b693d188c03136178576b05ceb0ed341fb329cc5335d183cc59082011d2453ace37f7d6b662869d0757bf13643bb5316141bfa12e8adb18fda067c22f8ecb9f9e98f89a4a2a793203bf8e185897055be992972b8b8321fcf57cb7aa7ad0c193553205fd8a8c87b10168bb17efbb9de4202b693bebbd766a6f54cd6e0b0a2194c65d50cdd4133a60f932d69de1c945187af30c5c9428e58db42bbca792243affa2acaa5d89d19fcea0f0df4d3bbcfe2cfd5f47ef82ac33b94194848d14e01c20aa12ab55619ed4dbaf1283f0867736c5194d7c84f353a1da9956cce7ac54b8476c77d82e6e23bc181feb27d39d3d3cdf38ec6c2019f66a3f55f802c892df90f348ae872f086f6f102e489903ea245dbebcc80e16999899d7f804c4a9dd51d07a07890dd1cd5401c9a6a081ed318568182b1fd9a97fab48be94d1616a6d86d0056ed408d10d664fb755cd668b2109276ce34baf5cb2a2ec2001aa7cb8f3d2de8e5321a226f3b6bc49af2e19e72ef462ce26541a7a11558fff0623e763b42876de4411966d557946c3ff1499fff8201a0eb55618a1e4f31146653c779f410a3e823f3808c5c70cbea06f30a02cde1f17e84988a3ad054be2d8fc98c2abdb342fcef59c184e088c0a96c99236ef85f318435a8d75a04221bbce0f1659909660e8db7890825fed46c8836397e8263db9e441427517911220ec8d099bcbfa12136ef4733f976b42261b7b89b33bb5acc6a8557e4bbf6b0733e22c67f8c0a6e2e9d8857a4554242d3f831b010d3338129d1dee457b2c701bf1732b974a293d0394ed822b9f7ea9e9eeb54cdbeddca7a1507854d4da04bf73bfd737a15c4ab12e475622c620543b6fd60454777ca04b79d106fe417cedf55cc53a7892b75e3bb9743f21062e3ad0eca7f28756b5475b9f6969e81ff3c2c4e82082446466d6bf2eb3bfb897bdf062cc6e2514f5f344d03656662814d6539448e909a42d16eb2afd9fb27d1a5f863e398d0ce441a7a0a26769284ffa6ec803fb7ef669fb870031f9b787de90bb4b49b38c92a4f0e5a43b69eb8953ce84ed1688c2d47cbf103f8a4a68b986fdecd29162b1ef8d8de8e8f7a710405c43cb2f1a1785df6d101e305095b8f7427829a110f9dc1f813efbe9472e29bef1d2f6da5787df0a1c71cdf4df8cdae48a562d998a93c8099306cf2db67a4064166e87cf8890541e0b34deb66f774243b0f35c090d1ed2d005804a6034d58c0602fac436edc409adfc694c168d9d5a4b1e774f4ebb496e8ee11924a48fb1218c5a40dfc7aa7c25569768b81fb4d27f7ed8cc18c4c02b37e7e801dae207c84620a304470aa305a89e36cf72bc48a314d4b949c70d474af532b8d2370e0a1f606de8c124d9a783c97c0318390b54daee476c6180cc2d7d3242e58e9b26f86213b63d34b96d304cd4c307d16884e545a87dc89bd75aa423477333bd5f3d1d996241031f9199e7ed458adc164094b43bc6df45f85c0937a6121c990f46fdc643bdfc41cfedc9f342a5aa1e97988c8fb806f537825546b79e40627da469f42299611c26ff7dbebbab8055133ed2b94fd9d934e746000"/5664], 0x1620) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) flock(r3, 0x0) 08:42:01 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb704, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r6, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f00000002c0)=0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f00000000c0)={r8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, [0x2, 0x9, 0x7f, 0xffff, 0xfffffffffffffffa, 0x2, 0x20, 0x7fff, 0x401, 0x3ff, 0x0, 0x9, 0x10001, 0x101, 0x5]}, &(0x7f0000000000)=0x100) mq_timedsend(r3, &(0x7f0000000300)="db41b4dc2bc680d5cace2592fc727504a1168a52b0f8dfe6b82521c2cf27415af38ab2f486d015c6e90474b20b1aef2a4e33d88636367dcd54f2eb40b3e13a4235a8eb6680550b37985ef66070d461b1fe2e782953c8d03bc9", 0x59, 0x1, &(0x7f0000000380)={0x0, 0x1c9c380}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r9, 0x40, 0xffffffff}, &(0x7f00000001c0)=0x8) 08:42:01 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000054b1cdedb45430d22a15c22ec100828d4b1369ccb5699123b08d8049875502cc62a7a907000000000000010000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x53, 0xee90, 0x200, 0x1, 0x8, 0xa92, 0xff, 0x1fc00000, r3}, &(0x7f0000000080)=0x20) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x8, &(0x7f00002a0000/0x2000)=nil) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 307.817671][T17892] Memory cgroup out of memory: Killed process 17661 (syz-executor.4) total-vm:72840kB, anon-rss:4252kB, file-rss:35780kB, shmem-rss:0kB 08:42:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe530000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'\x00', 0x200}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000200)={0x4, "63f219352e203df562e6d36bbe36becefcfe3858ce06bcb322849c23302e9e10", 0x40, 0x8, 0x2, 0x4}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6a0000000000a8b9b62ae8b24be500efffffbfffffffff00"], 0x10}, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) dup3(r1, r4, 0x80000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) [ 307.886717][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:42:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) accept4$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 08:42:01 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x80000) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) [ 307.955042][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:42:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff48, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400060082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 308.019971][T17907] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 308.103460][T17907] CPU: 0 PID: 17907 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 308.111392][T17907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.121473][T17907] Call Trace: [ 308.124796][T17907] dump_stack+0x172/0x1f0 [ 308.129142][T17907] dump_header+0x10b/0x82d [ 308.133571][T17907] oom_kill_process.cold+0x10/0x15 [ 308.138696][T17907] out_of_memory+0x79a/0x12c0 [ 308.143382][T17907] ? retint_kernel+0x2b/0x2b [ 308.148239][T17907] ? oom_killer_disable+0x280/0x280 08:42:01 executing program 1: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000380)={0x5, 0x100, 0x8000}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0200020008040000"], 0xc) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x444a80, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r7, &(0x7f0000000200)="8c4beb21055cc85399bec7d2be452c6d477e642acd4e473607d2f095bfc9f5edcc3ae3f23aea5b63875ac21abf6657a9f7fab1fd441e9ba012f0b9138cf637054574bc15c62c825ac3ae3d85d6da61116916eb86a396242a"}, 0x931996862bf0c3e8) open_by_handle_at(r1, &(0x7f0000000280)={0xac, 0x0, "53088e72e24bf95b274df611a70825595cd6b8f5a2c70371a17597a72d6d954e1abfdb05433a1df27163714855001e18475fc009ad6a9ed6c20258724b3bd45d42ba55b2884d75bd5def75af76d8ee2d7380e41257b35387b5aa0463dd8064a8cd62a1a35d3150f38dc0afc9d857399d8bfe8d1005343c78f92642e43c0ee5e65a42c1f76d534c7805097a57095b57fcd0b3be359f36f435b544462487674e7d6aaca074"}, 0x204180) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) ioctl$VT_RELDISP(r8, 0x5605) [ 308.153437][T17907] mem_cgroup_out_of_memory+0x1d8/0x240 [ 308.153451][T17907] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 308.153468][T17907] ? do_raw_spin_unlock+0x57/0x270 [ 308.153488][T17907] ? _raw_spin_unlock+0x2d/0x50 [ 308.174713][T17907] try_charge+0xf4b/0x1440 [ 308.179145][T17907] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 308.184789][T17907] ? get_mem_cgroup_from_mm+0x139/0x320 [ 308.190469][T17907] ? __kasan_check_read+0x11/0x20 [ 308.195554][T17907] ? lock_downgrade+0x920/0x920 [ 308.200417][T17907] ? percpu_ref_tryget_live+0x111/0x290 [ 308.205978][T17907] __memcg_kmem_charge_memcg+0x71/0xf0 [ 308.212575][T17907] ? memcg_kmem_put_cache+0x50/0x50 [ 308.218652][T17907] ? get_mem_cgroup_from_mm+0x156/0x320 [ 308.224198][T17907] __memcg_kmem_charge+0x13a/0x3a0 [ 308.229300][T17907] __alloc_pages_nodemask+0x4f4/0x900 [ 308.234665][T17907] ? __alloc_pages_slowpath+0x2520/0x2520 [ 308.240397][T17907] ? copy_page_range+0xef4/0x1ee0 [ 308.245517][T17907] ? __kasan_check_read+0x11/0x20 [ 308.250526][T17907] ? vm_normal_page+0x15d/0x3c0 [ 308.255384][T17907] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 308.261611][T17907] alloc_pages_current+0x107/0x210 [ 308.266712][T17907] pte_alloc_one+0x1b/0x1a0 [ 308.271205][T17907] __pte_alloc+0x20/0x310 [ 308.275518][T17907] copy_page_range+0x1520/0x1ee0 [ 308.280435][T17907] ? trace_hardirqs_on_caller+0x6a/0x240 [ 308.286056][T17907] ? pmd_alloc+0x180/0x180 [ 308.290451][T17907] ? vma_gap_callbacks_rotate+0x62/0x80 [ 308.295984][T17907] ? __rb_insert_augmented+0x20c/0xd90 [ 308.301427][T17907] ? validate_mm_rb+0xa3/0xc0 [ 308.306096][T17907] ? __vma_link_rb+0x275/0x370 [ 308.310853][T17907] ? __kasan_check_write+0x14/0x20 [ 308.315975][T17907] dup_mm+0xa67/0x1430 [ 308.320034][T17907] ? vm_area_dup+0x170/0x170 [ 308.324624][T17907] ? debug_mutex_init+0x2d/0x5a [ 308.329475][T17907] copy_process+0x28b7/0x6b00 [ 308.334153][T17907] ? __cleanup_sighand+0x60/0x60 [ 308.339181][T17907] _do_fork+0x146/0xfa0 [ 308.343328][T17907] ? copy_init_mm+0x20/0x20 [ 308.348218][T17907] ? __kasan_check_read+0x11/0x20 [ 308.353454][T17907] ? _copy_to_user+0x118/0x160 [ 308.358224][T17907] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 308.364452][T17907] ? put_timespec64+0xda/0x140 [ 308.369216][T17907] __x64_sys_clone+0x18d/0x250 [ 308.373977][T17907] ? __ia32_sys_vfork+0xc0/0xc0 [ 308.379084][T17907] ? trace_hardirqs_off_caller+0x65/0x230 [ 308.384792][T17907] ? trace_hardirqs_on+0x67/0x240 [ 308.389806][T17907] do_syscall_64+0xfd/0x6a0 [ 308.394297][T17907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.400175][T17907] RIP: 0033:0x459879 [ 308.404057][T17907] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.423701][T17907] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 308.432113][T17907] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 308.440157][T17907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.448106][T17907] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.456064][T17907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 308.464018][T17907] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 308.480884][T18025] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.489193][T18025] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 08:42:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x2, &(0x7f0000ffe000/0x2000)=nil, 0x6}) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000300)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/31, 0x1f, 0x1, 0x9}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0xab, 0x0, &(0x7f0000000380)="dbf13b25304e9ffe3bc5b4824f70114c6d84bc57a7c5193c2cd8dfcb1008e0f5a86cc5d5406e4784f0d2f8d12d9ec1bf79b525d021dad29183b342289c0ed6a58c7ff8855fab6b0fea96e508326d76235640607d27d712757405f08b1e0d985f9e6fed67d22de9afaca5864887dfb4b8a35f90c4ee5be98aa774ce30a74d69cc3bc74275a06e1abd3bef580175df571accd852c5fcc4906a6063c5c6f81b56265866c8427d40acb5698ac5"}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) [ 308.508025][T17907] memory: usage 307200kB, limit 307200kB, failcnt 704 [ 308.515476][T17907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 308.527296][T17907] Memory cgroup stats for /syz4: [ 308.528415][T17907] anon 293761024 [ 308.528415][T17907] file 184320 [ 308.528415][T17907] kernel_stack 2686976 [ 308.528415][T17907] slab 6344704 [ 308.528415][T17907] sock 0 [ 308.528415][T17907] shmem 0 [ 308.528415][T17907] file_mapped 0 [ 308.528415][T17907] file_dirty 135168 [ 308.528415][T17907] file_writeback 0 [ 308.528415][T17907] anon_thp 285212672 [ 308.528415][T17907] inactive_anon 0 [ 308.528415][T17907] active_anon 293761024 [ 308.528415][T17907] inactive_file 0 [ 308.528415][T17907] active_file 0 [ 308.528415][T17907] unevictable 0 [ 308.528415][T17907] slab_reclaimable 1486848 [ 308.528415][T17907] slab_unreclaimable 4857856 [ 308.528415][T17907] pgfault 13794 [ 308.528415][T17907] pgmajfault 0 [ 308.528415][T17907] workingset_refault 0 [ 308.528415][T17907] workingset_activate 0 [ 308.528415][T17907] workingset_nodereclaim 0 [ 308.528415][T17907] pgrefill 376 [ 308.528415][T17907] pgscan 441 [ 308.528415][T17907] pgsteal 37 [ 308.528415][T17907] pgactivate 297 [ 308.633222][T17907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17891,uid=0 [ 308.649964][T17907] Memory cgroup out of memory: Killed process 17891 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34944kB, shmem-rss:0kB 08:42:02 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x8, 0xffffffffffff7e37, 0x2, 0x3, 0x4}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x47e3}, &(0x7f0000000240)=0x8) ioctl(r1, 0x1000008912, &(0x7f0000001540)="11dca50d5e0bcfe47bf070") ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017P\xe5\xf7\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x96%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00\x1d\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 308.807158][T18038] input: syz0 as /devices/virtual/input/input13 08:42:02 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 308.859813][T18035] debugfs: File '18027' in directory 'proc' already present! [ 308.874514][T18130] input: syz0 as /devices/virtual/input/input14 08:42:02 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000500)='net/ip_mr_vif\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000000)=""/194) getgid() getsockopt$rose(r0, 0x104, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x100000000, 0x0) 08:42:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x1bc, 0x3e7, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000000000, 0x0, 0x2, 0x7, 0x1, 0x0, 0x3f, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x12) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x18) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KDENABIO(r2, 0x4b36) 08:42:02 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040)="71e390006bc09880eab486b2a929770d4a84c275abb9d299fa6cc4ac0af1d5f9bd60d83f1341bfc3e8e0731cacf06f9d3840bf041b8c3fed958d4008c9466999aa6ca3cd9585115c02a1110d33082d8e1e77ee979fc1b29dd99b4d983cf38110c765df56d9b9bac13e91d92323b3d656da80", &(0x7f0000000200)=""/154}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000000)=@framed={{0x18, 0x4c, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 08:42:02 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="7400000066000b0500000000000000edffffff00", @ANYRES32=r2, @ANYBLOB="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"], 0x74}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x9, 0x4) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x800) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 309.148637][T18150] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 309.183292][T18150] CPU: 1 PID: 18150 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 309.191228][T18150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.201293][T18150] Call Trace: [ 309.204582][T18150] dump_stack+0x172/0x1f0 [ 309.208916][T18150] dump_header+0x10b/0x82d [ 309.213327][T18150] oom_kill_process.cold+0x10/0x15 [ 309.218540][T18150] out_of_memory+0x79a/0x12c0 [ 309.223212][T18150] ? lock_downgrade+0x920/0x920 [ 309.228073][T18150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.234320][T18150] ? oom_killer_disable+0x280/0x280 [ 309.239513][T18150] ? __kasan_check_read+0x11/0x20 [ 309.244543][T18150] mem_cgroup_out_of_memory+0x1d8/0x240 [ 309.250103][T18150] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 309.255741][T18150] ? do_raw_spin_unlock+0x57/0x270 [ 309.260851][T18150] ? _raw_spin_unlock+0x2d/0x50 [ 309.265700][T18150] try_charge+0xf4b/0x1440 [ 309.270118][T18150] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 309.275667][T18150] ? get_mem_cgroup_from_mm+0x139/0x320 [ 309.281206][T18150] ? __kasan_check_read+0x11/0x20 [ 309.286235][T18150] ? lock_downgrade+0x920/0x920 [ 309.291106][T18150] ? percpu_ref_tryget_live+0x111/0x290 [ 309.296667][T18150] __memcg_kmem_charge_memcg+0x71/0xf0 [ 309.302124][T18150] ? memcg_kmem_put_cache+0x50/0x50 [ 309.307325][T18150] ? get_mem_cgroup_from_mm+0x156/0x320 [ 309.312864][T18150] __memcg_kmem_charge+0x13a/0x3a0 [ 309.317977][T18150] __alloc_pages_nodemask+0x4f4/0x900 [ 309.323349][T18150] ? __alloc_pages_slowpath+0x2520/0x2520 [ 309.329072][T18150] ? copy_page_range+0xef4/0x1ee0 [ 309.334227][T18150] ? __kasan_check_read+0x11/0x20 [ 309.337691][T18165] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 08:42:03 executing program 2: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f0000000180)={0x1, 0x80000001, 0x1000, 0xbc, &(0x7f00000000c0)="a8ec0763b5db0910ac5f403df9b734b36af42e9eaa86f241b536b1b04e9fcee11597f125967ddb053f8514473e7f71c64f9ca1d4af56d7be7b516c7cfebaaf4ae958ce0836290d9fb7217649ffe097f654d2ec68a86db8ef483f772ef7666753ce0510bf4657405e8bea2b2cb9d968e927e24725e8cfe218908839add56e6bb5b4d7952c309396534f16217b071e587089bd8c11a231062a4bfa06038a31601fa21c61cdd664362fb12740d7f6e995aef96c88e9ea57c49ca992c611", 0x3e, 0x0, &(0x7f0000000000)="2e97f3808d893b2cfa6d84344808b2d84bb619d7609f0465a92f1bc00966fe6fb54bcab1671d16835cd0921b4e3e685a6d0a7141340752e0d6db204748c1"}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x141100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) fcntl$getflags(r1, 0x401) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000440)={0x10000000d, 0xffffffffffffffff, 0x1, 'quew\x00\x00\x00\x00\x00\x98A\ti\xf5~\v\xd7\x00\b\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4\xff\xff|.\xdd\t\x00\x00\x00\x00\x00\x00_\x00\x00\x00\xba\xcb\xda\xf1\x00', 0x6}) r3 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000400)="2e0000001900d927e65de087185082cf1924b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) [ 309.339250][T18150] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 309.339271][T18150] alloc_pages_current+0x107/0x210 [ 309.359877][T18150] pte_alloc_one+0x1b/0x1a0 [ 309.364386][T18150] __pte_alloc+0x20/0x310 [ 309.368719][T18150] copy_page_range+0x1520/0x1ee0 [ 309.373659][T18150] ? trace_hardirqs_on_caller+0x6a/0x240 [ 309.379305][T18150] ? pmd_alloc+0x180/0x180 [ 309.383731][T18150] ? vma_gap_callbacks_rotate+0x62/0x80 [ 309.389271][T18150] ? __rb_insert_augmented+0x20c/0xd90 [ 309.394724][T18150] ? validate_mm_rb+0xa3/0xc0 08:42:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0xfffffffffffffe30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x351, &(0x7f0000004b40), 0x2a, &(0x7f0000004bc0)}, 0xf401}], 0x19cbcb36e8172e, 0x0) [ 309.399409][T18150] ? __vma_link_rb+0x275/0x370 [ 309.404173][T18150] ? __kasan_check_write+0x14/0x20 [ 309.409294][T18150] dup_mm+0xa67/0x1430 [ 309.413376][T18150] ? vm_area_dup+0x170/0x170 [ 309.417970][T18150] copy_process+0x28b7/0x6b00 [ 309.422698][T18150] ? __cleanup_sighand+0x60/0x60 [ 309.427646][T18150] ? __this_cpu_preempt_check+0x3a/0x210 [ 309.433294][T18150] _do_fork+0x146/0xfa0 [ 309.437451][T18150] ? copy_init_mm+0x20/0x20 [ 309.441965][T18150] ? __kasan_check_read+0x11/0x20 08:42:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x3f0) read(r2, &(0x7f0000000380)=""/225, 0xfffffd0d) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x80000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x2, 0x7}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000140)={0x3, @raw_data="0bbe08d1b78c618eb1e58ffa99b9109f2fc600ea06fe1b92990c699ffb5bfc89b0ccfa2a302279821fda4e5036a2e0e2b77a0c16229f9458f080dd0952899544544a0d9923b8eaa78100e092fd5ca542608ede2e6ba840697c307b8b787869ac5f4b0419e1b14f4488cdc73cb40edd500c372449a5bdc4771cc80dd42a811160bbdd20f99a6031184895e0f722b413b9f143daef6e5a58e6d81c5184f966e47c1f831871b4ff590fe51a8fca70bd4827622077a137ccefb6d85d63f0b6a403817a2c635b1a86a32e"}) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10000) [ 309.446985][T18150] ? _copy_to_user+0x118/0x160 [ 309.451764][T18150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 309.458024][T18150] ? put_timespec64+0xda/0x140 [ 309.462799][T18150] __x64_sys_clone+0x18d/0x250 [ 309.467584][T18150] ? __ia32_sys_vfork+0xc0/0xc0 [ 309.472449][T18150] ? trace_hardirqs_off_caller+0x65/0x230 [ 309.478178][T18150] ? trace_hardirqs_on+0x67/0x240 [ 309.483312][T18150] do_syscall_64+0xfd/0x6a0 [ 309.487828][T18150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.493718][T18150] RIP: 0033:0x459879 08:42:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/56) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x101, 0x800}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) write(r1, &(0x7f00000000c0)="1400000052001f0014f9f407000904001c92a36f", 0xfffffffffffffd50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x10, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e22, 0x3, @rand_addr="7d055f2fe2df7cfa800a34aaff540044", 0x5}}, 0x101, 0x3f, 0x4, 0x1, 0x33}, &(0x7f0000000080)=0x98) [ 309.497618][T18150] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.517415][T18150] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 309.526436][T18150] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 309.534415][T18150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 08:42:03 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/devomC#\x00\x04\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4) vmsplice(r1, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x400) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x48040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc1105511, &(0x7f00000002c0)=ANY=[@ANYBLOB="01"]) 08:42:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000080)={{0x0, 0x0, 0x1f, 0x6735b879557cdc4c, 0x1000}, 0x1ff, 0x80000001}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r3) keyctl$revoke(0x7, r3) [ 309.542394][T18150] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.550552][T18150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 309.558533][T18150] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 309.575912][T18150] memory: usage 307200kB, limit 307200kB, failcnt 729 [ 309.582790][T18150] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 309.687057][T18150] Memory cgroup stats for /syz4: [ 309.687843][T18150] anon 293732352 [ 309.687843][T18150] file 184320 [ 309.687843][T18150] kernel_stack 2686976 [ 309.687843][T18150] slab 6344704 [ 309.687843][T18150] sock 0 [ 309.687843][T18150] shmem 0 [ 309.687843][T18150] file_mapped 0 [ 309.687843][T18150] file_dirty 135168 [ 309.687843][T18150] file_writeback 0 [ 309.687843][T18150] anon_thp 285212672 [ 309.687843][T18150] inactive_anon 0 [ 309.687843][T18150] active_anon 293847040 [ 309.687843][T18150] inactive_file 0 [ 309.687843][T18150] active_file 0 [ 309.687843][T18150] unevictable 0 [ 309.687843][T18150] slab_reclaimable 1486848 [ 309.687843][T18150] slab_unreclaimable 4857856 [ 309.687843][T18150] pgfault 13926 [ 309.687843][T18150] pgmajfault 0 [ 309.687843][T18150] workingset_refault 0 [ 309.687843][T18150] workingset_activate 0 [ 309.687843][T18150] workingset_nodereclaim 0 [ 309.687843][T18150] pgrefill 409 [ 309.687843][T18150] pgscan 441 [ 309.687843][T18150] pgsteal 37 [ 309.687843][T18150] pgactivate 297 [ 309.853747][T18150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18034,uid=0 [ 309.870822][T18150] Memory cgroup out of memory: Killed process 18034 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 309.892243][ T1057] oom_reaper: reaped process 18034 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 309.981121][T18150] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 309.991637][T18150] CPU: 1 PID: 18150 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 309.999520][T18150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.009573][T18150] Call Trace: [ 310.012860][T18150] dump_stack+0x172/0x1f0 [ 310.017290][T18150] dump_header+0x10b/0x82d [ 310.021699][T18150] oom_kill_process.cold+0x10/0x15 [ 310.026809][T18150] out_of_memory+0x79a/0x12c0 [ 310.031487][T18150] ? __this_cpu_preempt_check+0x3a/0x210 [ 310.037117][T18150] ? retint_kernel+0x2b/0x2b [ 310.041704][T18150] ? oom_killer_disable+0x280/0x280 [ 310.046902][T18150] mem_cgroup_out_of_memory+0x1d8/0x240 [ 310.052444][T18150] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 310.058096][T18150] ? do_raw_spin_unlock+0x57/0x270 [ 310.063222][T18150] ? _raw_spin_unlock+0x2d/0x50 [ 310.068088][T18150] try_charge+0xf4b/0x1440 [ 310.072680][T18150] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 310.078225][T18150] ? percpu_ref_tryget_live+0x111/0x290 [ 310.083769][T18150] ? get_mem_cgroup_from_mm+0x16/0x320 [ 310.089239][T18150] ? get_mem_cgroup_from_mm+0x156/0x320 [ 310.094794][T18150] mem_cgroup_try_charge+0x136/0x590 [ 310.100082][T18150] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 310.106490][T18150] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 310.112105][T18150] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 310.118089][T18150] ? defrag_store+0x360/0x360 [ 310.122758][T18150] ? lock_downgrade+0x920/0x920 [ 310.127613][T18150] ? swp_swapcount+0x540/0x540 [ 310.132602][T18150] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 310.138490][T18150] ? __kasan_check_read+0x11/0x20 [ 310.143516][T18150] ? do_raw_spin_unlock+0x57/0x270 [ 310.148906][T18150] do_huge_pmd_wp_page+0x806/0x2270 [ 310.154094][T18150] ? __this_cpu_preempt_check+0x3a/0x210 [ 310.159716][T18150] ? __split_huge_pmd+0x27e0/0x27e0 [ 310.164901][T18150] ? pgd_val+0x85/0x100 [ 310.169045][T18150] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 310.174594][T18150] ? pmd_val+0x85/0x100 [ 310.178726][T18150] ? add_mm_counter_fast.part.0+0x40/0x40 [ 310.184448][T18150] __handle_mm_fault+0x14cf/0x3f20 [ 310.189550][T18150] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 310.195095][T18150] ? __kasan_check_read+0x11/0x20 [ 310.200109][T18150] ? trace_hardirqs_on+0x67/0x240 [ 310.205138][T18150] handle_mm_fault+0x1b5/0x6b0 [ 310.209898][T18150] __get_user_pages+0x7d4/0x1b30 [ 310.214821][T18150] ? __mutex_lock+0x45d/0x13c0 [ 310.219564][T18150] ? follow_page_mask+0x19b0/0x19b0 [ 310.224748][T18150] ? process_vm_rw_core.isra.0+0x420/0xb10 [ 310.230545][T18150] get_user_pages_remote+0x234/0x4b0 [ 310.235810][T18150] process_vm_rw_core.isra.0+0x464/0xb10 [ 310.241429][T18150] ? retint_kernel+0x2b/0x2b [ 310.246000][T18150] ? pcpu_get_vm_areas.cold+0x49/0x49 [ 310.251361][T18150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.257586][T18150] ? _copy_from_user+0x12c/0x1a0 [ 310.262685][T18150] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 310.268389][T18150] ? rw_copy_check_uvector+0x2ce/0x390 [ 310.273827][T18150] ? do_futex+0x17d/0x1dc0 [ 310.278323][T18150] ? do_wp_page+0x4a1/0x14d0 [ 310.282891][T18150] process_vm_rw+0x21f/0x240 [ 310.287464][T18150] ? process_vm_rw_core.isra.0+0xb10/0xb10 [ 310.293264][T18150] ? lock_downgrade+0x920/0x920 [ 310.298124][T18150] ? __kasan_check_read+0x11/0x20 [ 310.303155][T18150] ? _copy_to_user+0x118/0x160 [ 310.307915][T18150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.314160][T18150] ? nsecs_to_jiffies+0x30/0x30 [ 310.318994][T18150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.325226][T18150] ? __x64_sys_clock_gettime+0x16d/0x240 [ 310.330867][T18150] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 310.336572][T18150] do_syscall_64+0xfd/0x6a0 [ 310.341059][T18150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.346949][T18150] RIP: 0033:0x459879 [ 310.350834][T18150] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.370418][T18150] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 310.378808][T18150] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459879 [ 310.386763][T18150] RDX: 0000000000000003 RSI: 0000000020000000 RDI: 000000000000027e [ 310.394723][T18150] RBP: 000000000075bf20 R08: 0000000000000001 R09: 0000000000000000 [ 310.402667][T18150] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007efc996616d4 [ 310.410620][T18150] R13: 00000000004c6bba R14: 00000000004dbdd0 R15: 00000000ffffffff [ 310.421666][T18150] memory: usage 307040kB, limit 307200kB, failcnt 763 [ 310.433553][T18150] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 310.440702][T18150] Memory cgroup stats for /syz4: [ 310.441366][T18150] anon 291622912 [ 310.441366][T18150] file 184320 [ 310.441366][T18150] kernel_stack 2686976 [ 310.441366][T18150] slab 6344704 [ 310.441366][T18150] sock 0 [ 310.441366][T18150] shmem 0 [ 310.441366][T18150] file_mapped 0 [ 310.441366][T18150] file_dirty 135168 [ 310.441366][T18150] file_writeback 0 [ 310.441366][T18150] anon_thp 281018368 [ 310.441366][T18150] inactive_anon 0 [ 310.441366][T18150] active_anon 291627008 [ 310.441366][T18150] inactive_file 0 [ 310.441366][T18150] active_file 0 [ 310.441366][T18150] unevictable 0 [ 310.441366][T18150] slab_reclaimable 1486848 [ 310.441366][T18150] slab_unreclaimable 4857856 [ 310.441366][T18150] pgfault 13959 [ 310.441366][T18150] pgmajfault 0 [ 310.441366][T18150] workingset_refault 0 [ 310.441366][T18150] workingset_activate 0 [ 310.441366][T18150] workingset_nodereclaim 0 [ 310.441366][T18150] pgrefill 409 [ 310.441366][T18150] pgscan 441 [ 310.441366][T18150] pgsteal 37 [ 310.441366][T18150] pgactivate 297 [ 310.548760][T18150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18148,uid=0 [ 310.564619][T18150] Memory cgroup out of memory: Killed process 18148 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:35784kB, shmem-rss:0kB 08:42:04 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x4, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r4, 0x0, [], r2, r3, 0x5, 0x2}, 0x3c) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in6=@ipv4={[], [], @loopback}, 0x4e20, 0x0, 0x4e20, 0x8001, 0x2, 0xe0, 0x80, 0x2, r2, 0xee00}, {0x3f, 0x1, 0x10001, 0x5, 0x0, 0x1, 0x9, 0x7}, {0x8001, 0x8, 0xfffffffffffffff9, 0x8}, 0x3d53, 0x6e6bb2, 0x2, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x1, 0x1, 0x7, 0x0, 0x9, 0x40}}, 0xe8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000a9cff8)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 08:42:04 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:42:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000001c0)={"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"}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d808f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r3, 0x402c542d, &(0x7f0000000140)) 08:42:04 executing program 0: socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000380)=0x100000001, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x9c, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x2}, @register_looper, @increfs={0x40046304, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@flat=@handle={0x73682a85, 0x8a}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x2240}, @increfs_done={0x40106308, 0x2}], 0x63, 0x0, &(0x7f00000002c0)="90413dd084794b1f9f30c628bfc09853d0c3af6a1a891785ffabc1256d193545127a58c362442c4e97ec855d2980f8bc3ecd93b05c42292f00a4763c9bc9da8ae80c0acb21bada560119004e6ddeab54b34774f060db7a95b98211aa30960374d1b296"}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0xb2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x199, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 08:42:04 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x2, 0x401}) [ 310.584567][ T1057] oom_reaper: reaped process 18148 (syz-executor.4), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 310.765838][T18309] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 310.799715][T18309] CPU: 0 PID: 18309 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 310.807641][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.817725][T18309] Call Trace: [ 310.821106][T18309] dump_stack+0x172/0x1f0 [ 310.825438][T18309] dump_header+0x10b/0x82d [ 310.829855][T18309] oom_kill_process.cold+0x10/0x15 [ 310.834969][T18309] out_of_memory+0x79a/0x12c0 [ 310.839646][T18309] ? lock_downgrade+0x920/0x920 [ 310.844518][T18309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.850762][T18309] ? oom_killer_disable+0x280/0x280 [ 310.855977][T18309] ? __kasan_check_read+0x11/0x20 [ 310.861015][T18309] mem_cgroup_out_of_memory+0x1d8/0x240 [ 310.866573][T18309] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 310.872207][T18309] ? do_raw_spin_unlock+0x57/0x270 [ 310.877315][T18309] ? _raw_spin_unlock+0x2d/0x50 [ 310.882164][T18309] try_charge+0xf4b/0x1440 [ 310.886581][T18309] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 310.892386][T18309] ? get_mem_cgroup_from_mm+0x139/0x320 [ 310.897954][T18309] ? __kasan_check_read+0x11/0x20 [ 310.902977][T18309] ? lock_downgrade+0x920/0x920 [ 310.907832][T18309] ? percpu_ref_tryget_live+0x111/0x290 [ 310.913382][T18309] __memcg_kmem_charge_memcg+0x71/0xf0 [ 310.919477][T18309] ? memcg_kmem_put_cache+0x50/0x50 [ 310.924675][T18309] ? get_mem_cgroup_from_mm+0x156/0x320 [ 310.924688][T18309] __memcg_kmem_charge+0x13a/0x3a0 [ 310.924707][T18309] __alloc_pages_nodemask+0x4f4/0x900 [ 310.935358][T18309] ? __alloc_pages_slowpath+0x2520/0x2520 [ 310.935375][T18309] ? copy_huge_pmd+0x416/0x620 [ 310.951202][T18309] ? lock_downgrade+0x920/0x920 [ 310.956072][T18309] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 08:42:04 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x9, [0x8, 0x6, 0x8, 0x7271, 0x8, 0x4, 0xfffffffffffffffe, 0x7, 0x7c5c]}, &(0x7f0000000080)=0x16) [ 310.962314][T18309] alloc_pages_current+0x107/0x210 [ 310.967436][T18309] pte_alloc_one+0x1b/0x1a0 [ 310.971941][T18309] copy_huge_pmd+0x75/0x620 [ 310.976447][T18309] copy_page_range+0x775/0x1ee0 [ 310.981302][T18309] ? mark_held_locks+0xf0/0xf0 [ 310.986064][T18309] ? __kasan_check_read+0x11/0x20 [ 310.991188][T18309] ? pmd_alloc+0x180/0x180 [ 310.995712][T18309] ? __this_cpu_preempt_check+0x3a/0x210 [ 311.001341][T18309] dup_mm+0xa67/0x1430 [ 311.005401][T18309] ? vm_area_dup+0x170/0x170 [ 311.009984][T18309] copy_process+0x28b7/0x6b00 [ 311.014664][T18309] ? __cleanup_sighand+0x60/0x60 [ 311.019591][T18309] _do_fork+0x146/0xfa0 [ 311.023737][T18309] ? copy_init_mm+0x20/0x20 [ 311.028225][T18309] ? __kasan_check_read+0x11/0x20 [ 311.033241][T18309] ? _copy_to_user+0x118/0x160 [ 311.038958][T18309] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.045190][T18309] ? put_timespec64+0xda/0x140 [ 311.049955][T18309] __x64_sys_clone+0x18d/0x250 [ 311.054718][T18309] ? __ia32_sys_vfork+0xc0/0xc0 [ 311.059548][T18309] ? trace_hardirqs_off_caller+0x65/0x230 [ 311.065333][T18309] ? trace_hardirqs_on+0x67/0x240 [ 311.070349][T18309] do_syscall_64+0xfd/0x6a0 [ 311.074857][T18309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.080742][T18309] RIP: 0033:0x459879 [ 311.084619][T18309] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.104208][T18309] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.112606][T18309] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 311.120563][T18309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.128530][T18309] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.136485][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 311.144438][T18309] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 311.153076][T18309] memory: usage 307200kB, limit 307200kB, failcnt 1730 [ 311.160254][T18309] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:42:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:04 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') fchmodat(r1, &(0x7f0000000340)='./file0\x00', 0x5c) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000002c0)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10200, 0x0) accept4$unix(r2, &(0x7f0000000100), &(0x7f0000000080)=0x6e, 0x100800) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = dup3(r3, r2, 0x80000) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000280)) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x4) [ 311.167444][T18309] Memory cgroup stats for /syz4: [ 311.168271][T18309] anon 293629952 [ 311.168271][T18309] file 184320 [ 311.168271][T18309] kernel_stack 2686976 [ 311.168271][T18309] slab 6344704 [ 311.168271][T18309] sock 0 [ 311.168271][T18309] shmem 0 [ 311.168271][T18309] file_mapped 0 [ 311.168271][T18309] file_dirty 135168 [ 311.168271][T18309] file_writeback 0 [ 311.168271][T18309] anon_thp 285212672 [ 311.168271][T18309] inactive_anon 0 [ 311.168271][T18309] active_anon 293634048 [ 311.168271][T18309] inactive_file 0 [ 311.168271][T18309] active_file 0 [ 311.168271][T18309] unevictable 0 [ 311.168271][T18309] slab_reclaimable 1486848 [ 311.168271][T18309] slab_unreclaimable 4857856 [ 311.168271][T18309] pgfault 14025 [ 311.168271][T18309] pgmajfault 0 [ 311.168271][T18309] workingset_refault 0 [ 311.168271][T18309] workingset_activate 0 [ 311.168271][T18309] workingset_nodereclaim 0 [ 311.168271][T18309] pgrefill 409 [ 311.168271][T18309] pgscan 441 [ 311.168271][T18309] pgsteal 37 [ 311.168271][T18309] pgactivate 297 [ 311.280395][T18309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18294,uid=0 [ 311.304236][T18309] Memory cgroup out of memory: Killed process 18294 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:05 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x800043fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/238, 0xee}, {}, {&(0x7f0000000480)=""/185, 0xb9}], 0x6}, 0x20) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace(0x10, r1) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 08:42:05 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x88580, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose='loose'}, {@access_client='access=client'}, {@nodevmap='nodevmap'}, {@aname={'aname'}}, {@cachetag={'cachetag', 0x3d, ':[.keyring/.em1proclo'}}, {@cache_none='cache=none'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cpuset%GPLposix_acl_access^'}}, {@obj_type={'obj_type', 0x3d, '{proceth0\xbb#'}}, {@fsname={'fsname', 0x3d, 'cgroupmime_type(-wlan0'}}, {@smackfsroot={'smackfsroot', 0x3d, '&!]*'}}]}}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 311.732281][T18632] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 311.774536][T18632] CPU: 0 PID: 18632 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 311.782462][T18632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.792812][T18632] Call Trace: [ 311.796110][T18632] dump_stack+0x172/0x1f0 [ 311.800438][T18632] dump_header+0x10b/0x82d [ 311.804977][T18632] oom_kill_process.cold+0x10/0x15 [ 311.810273][T18632] out_of_memory+0x79a/0x12c0 [ 311.814957][T18632] ? __this_cpu_preempt_check+0x3a/0x210 [ 311.820595][T18632] ? retint_kernel+0x2b/0x2b [ 311.825188][T18632] ? oom_killer_disable+0x280/0x280 [ 311.830391][T18632] ? mem_cgroup_out_of_memory+0x16a/0x240 [ 311.836123][T18632] mem_cgroup_out_of_memory+0x1d8/0x240 [ 311.841672][T18632] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 311.847307][T18632] ? do_raw_spin_unlock+0x57/0x270 [ 311.852421][T18632] ? _raw_spin_unlock+0x2d/0x50 [ 311.857268][T18632] try_charge+0xf4b/0x1440 [ 311.861687][T18632] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 311.872206][T18632] ? get_mem_cgroup_from_mm+0x139/0x320 [ 311.877749][T18632] ? __kasan_check_read+0x11/0x20 [ 311.882779][T18632] ? lock_downgrade+0x920/0x920 [ 311.887634][T18632] ? percpu_ref_tryget_live+0x111/0x290 [ 311.893203][T18632] __memcg_kmem_charge_memcg+0x71/0xf0 [ 311.898669][T18632] ? memcg_kmem_put_cache+0x50/0x50 [ 311.903877][T18632] ? get_mem_cgroup_from_mm+0x156/0x320 [ 311.909436][T18632] __memcg_kmem_charge+0x13a/0x3a0 [ 311.914582][T18632] __alloc_pages_nodemask+0x4f4/0x900 [ 311.919975][T18632] ? __alloc_pages_slowpath+0x2520/0x2520 [ 311.925687][T18632] ? retint_kernel+0x2b/0x2b [ 311.930374][T18632] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 311.935828][T18632] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 311.942057][T18632] alloc_pages_current+0x107/0x210 [ 311.947359][T18632] __pmd_alloc+0x41/0x460 [ 311.951816][T18632] pmd_alloc+0x10c/0x180 [ 311.956039][T18632] copy_page_range+0x610/0x1ee0 [ 311.960873][T18632] ? mark_held_locks+0xf0/0xf0 [ 311.965639][T18632] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.971956][T18632] ? mark_held_locks+0xf0/0xf0 [ 311.976727][T18632] ? __kasan_check_read+0x11/0x20 [ 311.981748][T18632] ? dup_mm+0x7cd/0x1430 [ 311.985982][T18632] ? __kasan_check_read+0x11/0x20 [ 311.990994][T18632] ? pmd_alloc+0x180/0x180 [ 311.995492][T18632] ? lock_downgrade+0x920/0x920 [ 312.000461][T18632] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 312.006162][T18632] ? validate_mm_rb+0xa3/0xc0 [ 312.010823][T18632] ? __vma_link_rb+0x275/0x370 [ 312.015569][T18632] ? __kasan_check_write+0x14/0x20 [ 312.020787][T18632] dup_mm+0xa67/0x1430 [ 312.024954][T18632] ? vm_area_dup+0x170/0x170 [ 312.029613][T18632] ? debug_mutex_init+0x2d/0x5a [ 312.034448][T18632] copy_process+0x28b7/0x6b00 [ 312.039106][T18632] ? trace_hardirqs_on_caller+0x6a/0x240 [ 312.044779][T18632] ? retint_kernel+0x2b/0x2b [ 312.049353][T18632] ? __cleanup_sighand+0x60/0x60 [ 312.054269][T18632] ? retint_kernel+0x2b/0x2b [ 312.058851][T18632] ? _do_fork+0xeb/0xfa0 [ 312.063102][T18632] _do_fork+0x146/0xfa0 [ 312.067262][T18632] ? copy_init_mm+0x20/0x20 [ 312.071778][T18632] ? __kasan_check_read+0x11/0x20 [ 312.076873][T18632] ? _copy_to_user+0x118/0x160 [ 312.081622][T18632] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.087847][T18632] ? put_timespec64+0xda/0x140 [ 312.092603][T18632] __x64_sys_clone+0x18d/0x250 [ 312.097353][T18632] ? __ia32_sys_vfork+0xc0/0xc0 [ 312.102184][T18632] ? trace_hardirqs_off_caller+0x65/0x230 [ 312.107896][T18632] ? trace_hardirqs_on+0x67/0x240 [ 312.112905][T18632] do_syscall_64+0xfd/0x6a0 [ 312.117489][T18632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.123373][T18632] RIP: 0033:0x459879 [ 312.127265][T18632] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.146863][T18632] RSP: 002b:00007efc9963fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 312.155462][T18632] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 312.163779][T18632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.171924][T18632] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 312.180057][T18632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996406d4 [ 312.188029][T18632] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 312.213458][T18632] memory: usage 307200kB, limit 307200kB, failcnt 1762 [ 312.220448][T18632] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 312.228191][T18632] Memory cgroup stats for /syz4: [ 312.228965][T18632] anon 293650432 [ 312.228965][T18632] file 184320 [ 312.228965][T18632] kernel_stack 2686976 [ 312.228965][T18632] slab 6344704 [ 312.228965][T18632] sock 0 [ 312.228965][T18632] shmem 0 [ 312.228965][T18632] file_mapped 0 [ 312.228965][T18632] file_dirty 135168 [ 312.228965][T18632] file_writeback 0 [ 312.228965][T18632] anon_thp 281018368 [ 312.228965][T18632] inactive_anon 0 [ 312.228965][T18632] active_anon 293654528 [ 312.228965][T18632] inactive_file 0 [ 312.228965][T18632] active_file 0 [ 312.228965][T18632] unevictable 0 [ 312.228965][T18632] slab_reclaimable 1486848 [ 312.228965][T18632] slab_unreclaimable 4857856 [ 312.228965][T18632] pgfault 14025 [ 312.228965][T18632] pgmajfault 0 [ 312.228965][T18632] workingset_refault 0 [ 312.228965][T18632] workingset_activate 0 [ 312.228965][T18632] workingset_nodereclaim 0 [ 312.228965][T18632] pgrefill 409 [ 312.228965][T18632] pgscan 441 [ 312.228965][T18632] pgsteal 37 [ 312.228965][T18632] pgactivate 297 [ 312.326850][T18632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18308,uid=0 [ 312.344279][T18632] Memory cgroup out of memory: Killed process 18308 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:35784kB, shmem-rss:0kB 08:42:06 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x8, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fcntl$setstatus(r0, 0x4, 0x5400) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b06, &(0x7f0000000000)='wlan1\x00\a\xd3~\xd4\xa2\xb8\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<6\xb4\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xab\xd9\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c\x00'/482) 08:42:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609c749a0957d904b25bd100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f0000000000002500000000000002ffed0000000000000000020000627c05000500000000000a00000000000000ff1700000000000000e2ffffffff00"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a0009070000000000000000b348006bcb36ca05001a00aca466aa000a00000000ffffffff0000b475f9ec57f59ce92036cce5fe800a3f5b11000000000000200000aa"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 08:42:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x20000000005, 0x209e1e, 0x200000000000008, 0x1d, 0xffffffffffffffff, 0xffffffffffffffe0, [], 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x3c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) 08:42:06 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) tkill(r1, 0x30) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000080), 0x37d, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) 08:42:06 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x480000) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/183}, 0xbf, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c"], 0x1, 0x0) 08:42:06 executing program 0: ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000010c0)={0x7, 0x2, 0x9, 0x3, &(0x7f0000000000)=""/3, 0x5c, &(0x7f0000000040)=""/92, 0x1000, &(0x7f00000000c0)=""/4096}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001140)={0x0, 0x400}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000011c0)={r1, 0x7, 0x10}, 0xc) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snapshot\x00', 0x197801, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001240)={r1, 0x5, 0x4b, 0x2, 0x200000, 0xb79, 0x401, 0x100000001, {r1, @in6={{0xa, 0x4e24, 0x4, @remote, 0x6}}, 0x401, 0x877, 0x1, 0x81, 0x20}}, &(0x7f0000001300)=0xb0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0x0, 0x5, 0x8}, 0xc) fremovexattr(r3, &(0x7f0000001380)=@known='system.posix_acl_default\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000013c0)={{0x8001, 0x8}, 0x0, 0x0, 0x7ff, {0x1, 0x8}, 0x6, 0xfff}) lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)) r4 = syz_open_dev$dspn(&(0x7f0000001500)='/dev/dsp#\x00', 0x2, 0x4e4b21) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) write$P9_RGETATTR(r2, &(0x7f0000001640)={0xa0, 0x19, 0x1, {0x200, {0x0, 0x0, 0x1}, 0x0, r5, r6, 0x3ff, 0x2, 0x2a1, 0x80000000, 0x2, 0xb8, 0x5, 0xffffffffffffff90, 0xd545, 0x5, 0xfffffffffffffa15, 0x3, 0x7, 0x0, 0x7fffffff}}, 0xa0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001700)='/dev/null\x00', 0x94800, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000001740)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r8 = syz_open_dev$vcsa(&(0x7f0000001780)='/dev/vcsa#\x00', 0x0, 0x40) r9 = openat$cgroup(r8, &(0x7f00000017c0)='syz1\x00', 0x200002, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001800)='/dev/hwrng\x00', 0x4e8661, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r9) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001840)='/dev/cachefiles\x00', 0x200000, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x7c58caa50777b812}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x154, r12, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x154}}, 0x20040cc3) syz_extract_tcp_res(&(0x7f0000001b00), 0x24f, 0x401) r13 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/capi/capi20\x00', 0xc00, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000001b80)={'team0\x00'}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000001bc0)=0x0) fcntl$lock(r11, 0x7020098371bd0669, &(0x7f0000001c00)={0xc159ad126e0bd6a6, 0x6061ffd4f27d4b39, 0x3, 0x200, r14}) 08:42:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="3900000013000304e8fe0704000000000000ff3f06000000450001070000001419001a0015000a00050008000300000800005d14a4e91ee438", 0x39}], 0x1) 08:42:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="87ea4eff8ad3ec28506190417212579d7f446e65d7bf02a35f997d41a753b19b819a1696f4d40836745ef6", 0x2b) sendfile(r2, r3, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000280)={0x4, 0x70, 0x1, 0x3056, 0xce61, 0x3, 0x0, 0x7, 0x60000, 0x4, 0x7ff, 0x9, 0x6, 0x4f4ab39a, 0x78fe, 0x81, 0x5, 0x9, 0x7, 0xe858, 0x7fffffff, 0x1000, 0x6, 0x3, 0x3f, 0x3, 0x2, 0xd6b, 0x4, 0xf6c, 0x5, 0x6, 0x200, 0xffc0000000000000, 0x4, 0x4, 0x65d, 0x800000, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x2, 0x1, 0x0, 0x6, 0x3ff, 0x4, 0x6}) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e69de5675b7213d5012b66b000000000e0ffffff"], 0x14) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 08:42:06 executing program 1: r0 = gettid() statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/83) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) 08:42:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x4}}, 0xff2e) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x3ff, r3, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'post0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95T\x86\xb5vO\x00\x00\x00\x00!\x00\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0xffffffffffdfff76, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 08:42:06 executing program 0: r0 = socket$kcm(0x2b, 0xc, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x2c000) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x14}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 312.667952][T18777] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.731884][T18767] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 312.752193][T18777] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.783638][T18767] CPU: 1 PID: 18767 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 312.791569][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.801628][T18767] Call Trace: [ 312.805100][T18767] dump_stack+0x172/0x1f0 [ 312.809435][T18767] dump_header+0x10b/0x82d [ 312.813852][T18767] ? oom_kill_process+0x94/0x3f0 [ 312.818796][T18767] oom_kill_process.cold+0x10/0x15 [ 312.823917][T18767] out_of_memory+0x79a/0x12c0 [ 312.823932][T18767] ? lock_downgrade+0x920/0x920 [ 312.823947][T18767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.823959][T18767] ? oom_killer_disable+0x280/0x280 [ 312.823972][T18767] ? __kasan_check_read+0x11/0x20 [ 312.823991][T18767] mem_cgroup_out_of_memory+0x1d8/0x240 [ 312.833480][T18767] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 312.833495][T18767] ? do_raw_spin_unlock+0x57/0x270 [ 312.833508][T18767] ? _raw_spin_unlock+0x2d/0x50 [ 312.833521][T18767] try_charge+0xf4b/0x1440 [ 312.833535][T18767] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 312.833546][T18767] ? percpu_ref_tryget_live+0x111/0x290 [ 312.833563][T18767] ? get_mem_cgroup_from_mm+0x16/0x320 [ 312.856319][T18791] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.861188][T18767] ? get_mem_cgroup_from_mm+0x156/0x320 [ 312.861206][T18767] mem_cgroup_try_charge+0x136/0x590 [ 312.912871][T18767] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 312.919103][T18767] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 312.924729][T18767] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 312.930702][T18767] ? lock_downgrade+0x920/0x920 [ 312.935717][T18767] ? defrag_store+0x360/0x360 [ 312.940420][T18767] ? lock_downgrade+0x920/0x920 [ 312.945343][T18767] ? swp_swapcount+0x540/0x540 [ 312.950106][T18767] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 312.955979][T18767] ? __kasan_check_read+0x11/0x20 [ 312.960985][T18767] ? do_raw_spin_unlock+0x57/0x270 [ 312.966078][T18767] do_huge_pmd_wp_page+0x806/0x2270 [ 312.971446][T18767] ? __split_huge_pmd+0x27e0/0x27e0 [ 312.976632][T18767] ? balance_dirty_pages+0x2b80/0x2b80 [ 312.983031][T18767] ? ext4_set_page_dirty+0x2b7/0x480 [ 312.988308][T18767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.994533][T18767] ? pmd_val+0x85/0x100 [ 312.998680][T18767] ? add_mm_counter_fast.part.0+0x40/0x40 [ 313.004382][T18767] ? fault_dirty_shared_page.isra.0+0x18c/0x200 [ 313.010607][T18767] __handle_mm_fault+0x14cf/0x3f20 [ 313.015711][T18767] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 313.021239][T18767] ? __kasan_check_read+0x11/0x20 [ 313.026258][T18767] ? trace_hardirqs_on+0x67/0x240 [ 313.031270][T18767] handle_mm_fault+0x1b5/0x6b0 [ 313.036019][T18767] __do_page_fault+0x536/0xdd0 [ 313.040771][T18767] do_page_fault+0x38/0x590 [ 313.045260][T18767] page_fault+0x39/0x40 [ 313.049400][T18767] RIP: 0033:0x4006c4 [ 313.053365][T18767] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 313.073150][T18767] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 313.079194][T18767] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 313.087326][T18767] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 313.095283][T18767] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 313.103323][T18767] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 313.111278][T18767] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 313.121032][T18791] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.135978][T18767] memory: usage 307200kB, limit 307200kB, failcnt 1807 [ 313.169462][T18767] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 313.193044][T18767] Memory cgroup stats for /syz4: [ 313.193855][T18767] anon 291553280 [ 313.193855][T18767] file 184320 [ 313.193855][T18767] kernel_stack 2686976 [ 313.193855][T18767] slab 6344704 [ 313.193855][T18767] sock 0 [ 313.193855][T18767] shmem 0 [ 313.193855][T18767] file_mapped 0 [ 313.193855][T18767] file_dirty 135168 [ 313.193855][T18767] file_writeback 0 [ 313.193855][T18767] anon_thp 283115520 [ 313.193855][T18767] inactive_anon 0 [ 313.193855][T18767] active_anon 291557376 [ 313.193855][T18767] inactive_file 0 [ 313.193855][T18767] active_file 0 [ 313.193855][T18767] unevictable 0 [ 313.193855][T18767] slab_reclaimable 1486848 [ 313.193855][T18767] slab_unreclaimable 4857856 [ 313.193855][T18767] pgfault 14157 [ 313.193855][T18767] pgmajfault 0 [ 313.193855][T18767] workingset_refault 0 [ 313.193855][T18767] workingset_activate 0 [ 313.193855][T18767] workingset_nodereclaim 0 [ 313.193855][T18767] pgrefill 409 [ 313.193855][T18767] pgscan 441 [ 313.193855][T18767] pgsteal 37 [ 313.193855][T18767] pgactivate 297 [ 313.316680][T18767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18631,uid=0 [ 313.363441][T18767] Memory cgroup out of memory: Killed process 18631 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 313.381745][ T1057] oom_reaper: reaped process 18631 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 08:42:07 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0xf, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:07 executing program 2: getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r0, 0x1c, "9a27ca27e85929d4626d86ac9eba32ce6e5cbbbd527822e58dbd55b3"}, &(0x7f00000000c0)=0x24) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@remote, @rose, @null, @netrom, @netrom, @netrom, @remote, @bcast]}, &(0x7f0000000180)=0x48) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0xa080, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r2, 0x7}, 0x8) r3 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x1, 0x2) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x20b000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'keyring#bdevwlan1GPLkeyring'}}, {@cache_fscache='cache=fscache'}, {@access_user='access=user'}, {@access_user='access=user'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_lt={'fowner<', r6}}, {@appraise_type='appraise_type=imasig'}]}}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000640)={0x155, 0x1, 0x7, 0x4, 0xffff, 0x8}) ioctl$KDMKTONE(r7, 0x4b30, 0x3) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000680)={0x1d, r5}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x3ff, 0xfffffffffffffffa, 0x7, 0x3}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000007c0)={r9, 0x9, 0x8, 0xbf7d}, &(0x7f0000000800)=0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)=0x0) process_vm_writev(r10, &(0x7f0000000c80)=[{&(0x7f0000000880)=""/107, 0x6b}, {&(0x7f0000000900)=""/252, 0xfc}, {&(0x7f0000000a00)=""/38, 0x26}, {&(0x7f0000000a40)=""/214, 0xd6}, {&(0x7f0000000b40)=""/242, 0xf2}, {&(0x7f0000000c40)=""/34, 0x22}], 0x6, &(0x7f0000001f40)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/24, 0x18}, {&(0x7f0000001d40)=""/99, 0x63}, {&(0x7f0000001dc0)=""/116, 0x74}, {&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/81, 0x51}], 0x6, 0x0) r11 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001fc0)='/proc/capi/capi20\x00', 0x480000, 0x0) bind$tipc(r11, &(0x7f0000002000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x2}}, 0x10) openat$ion(0xffffffffffffff9c, &(0x7f0000002040)='/dev/ion\x00', 0x400, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000002080)={0x9e, 0x5, 0x0, [{0x0, 0x200, 0x1, 0x2, 0x1, 0x10001, 0x762}, {0x1, 0x0, 0x1, 0x5b1e, 0x0, 0x2, 0x1ff}, {0x7f, 0x1, 0x8, 0x100000001, 0x8, 0x8698, 0x3}, {0x9, 0x9, 0xfff, 0x7fff, 0x205, 0x3ff, 0x1f}, {0x7, 0x5, 0x5, 0x3b, 0x435d, 0x3, 0x1adf}]}) r12 = accept4$rose(0xffffffffffffffff, &(0x7f0000002200)=@full={0xb, @remote, @default, 0x0, [@default, @null, @remote, @netrom, @netrom, @bcast]}, &(0x7f0000002240)=0x40, 0x0) accept4(r12, 0x0, &(0x7f0000002280), 0x80000) r13 = syz_open_dev$mice(&(0x7f00000022c0)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r13, 0x84, 0x6, &(0x7f0000002300)={r2, @in6={{0xa, 0x1ff, 0x8, @mcast2}}}, &(0x7f00000023c0)=0x84) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000002440)={&(0x7f0000002400)=[0x0], 0x1}) 08:42:07 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000214000/0x3000)=nil, 0x3000}) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:07 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000100), 0x4) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000079cc195a00"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) r4 = getuid() mount$9p_xen(&(0x7f00000003c0)='trustedeth1^/+\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='9p\x00', 0xdfc65a68801234e1, &(0x7f0000000480)={'trans=xen,', {[{@aname={'aname', 0x3d, '-,loem0securitylo'}}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@fscache='fscache'}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r3}}, {@fowner_gt={'fowner>', r4}}, {@dont_hash='dont_hash'}, {@dont_measure='dont_measure'}, {@dont_measure='dont_measure'}, {@audit='audit'}]}}) r5 = syz_open_dev$dmmidi(&(0x7f0000000540)='/dev/dmmidi#\x00', 0x3, 0x4400) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000580)={0x100000000, 0xea, 0xb8ef, @empty, 'ip_vti0\x00'}) setitimer(0x0, &(0x7f0000000100)={{0xfffffffffffffffc}, {0x4}}, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="b9079741c373be2a6aac9c3e1331e6adf50a48bf5bcc9119a0439a2d447216932519b0b80d55b131dde8a414634db537d26ed9bda1fdcaa7e449d045f6074400e8dee81cfb41147093981d5f79fdc4f60f77d1ebda70038ce6e5f75574851e645965180d2a7432467c6694ed101a181aebeaaf2c55a95b3e8ddff56a49a97ef2568c14eaf6d56078a91790f0578d73ac8d4b68b569399809310fba91caf92fff352811555bbb4cfbfe4a9ca97c2f85586223bf406fafdac15736c1a543fb07da276daa9bca0fc3149a37da2cb1a0895d54c578be64ffe2543826cde78fa17ca779a75806", 0xe4, 0x401}, {&(0x7f0000000240)="bd5a9dbc8ff5b065e07cd368d7bb132f494cc332ead97f8693376b8b15a770a849aa3cd5483fd5b4b406c94c18166ca28759053ea4ffa3d355b720a213606d5bbeacc46083bd622ab06aa4ab2d9a38f308be0c4ec4dc4c07a4a1c86633123ecce1a5506e3ea38fbf6a859dcc25d596e428074e6eb9895e2c634700af73567f4cb5bc1c5fa6245f5109d65ea58ceb22b782589ce74d14c4ab4a0e5102b74653b74c0806c237a819287aa568f87b52aa3726e16b0a454f08027a229ab775e216b9cf43dd07db692b21b36132970b", 0xcd, 0xf00000000}, {&(0x7f0000000080)="02a489e9948f74e459ad44e6563e3f456e684ab7ebe43ba3e9f6b6cc8f56bcc2973b7d1614b7d71a0e0ac3fd65f3364c813c4661ca67b990a59dd8b4ffa840eb50fd729dab058c597327a828a887be9a7d58aab61b4fa1001fd81236379504fa72325ffc3cac2eb09887c135", 0x6c, 0x8}], 0x800060, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x8, &(0x7f00000005c0), &(0x7f0000000600)=0x4) 08:42:07 executing program 0: 08:42:07 executing program 5: 08:42:07 executing program 0: 08:42:07 executing program 3: 08:42:07 executing program 5: 08:42:07 executing program 0: 08:42:07 executing program 2: 08:42:07 executing program 5: [ 313.774187][T18911] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 313.880597][T18911] CPU: 1 PID: 18911 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 313.888671][T18911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.898728][T18911] Call Trace: [ 313.902298][T18911] dump_stack+0x172/0x1f0 [ 313.906643][T18911] dump_header+0x10b/0x82d [ 313.911071][T18911] ? oom_kill_process+0x94/0x3f0 [ 313.919138][T18911] oom_kill_process.cold+0x10/0x15 [ 313.924239][T18911] out_of_memory+0x79a/0x12c0 [ 313.924253][T18911] ? lock_downgrade+0x920/0x920 [ 313.924268][T18911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.924279][T18911] ? oom_killer_disable+0x280/0x280 [ 313.924297][T18911] ? __kasan_check_read+0x11/0x20 [ 313.950301][T18911] mem_cgroup_out_of_memory+0x1d8/0x240 [ 313.955859][T18911] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 313.961538][T18911] ? do_raw_spin_unlock+0x57/0x270 [ 313.966656][T18911] ? _raw_spin_unlock+0x2d/0x50 [ 313.971515][T18911] try_charge+0xf4b/0x1440 [ 313.975940][T18911] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 313.981493][T18911] ? percpu_ref_tryget_live+0x111/0x290 [ 313.987050][T18911] ? get_mem_cgroup_from_mm+0x16/0x320 [ 313.992510][T18911] ? get_mem_cgroup_from_mm+0x156/0x320 [ 313.998155][T18911] mem_cgroup_try_charge+0x136/0x590 [ 314.003508][T18911] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 314.009878][T18911] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 314.015509][T18911] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 314.021477][T18911] ? defrag_store+0x360/0x360 [ 314.026137][T18911] ? lock_downgrade+0x920/0x920 [ 314.030986][T18911] ? swp_swapcount+0x540/0x540 [ 314.035727][T18911] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 314.041597][T18911] ? __kasan_check_read+0x11/0x20 [ 314.046615][T18911] ? do_raw_spin_unlock+0x57/0x270 [ 314.051862][T18911] do_huge_pmd_wp_page+0x806/0x2270 [ 314.057059][T18911] ? __split_huge_pmd+0x27e0/0x27e0 [ 314.062342][T18911] ? do_futex+0x17d/0x1dc0 [ 314.066853][T18911] ? __might_fault+0x12b/0x1e0 [ 314.071598][T18911] ? __kasan_check_read+0x11/0x20 [ 314.076625][T18911] ? pmd_val+0x85/0x100 [ 314.080858][T18911] ? add_mm_counter_fast.part.0+0x40/0x40 [ 314.086558][T18911] __handle_mm_fault+0x14cf/0x3f20 [ 314.091688][T18911] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 314.097231][T18911] ? __kasan_check_read+0x11/0x20 [ 314.102249][T18911] ? trace_hardirqs_on+0x67/0x240 [ 314.107261][T18911] handle_mm_fault+0x1b5/0x6b0 [ 314.112013][T18911] __do_page_fault+0x536/0xdd0 [ 314.117026][T18911] do_page_fault+0x38/0x590 [ 314.121514][T18911] page_fault+0x39/0x40 [ 314.125715][T18911] RIP: 0033:0x4006c4 [ 314.129594][T18911] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 314.149211][T18911] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 314.155436][T18911] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 314.163498][T18911] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 314.171463][T18911] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 314.179428][T18911] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 314.187589][T18911] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 314.196139][T18911] memory: usage 307200kB, limit 307200kB, failcnt 1847 [ 314.203179][T18911] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 314.212745][T18911] Memory cgroup stats for /syz4: [ 314.212849][T18911] anon 291766272 [ 314.212849][T18911] file 184320 [ 314.212849][T18911] kernel_stack 2752512 [ 314.212849][T18911] slab 6619136 [ 314.212849][T18911] sock 0 [ 314.212849][T18911] shmem 0 [ 314.212849][T18911] file_mapped 0 [ 314.212849][T18911] file_dirty 135168 [ 314.212849][T18911] file_writeback 0 [ 314.212849][T18911] anon_thp 281018368 [ 314.212849][T18911] inactive_anon 0 [ 314.212849][T18911] active_anon 291770368 [ 314.212849][T18911] inactive_file 0 [ 314.212849][T18911] active_file 0 [ 314.212849][T18911] unevictable 0 [ 314.212849][T18911] slab_reclaimable 1622016 [ 314.212849][T18911] slab_unreclaimable 4997120 [ 314.212849][T18911] pgfault 14256 [ 314.212849][T18911] pgmajfault 0 [ 314.212849][T18911] workingset_refault 0 [ 314.212849][T18911] workingset_activate 0 [ 314.212849][T18911] workingset_nodereclaim 0 [ 314.212849][T18911] pgrefill 409 [ 314.212849][T18911] pgscan 441 [ 314.212849][T18911] pgsteal 70 [ 314.212849][T18911] pgactivate 297 [ 314.310911][T18911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14566,uid=0 [ 314.327644][T18911] Memory cgroup out of memory: Killed process 14566 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 314.342933][ T1057] oom_reaper: reaped process 14566 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 08:42:08 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x7ffff000}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000680)=0x4) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x80000000000, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000006c0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000640)={0x0, 0x8000, 0x4, [], &(0x7f0000000600)={0x990a70, 0x2, [], @value64}}) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000500)) clone(0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000000440)=[{&(0x7f0000000100)="5f62c8abd28f28d018", 0x9, 0x4000000000}, {&(0x7f0000000200)="16045a203ccf14c1ac6df1503a72d5b926942e891d4cfc3aef6754c7ab5b0209fa3e97a8756e9a7068854ba7102d5009ab94530d127ae36d91f617747a18bda53250c27175adfa6eb63d35cbe8a4eb3c2d9edfcd48edee457b50bd6b64ead66c404aec5085b7dbdab6eab42d26f260693c0ff8aa1a24fb3446e7ef7a48797e80f06a982acd1df08f1bb5db42b9889736169213691977366901f7ffea813d9aa726c1af72d45142cff626d9a8e12fca4098e9e91d5fe9", 0xb6, 0x7af}, {&(0x7f00000002c0)="7d9fab7a1333869a1dad89b6738c187e649ef1914f00d30a9d5f869df2683df99d313dc59714383d9b1eabe8a53a66ddb201022e72ed648832f25cc076be3d0becaba2cd6ecabf36acf43966873c3a76a6847d080a89cdb7f52c6362a81a57f9b1b72db99ec255e330089f361d746447a2f5598ce0a2fdf59d2d651562915a7b448cd0f7d77b33ff2557471a90fe0e6f308d63f67a41e2601d96c2f88455d87e3b62a3b0ee6180b96d120421fff9bbc1b01878071f703a113299e2c00472c6e3930e8b7e4c252787d2834c0e8b5bcbba9bb547d3ea7d6c", 0xd7, 0x8be1}, {&(0x7f0000000140)="adc2fad274d33799fcdc5a28d77fcedb26c45fe931e7666d87", 0x19, 0x2}, {&(0x7f00000003c0)="8a4549245cecce9632154efa273847c189ae77303fba380eddc6030d06600c3e2d60c7386e5d78e725f25c3e64f40c098e4b", 0x32, 0x10000}, {&(0x7f0000000400)="924871e1", 0x4, 0x2}], 0x24c804, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0xd87499d24c31c63c) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:08 executing program 0: 08:42:08 executing program 2: 08:42:08 executing program 3: 08:42:08 executing program 5: 08:42:08 executing program 5: 08:42:08 executing program 2: 08:42:08 executing program 0: 08:42:08 executing program 3: 08:42:08 executing program 5: 08:42:08 executing program 2: [ 314.867575][T19039] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 314.910236][T19039] CPU: 1 PID: 19039 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 314.918450][T19039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.928534][T19039] Call Trace: [ 314.931835][T19039] dump_stack+0x172/0x1f0 [ 314.936204][T19039] dump_header+0x10b/0x82d [ 314.940625][T19039] ? oom_kill_process+0x94/0x3f0 [ 314.945687][T19039] oom_kill_process.cold+0x10/0x15 [ 314.950806][T19039] out_of_memory+0x79a/0x12c0 [ 314.955582][T19039] ? lock_downgrade+0x920/0x920 [ 314.960467][T19039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.966718][T19039] ? oom_killer_disable+0x280/0x280 [ 314.971963][T19039] ? __kasan_check_read+0x11/0x20 [ 314.976993][T19039] mem_cgroup_out_of_memory+0x1d8/0x240 [ 314.977011][T19039] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 314.988159][T19039] ? do_raw_spin_unlock+0x57/0x270 [ 314.993280][T19039] ? _raw_spin_unlock+0x2d/0x50 [ 314.998160][T19039] try_charge+0xf4b/0x1440 [ 315.002588][T19039] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 315.008144][T19039] ? percpu_ref_tryget_live+0x111/0x290 [ 315.013707][T19039] ? get_mem_cgroup_from_mm+0x16/0x320 [ 315.019197][T19039] ? get_mem_cgroup_from_mm+0x156/0x320 [ 315.024756][T19039] mem_cgroup_try_charge+0x136/0x590 [ 315.030051][T19039] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 315.036294][T19039] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 315.041924][T19039] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 315.047903][T19039] ? lock_downgrade+0x920/0x920 [ 315.052757][T19039] ? defrag_store+0x360/0x360 [ 315.057439][T19039] ? lock_downgrade+0x920/0x920 [ 315.062437][T19039] ? swp_swapcount+0x540/0x540 [ 315.067211][T19039] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 315.073196][T19039] ? __kasan_check_read+0x11/0x20 [ 315.078218][T19039] ? do_raw_spin_unlock+0x57/0x270 [ 315.083412][T19039] do_huge_pmd_wp_page+0x806/0x2270 [ 315.088608][T19039] ? __split_huge_pmd+0x27e0/0x27e0 [ 315.093805][T19039] ? balance_dirty_pages+0x2b80/0x2b80 [ 315.099260][T19039] ? ext4_set_page_dirty+0x2b7/0x480 [ 315.104544][T19039] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 315.110780][T19039] ? pmd_val+0x85/0x100 [ 315.114934][T19039] ? add_mm_counter_fast.part.0+0x40/0x40 [ 315.120655][T19039] ? fault_dirty_shared_page.isra.0+0x18c/0x200 [ 315.126906][T19039] __handle_mm_fault+0x14cf/0x3f20 [ 315.132047][T19039] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 315.137587][T19039] ? __kasan_check_read+0x11/0x20 [ 315.142622][T19039] ? trace_hardirqs_on+0x67/0x240 [ 315.147665][T19039] handle_mm_fault+0x1b5/0x6b0 [ 315.152432][T19039] __do_page_fault+0x536/0xdd0 [ 315.157365][T19039] do_page_fault+0x38/0x590 [ 315.157379][T19039] page_fault+0x39/0x40 [ 315.157388][T19039] RIP: 0033:0x4006c4 [ 315.157400][T19039] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 315.157406][T19039] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 315.157420][T19039] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 315.204613][T19039] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 315.212584][T19039] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 315.220537][T19039] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 315.228752][T19039] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 315.237303][T19039] memory: usage 307200kB, limit 307200kB, failcnt 1860 [ 315.244203][T19039] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 315.251042][T19039] Memory cgroup stats for /syz4: [ 315.251131][T19039] anon 291868672 [ 315.251131][T19039] file 184320 [ 315.251131][T19039] kernel_stack 2818048 [ 315.251131][T19039] slab 6619136 [ 315.251131][T19039] sock 0 [ 315.251131][T19039] shmem 0 [ 315.251131][T19039] file_mapped 0 [ 315.251131][T19039] file_dirty 135168 [ 315.251131][T19039] file_writeback 0 [ 315.251131][T19039] anon_thp 278921216 [ 315.251131][T19039] inactive_anon 0 [ 315.251131][T19039] active_anon 291872768 [ 315.251131][T19039] inactive_file 0 [ 315.251131][T19039] active_file 0 [ 315.251131][T19039] unevictable 0 [ 315.251131][T19039] slab_reclaimable 1622016 [ 315.251131][T19039] slab_unreclaimable 4997120 [ 315.251131][T19039] pgfault 14388 [ 315.251131][T19039] pgmajfault 0 [ 315.251131][T19039] workingset_refault 0 [ 315.251131][T19039] workingset_activate 0 [ 315.251131][T19039] workingset_nodereclaim 0 [ 315.251131][T19039] pgrefill 409 [ 315.251131][T19039] pgscan 441 [ 315.251131][T19039] pgsteal 70 [ 315.251131][T19039] pgactivate 297 [ 315.349476][T19039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14458,uid=0 [ 315.367865][T19039] Memory cgroup out of memory: Killed process 14458 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 315.382828][ T1057] oom_reaper: reaped process 14458 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 315.452434][T19046] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 315.462831][T19046] CPU: 0 PID: 19046 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 315.470713][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.480789][T19046] Call Trace: [ 315.484072][T19046] dump_stack+0x172/0x1f0 [ 315.488397][T19046] dump_header+0x10b/0x82d [ 315.492800][T19046] oom_kill_process.cold+0x10/0x15 [ 315.497899][T19046] out_of_memory+0x79a/0x12c0 [ 315.502583][T19046] ? lock_downgrade+0x920/0x920 [ 315.507418][T19046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.513651][T19046] ? oom_killer_disable+0x280/0x280 [ 315.518845][T19046] mem_cgroup_out_of_memory+0x1d8/0x240 [ 315.524913][T19046] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 315.530532][T19046] ? do_raw_spin_unlock+0x57/0x270 [ 315.535633][T19046] ? _raw_spin_unlock+0x2d/0x50 [ 315.540473][T19046] try_charge+0xf4b/0x1440 [ 315.544875][T19046] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 315.550403][T19046] ? percpu_ref_tryget_live+0x111/0x290 [ 315.556036][T19046] ? get_mem_cgroup_from_mm+0x16/0x320 [ 315.561486][T19046] ? get_mem_cgroup_from_mm+0x156/0x320 [ 315.567014][T19046] mem_cgroup_try_charge+0x136/0x590 [ 315.572294][T19046] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 315.578534][T19046] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 315.584173][T19046] __handle_mm_fault+0x1e34/0x3f20 [ 315.589268][T19046] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 315.594794][T19046] ? __kasan_check_read+0x11/0x20 [ 315.599921][T19046] ? do_raw_spin_unlock+0x57/0x270 [ 315.605033][T19046] ? trace_hardirqs_on+0x67/0x240 [ 315.610147][T19046] handle_mm_fault+0x1b5/0x6b0 [ 315.614902][T19046] __get_user_pages+0x7d4/0x1b30 [ 315.620031][T19046] ? __mutex_lock+0x45d/0x13c0 [ 315.624805][T19046] ? follow_page_mask+0x19b0/0x19b0 [ 315.630002][T19046] ? process_vm_rw_core.isra.0+0x420/0xb10 [ 315.635867][T19046] get_user_pages_remote+0x234/0x4b0 [ 315.641139][T19046] process_vm_rw_core.isra.0+0x464/0xb10 [ 315.646846][T19046] ? __might_fault+0xfb/0x1e0 [ 315.651507][T19046] ? pcpu_get_vm_areas.cold+0x49/0x49 [ 315.656865][T19046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.663109][T19046] ? _copy_from_user+0x12c/0x1a0 [ 315.668133][T19046] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 315.673844][T19046] ? rw_copy_check_uvector+0x2ce/0x390 [ 315.679287][T19046] ? do_futex+0x17d/0x1dc0 [ 315.683685][T19046] ? do_wp_page+0x4a1/0x14d0 [ 315.688255][T19046] process_vm_rw+0x21f/0x240 [ 315.692854][T19046] ? process_vm_rw_core.isra.0+0xb10/0xb10 [ 315.698641][T19046] ? lock_downgrade+0x920/0x920 [ 315.703477][T19046] ? __kasan_check_read+0x11/0x20 [ 315.708486][T19046] ? _copy_to_user+0x118/0x160 [ 315.713232][T19046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.719454][T19046] ? nsecs_to_jiffies+0x30/0x30 [ 315.724298][T19046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.730523][T19046] ? __x64_sys_clock_gettime+0x16d/0x240 [ 315.736140][T19046] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 315.741852][T19046] do_syscall_64+0xfd/0x6a0 [ 315.746357][T19046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.752224][T19046] RIP: 0033:0x459879 [ 315.756107][T19046] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.775873][T19046] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 315.784270][T19046] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459879 [ 315.792229][T19046] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000290 [ 315.800203][T19046] RBP: 000000000075bf20 R08: 0000000000000001 R09: 0000000000000000 [ 315.808157][T19046] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007efc996616d4 [ 315.816121][T19046] R13: 00000000004c6bba R14: 00000000004dbdd0 R15: 00000000ffffffff [ 315.825291][T19046] memory: usage 307200kB, limit 307200kB, failcnt 1912 [ 315.832417][T19046] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 315.839403][T19046] Memory cgroup stats for /syz4: [ 315.839921][T19046] anon 293076992 [ 315.839921][T19046] file 184320 [ 315.839921][T19046] kernel_stack 2752512 [ 315.839921][T19046] slab 6619136 [ 315.839921][T19046] sock 0 [ 315.839921][T19046] shmem 0 [ 315.839921][T19046] file_mapped 0 [ 315.839921][T19046] file_dirty 135168 [ 315.839921][T19046] file_writeback 0 [ 315.839921][T19046] anon_thp 274726912 [ 315.839921][T19046] inactive_anon 0 [ 315.839921][T19046] active_anon 293081088 [ 315.839921][T19046] inactive_file 0 [ 315.839921][T19046] active_file 0 [ 315.839921][T19046] unevictable 0 [ 315.839921][T19046] slab_reclaimable 1622016 [ 315.839921][T19046] slab_unreclaimable 4997120 [ 315.839921][T19046] pgfault 15213 [ 315.839921][T19046] pgmajfault 0 [ 315.839921][T19046] workingset_refault 0 [ 315.839921][T19046] workingset_activate 0 [ 315.839921][T19046] workingset_nodereclaim 0 [ 315.839921][T19046] pgrefill 409 [ 315.839921][T19046] pgscan 441 [ 315.839921][T19046] pgsteal 70 [ 315.839921][T19046] pgactivate 297 [ 315.936514][T19046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19039,uid=0 08:42:09 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x9, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000700), 0x100000000000000d) 08:42:09 executing program 0: syz_init_net_socket$x25(0x9, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast2, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) 08:42:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010005a7bae41a3a7cb0f230d6616add9e71b3b217dd9ea000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="2c001200100001006970366772657461700000001800020014000600fe80000000000000008cc6f7e1890000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x28804) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x5) 08:42:09 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x1) write$P9_RCREATE(r1, 0x0, 0x655) 08:42:09 executing program 1: r0 = gettid() r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x210000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000130000012abd70002fabdf2507000000", @ANYRES32=r2, @ANYBLOB="00250000000000000c000100ffffffffffff0000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 315.952235][T19046] Memory cgroup out of memory: Killed process 19039 (syz-executor.4) total-vm:72708kB, anon-rss:5628kB, file-rss:35784kB, shmem-rss:0kB [ 315.971866][ T1057] oom_reaper: reaped process 19039 (syz-executor.4), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 08:42:09 executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) fanotify_mark(r2, 0x69, 0x0, r1, 0x0) fanotify_mark(r0, 0x7d635179fade4e74, 0x0, r1, 0x0) [ 316.176174][T19172] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 316.203627][T19172] CPU: 1 PID: 19172 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 316.211597][T19172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.221674][T19172] Call Trace: [ 316.224959][T19172] dump_stack+0x172/0x1f0 [ 316.229283][T19172] dump_header+0x10b/0x82d [ 316.233699][T19172] ? oom_kill_process+0x94/0x3f0 [ 316.238628][T19172] oom_kill_process.cold+0x10/0x15 [ 316.243739][T19172] out_of_memory+0x79a/0x12c0 [ 316.248411][T19172] ? lock_downgrade+0x920/0x920 [ 316.253259][T19172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.259488][T19172] ? oom_killer_disable+0x280/0x280 [ 316.264691][T19172] ? __kasan_check_read+0x11/0x20 [ 316.269794][T19172] mem_cgroup_out_of_memory+0x1d8/0x240 [ 316.275419][T19172] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 316.281063][T19172] ? do_raw_spin_unlock+0x57/0x270 [ 316.286177][T19172] ? _raw_spin_unlock+0x2d/0x50 [ 316.291025][T19172] try_charge+0xf4b/0x1440 [ 316.295454][T19172] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 316.301013][T19172] ? percpu_ref_tryget_live+0x111/0x290 [ 316.306554][T19172] ? get_mem_cgroup_from_mm+0x16/0x320 [ 316.312005][T19172] ? get_mem_cgroup_from_mm+0x156/0x320 [ 316.317561][T19172] mem_cgroup_try_charge+0x136/0x590 [ 316.323104][T19172] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 316.329333][T19172] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 316.334963][T19172] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 316.340969][T19172] ? lock_downgrade+0x920/0x920 [ 316.345816][T19172] ? defrag_store+0x360/0x360 [ 316.350486][T19172] ? lock_downgrade+0x920/0x920 [ 316.355416][T19172] ? swp_swapcount+0x540/0x540 [ 316.360171][T19172] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 316.366066][T19172] ? __kasan_check_read+0x11/0x20 [ 316.371082][T19172] ? do_raw_spin_unlock+0x57/0x270 [ 316.376644][T19172] do_huge_pmd_wp_page+0x806/0x2270 [ 316.381838][T19172] ? __split_huge_pmd+0x27e0/0x27e0 [ 316.387122][T19172] ? update_load_avg+0x1c6/0x1b10 [ 316.392168][T19172] ? pmd_val+0x85/0x100 [ 316.396316][T19172] ? add_mm_counter_fast.part.0+0x40/0x40 [ 316.402156][T19172] ? __kasan_check_read+0x11/0x20 [ 316.407190][T19172] __handle_mm_fault+0x14cf/0x3f20 [ 316.412302][T19172] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 316.417838][T19172] ? __kasan_check_read+0x11/0x20 [ 316.422961][T19172] ? trace_hardirqs_on+0x67/0x240 [ 316.428016][T19172] handle_mm_fault+0x1b5/0x6b0 [ 316.432792][T19172] __do_page_fault+0x536/0xdd0 [ 316.437557][T19172] do_page_fault+0x38/0x590 [ 316.442400][T19172] page_fault+0x39/0x40 [ 316.446550][T19172] RIP: 0033:0x4006c4 [ 316.450600][T19172] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 316.470206][T19172] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 316.476274][T19172] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 316.484236][T19172] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 316.492203][T19172] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 316.500351][T19172] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 316.508318][T19172] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:10 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e091f8437dccd81f1310b6740000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, &(0x7f00000000c0)={@rand_addr="11c238a31f30628058784ec74af72e4b", 0xf5ffffff}, 0x174) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x4c080, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x16c826d1c085cf9b}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x884}, 0x20004008) 08:42:10 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80605414, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x342d, 0x4) [ 316.537443][T19172] memory: usage 307200kB, limit 307200kB, failcnt 1926 [ 316.566417][T19172] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 316.617515][T19172] Memory cgroup stats for /syz4: [ 316.617621][T19172] anon 291758080 [ 316.617621][T19172] file 184320 [ 316.617621][T19172] kernel_stack 2752512 [ 316.617621][T19172] slab 6619136 [ 316.617621][T19172] sock 0 [ 316.617621][T19172] shmem 0 [ 316.617621][T19172] file_mapped 0 [ 316.617621][T19172] file_dirty 135168 [ 316.617621][T19172] file_writeback 0 [ 316.617621][T19172] anon_thp 278921216 [ 316.617621][T19172] inactive_anon 0 [ 316.617621][T19172] active_anon 291762176 [ 316.617621][T19172] inactive_file 0 [ 316.617621][T19172] active_file 0 [ 316.617621][T19172] unevictable 0 [ 316.617621][T19172] slab_reclaimable 1622016 [ 316.617621][T19172] slab_unreclaimable 4997120 [ 316.617621][T19172] pgfault 15312 [ 316.617621][T19172] pgmajfault 0 [ 316.617621][T19172] workingset_refault 0 [ 316.617621][T19172] workingset_activate 0 [ 316.617621][T19172] workingset_nodereclaim 0 [ 316.617621][T19172] pgrefill 409 [ 316.617621][T19172] pgscan 441 [ 316.617621][T19172] pgsteal 70 [ 316.617621][T19172] pgactivate 330 08:42:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="33a3f449841b5d50e46bd5dc01600a89634cc77e5e426fef1e4858c14cf08d7e41c48a17509424b3b17ac8ec5f4fb5c0335c26323d7f28cb80e581390bf67633cdf93327b68c168a666eac08d4e2e229d40282ce854263d84ff4b862591f9e432af859a18a1706b229aeafc1be04c1302b3e7de9326975c4b4b56b4e9fa3a6c9993c19511a26395868059c374c1e22d3ec69e3a80581071d97442a107477715518af16cc4d34698565") r1 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r1, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r1, 0x0, 0x3, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000ee}, 0x6e) 08:42:10 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f3f4c46000000000000000000aab4df02003e000039a594349c1fd83d02000000000000000000000000000000000000000000000020380003000000"], 0x3c) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000000000, 0xfba) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 316.769940][T19172] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19172,uid=0 08:42:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x408000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xcf61da116222f9c0, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r5 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r6, 0x0, [], r4, r5, 0x5, 0x2}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', r4}) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r9 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r10, 0x0, [], r8, r9, 0x5, 0x2}, 0x3c) r11 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) getpeername$packet(r11, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x9) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r14 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r15 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r15, 0x0, [], r13, r14, 0x5, 0x2}, 0x3c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) r17 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r17, 0x4070aea0, 0x0) getsockname$packet(r17, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r20 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r21 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r21, 0x0, [], r19, r20, 0x5, 0x2}, 0x3c) r22 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r22, 0x107, 0x12, 0x0, 0x0) accept4$packet(r22, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000b00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3005a100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x214, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r23}, {0x98, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xd52, 0x8, 0xffffffffffffff01, 0x7}, {0x6e38, 0x7, 0x7f, 0x3}, {0x10000, 0x4, 0x80000001, 0x1}, {0xf39, 0x4e37f662, 0x63ca, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r16}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x90}, 0x57683fc2bf020cfd) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000ade63edb905d56b611991615f12a541e41d08c3ad453f1f9aa6c74c0b9021995678add38b08533a50bdd37431bbeb3c7839ef655280b4d93e577ffa15a9805acde2f0be6a22b699bdb057e973dc9e970d51ef199324e1442e2ba0e944ac2c9c5e985775783455d6e27f6de710986a84d25b9c9d9735bc32f9a34913141b5357546f01987"], 0x15c}}, 0x0) [ 316.809773][T19172] Memory cgroup out of memory: Killed process 19172 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:35780kB, shmem-rss:0kB [ 316.825477][ T1057] oom_reaper: reaped process 19172 (syz-executor.4), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 08:42:10 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 316.874577][T19297] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/3' not defined. 08:42:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x9, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000700), 0x100000000000000d) 08:42:10 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000680)=""/225, 0xe1}], 0x3, 0x0) recvmmsg(r0, 0x0, 0x178, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000980)='net/sofH\x16tnet_sua') socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) r1 = syz_open_procfs(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f00000007c0)='user\x00', &(0x7f0000000a80)={'syz', 0x2}, &(0x7f0000000b00)="c3f63ddd3ce37190a16fb2d31396f9fce5b975241a658aac3f06ac42bffecd4587468be969faf13c0604104998623ee65b6e8b0b467ce62b027ad1c9a7f909db0b210ec556de140a765dff23f11fcba786bf0e93a90c09d15fe549354115414278c387f00e62b2ce4625f7f4e27b34f9bba2b13631c860d07a33f6c654d2c2b9ba8f520e968ce091bea8498ed244740ffc5dcbfabb6e485d44ee17639a9e0a759eb482cc7e11cb4337763950e64b6a1e201ce12b784e09be", 0xb8, 0xfffffffffffffffd) request_key(&(0x7f0000000880)='big_key\x00', 0x0, &(0x7f0000000900)='$[', 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r4, 0x0, 0x0, r5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) ioctl$sock_ifreq(r3, 0x89bd, &(0x7f0000000640)={'bridge0\x00', @ifru_names='ip6tnl0\x00'}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0xb2) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, r4, 0x5, 0x7fff, r6) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x12}) preadv(r8, &(0x7f00000017c0), 0x199, 0x0) sendto(r3, &(0x7f0000000240)="015e3115866c7bea8841d0217676f0f0a4a5e12ddcd54199eec33017f16adfe1b5f2d32539cbb7e8adfdcaa77edf80ab8d998c73dbf3b934efaad701c51bf89391fe69a70bc1ab3034f1099452434cc1977e5627610718c2af108fd911560ffff5a0aa339432bfb53e3cd7b4ccb286052a161808a4313d24ff059fbdcec3d74bec6d12c2fc52ae3fdcdf845589560bc851999fbf94ed2893d511529b8de9393773", 0xa1, 0x4000, 0x0, 0x0) 08:42:10 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) msync(&(0x7f00004ea000/0x4000)=nil, 0x4000, 0x4) chdir(&(0x7f0000000040)='./file0\x00') 08:42:10 executing program 0: setitimer(0x2, &(0x7f0000000080)={{0x0, 0x7530}, {0x306e000000000000}}, 0x0) getitimer(0x2, &(0x7f0000000040)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000000c0)={{0x8, 0x3, 0xfffffffffffffff8, 0x800, 'syz1\x00', 0x101}, 0x2, 0x20000000, 0x3, r0, 0x3, 0x680, 'syz1\x00', &(0x7f0000000000)=['\x00', '\x00', ':-\xcd#em0&,^^\x00'], 0xe, [], [0x100000001, 0x7, 0x16, 0x45]}) [ 317.124893][T19302] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.2'. 08:42:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x1000000000000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(0x0, 0x141042, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000100)=""/80, &(0x7f0000000200)=""/204, &(0x7f0000000300)=""/4, 0x10000}) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101, 0x0) r5 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r5, 0x1, &(0x7f00000000c0)={0x8000, 0x9}, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 08:42:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x51, 0x401, 0x0, {0x2, 0x2}, {0x6, 0x9}, @cond=[{0x8d74, 0x5, 0x8000, 0x81, 0x1, 0x6}, {0x9, 0x1, 0x9, 0x8afb, 0xfffffffffffffffd, 0x81}]}) 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x4, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:11 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x400000) r2 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000200)='\\eth1ppp0@\'vmnet0posix_acl_accessnodevvmnet1wlan0securityem0+mime_type-,\x00', 0xffffffffffffffff) keyctl$describe(0x6, r2, &(0x7f0000000280), 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000240)=0x30) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) 08:42:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000400)='~'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180), 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0fa266b9800000c00f326635008000000f300f20d86635080000000f22d80f63f0f2d052aebaf80c66b892e7cc8a66efbafc0cb8d4acef0fc77c0b0fc7b71fba0f0fbf83e4b7baf80c66b8e051808b66efbafc0cb80d00ef", 0x58}], 0x1, 0x1, &(0x7f0000000140)=[@cr4={0x1, 0x400001}, @cr4={0x1, 0x2}], 0x2) 08:42:11 executing program 3: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001180)=ANY=[@ANYRESDEC, @ANYBLOB="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"], 0x1000) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x80000001, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x20, 0x3, 0x8}, 0x8}}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) 08:42:11 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000100)=0x158) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x70, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 08:42:11 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{0x0}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 08:42:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x8, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7fff, 0x10}, 0xc) close(r5) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) bind$vsock_dgram(r4, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) accept4$ax25(r1, 0x0, &(0x7f0000000040), 0x800) 08:42:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/22) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f000002}) close(r1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001840)}, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x100, 0x2000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={r6, 0x8}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r10 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r11, 0x0, [], r9, r10, 0x5, 0x2}, 0x3c) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r12, 0x4070aea0, 0x0) getsockopt$inet6_mreq(r12, 0x29, 0x20, &(0x7f0000000640)={@rand_addr, 0x0}, &(0x7f0000000680)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000006c0)={@dev, 0x0}, &(0x7f0000000700)=0x14) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r16 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r17 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r17, 0x0, [], r15, r16, 0x5, 0x2}, 0x3c) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r19 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r20 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r20, 0x0, [], r18, r19, 0x5, 0x2}, 0x3c) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f0, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x1d4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xd97, 0x4, 0x5, 0xefbd}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r21 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r21, &(0x7f0000000000)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, r21) r22 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r21) add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r22) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'\x0e\x03\xf8', @ifru_flags}) syz_open_dev$mice(0x0, 0x0, 0xd66da02ba40f7d4e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) r23 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000b96000)) ioctl$VHOST_SET_VRING_ADDR(r23, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=""/117, &(0x7f00000003c0)=""/65, &(0x7f0000000480)=""/186, 0xd000}) 08:42:11 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x8, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:11 executing program 1: r0 = gettid() sched_setparam(0xffffffffffffffff, &(0x7f0000000200)=0xe3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgrcv(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000000000c0c200000000000000000000000000000000000000000000000000000000000000000000002f401ecb272c18f50000000000000000000000000000000000000000000000000000000000000000000010003500"/245], 0xf5, 0x3, 0x3800) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) r3 = open(&(0x7f0000000380)='./file0\x00', 0x6801, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000480)={r5, &(0x7f0000000400)=""/91}) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$getenv(0x4201, r2, 0x5f, &(0x7f0000000340)) r6 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000140)={0x1, 0x8000}) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x140, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'hwsim0\x00'}}, 0x1e) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r1, 0x5}, 0x180}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8d880308}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003005a0000000800040000000000080006007d60b808360173818dc466e2a2a580095f", @ANYRES32=0x0], 0x60}}, 0x0) 08:42:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x8001, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="b2a808143e62dba92079fef7ae07a6ab806c003311a3da33eba15b0ec55664a45c757b9c4968d0d2910580b8f8d9b53bad6bc1991d64cb7445e2f7bea951543ac15f9f372cbf0c26c6", 0x49, 0x80000001}, {&(0x7f00000001c0)="3410d244cd9998324686ff46a4239504b6b0902bdd8764ff567a3b1a259cb0e92e402936bf1ca3a2b3f7dfbeb9baaeb14f32a222df43e04c5619eaf1b5871b835d0864eb4f7ec2976a1ae18705f6a7923c37a256aed31e80aa7e8cacae747341ca0f8d13601479892f1bbf547bb0eae088f7a48b8434fa3d30f2d323c4ba434928a4a917c9a77b78c98a204a82b7c7043518d7ab407797212f81cfe3", 0x9c, 0x594}, {&(0x7f0000000080)="4795b44e2146571d6cc16284549a47cf339c44332a37100bb47693f31f", 0x1d, 0x800}], 0x100000, &(0x7f0000000300)={[{@session={'session', 0x3d, 0x9}}], [{@smackfsroot={'smackfsroot'}}, {@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2000000000002, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x0, 0x0, 0x0, 0x3e000000}, 0x1c) 08:42:11 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10400, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x100000001, 0x8) write$nbd(r0, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fb0011edfb1f8cd557b0bdfcd7f42f5b0ffb83a83e65611b8e66182eff039800ccce5b3c9e6dd2af872a1cb21492f8816f1aa5319e87f29738ad944b2034440a"}, 0x68) 08:42:11 executing program 1: r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1004002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4c}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffff4463}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r3, 0x0, 0x12, &(0x7f0000000040)='GPLprocselfvmnet1\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f0000000100)=r4, 0x12) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 318.079609][T19688] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 318.091270][T19704] dlm: no locking on control device [ 318.128771][T19688] CPU: 1 PID: 19688 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 318.136713][T19688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.146811][T19688] Call Trace: [ 318.150106][T19688] dump_stack+0x172/0x1f0 [ 318.154440][T19688] dump_header+0x10b/0x82d [ 318.158879][T19688] ? oom_kill_process+0x94/0x3f0 [ 318.163825][T19688] oom_kill_process.cold+0x10/0x15 [ 318.168946][T19688] out_of_memory+0x79a/0x12c0 [ 318.173626][T19688] ? lock_downgrade+0x920/0x920 [ 318.178611][T19688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 318.184852][T19688] ? oom_killer_disable+0x280/0x280 [ 318.184871][T19688] mem_cgroup_out_of_memory+0x1d8/0x240 [ 318.184886][T19688] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 318.184901][T19688] ? do_raw_spin_unlock+0x57/0x270 [ 318.184915][T19688] ? _raw_spin_unlock+0x2d/0x50 [ 318.184930][T19688] try_charge+0xf4b/0x1440 [ 318.195662][T19688] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 318.195681][T19688] ? get_mem_cgroup_from_mm+0x139/0x320 [ 318.195694][T19688] ? __kasan_check_read+0x11/0x20 [ 318.195713][T19688] ? lock_downgrade+0x920/0x920 [ 318.195726][T19688] ? percpu_ref_tryget_live+0x111/0x290 [ 318.195740][T19688] __memcg_kmem_charge_memcg+0x71/0xf0 [ 318.195752][T19688] ? memcg_kmem_put_cache+0x50/0x50 [ 318.195768][T19688] ? get_mem_cgroup_from_mm+0x156/0x320 [ 318.195783][T19688] __memcg_kmem_charge+0x13a/0x3a0 [ 318.264790][T19688] __alloc_pages_nodemask+0x4f4/0x900 [ 318.270176][T19688] ? __alloc_pages_slowpath+0x2520/0x2520 [ 318.276074][T19688] ? percpu_ref_put_many+0xb6/0x190 [ 318.281280][T19688] ? trace_hardirqs_on+0x67/0x240 [ 318.286315][T19688] copy_process+0x3f8/0x6b00 [ 318.290905][T19688] ? kvm_clock_read+0x18/0x30 [ 318.295593][T19688] ? lock_downgrade+0x920/0x920 [ 318.300461][T19688] ? __cleanup_sighand+0x60/0x60 [ 318.305426][T19688] ? lock_downgrade+0x920/0x920 [ 318.310282][T19688] ? lock_repin_lock+0x4b0/0x4b0 [ 318.315231][T19688] ? trace_hardirqs_on+0x67/0x240 [ 318.320280][T19688] _do_fork+0x146/0xfa0 [ 318.324443][T19688] ? copy_init_mm+0x20/0x20 [ 318.328960][T19688] ? try_to_free_mem_cgroup_pages+0x416/0xa80 [ 318.335066][T19688] ? try_to_free_pages+0x980/0x980 [ 318.340181][T19688] ? percpu_ref_put_many+0x94/0x190 [ 318.345387][T19688] ? __kasan_check_read+0x11/0x20 [ 318.350420][T19688] ? blkcg_maybe_throttle_current+0x5fe/0x1030 [ 318.356580][T19688] __x64_sys_clone+0x18d/0x250 [ 318.361351][T19688] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 318.366994][T19688] ? __ia32_sys_vfork+0xc0/0xc0 [ 318.371851][T19688] ? trace_hardirqs_off_caller+0x65/0x230 [ 318.377574][T19688] ? trace_hardirqs_on+0x67/0x240 [ 318.383048][T19688] do_syscall_64+0xfd/0x6a0 [ 318.387608][T19688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.393571][T19688] RIP: 0033:0x45c249 [ 318.397540][T19688] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 318.417406][T19688] RSP: 002b:00007ffd980dfc58 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 08:42:11 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) r1 = getpid() getpriority(0xfffffffffffffffe, r1) clock_gettime(0x0, &(0x7f0000000040)) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x404140) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000280)={0x10}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x600) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) select(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x100000000, 0x5, 0x10000, 0x401, 0xfff, 0x7fff}, 0x0, &(0x7f0000000140)={0x0, 0x2710}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000009c0)) getpgid(0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) 08:42:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000340)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x20020, 0x8) fstatfs(r1, &(0x7f0000000680)=""/216) [ 318.425839][T19688] RAX: ffffffffffffffda RBX: 00007efc99640700 RCX: 000000000045c249 [ 318.433814][T19688] RDX: 00007efc996409d0 RSI: 00007efc9963fdb0 RDI: 00000000003d0f00 [ 318.441788][T19688] RBP: 00007ffd980dfe70 R08: 00007efc99640700 R09: 00007efc99640700 [ 318.449762][T19688] R10: 00007efc996409d0 R11: 0000000000000202 R12: 0000000000000000 [ 318.457736][T19688] R13: 00007ffd980dfd0f R14: 00007efc996409c0 R15: 000000000075bfd4 08:42:12 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 08:42:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "1aa194e864"}, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0xd, 0xb, 0x104}}) 08:42:12 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 318.603319][T19688] memory: usage 307196kB, limit 307200kB, failcnt 2389 [ 318.605658][ T26] audit: type=1804 audit(1567759332.376:54): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir181569712/syzkaller.XdSTzq/66/file0" dev="sda1" ino=16544 res=1 [ 318.637242][T19688] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 318.674743][T19688] Memory cgroup stats for /syz4: [ 318.676043][T19688] anon 292298752 [ 318.676043][T19688] file 184320 [ 318.676043][T19688] kernel_stack 2818048 [ 318.676043][T19688] slab 6893568 [ 318.676043][T19688] sock 0 [ 318.676043][T19688] shmem 0 [ 318.676043][T19688] file_mapped 0 [ 318.676043][T19688] file_dirty 135168 [ 318.676043][T19688] file_writeback 0 [ 318.676043][T19688] anon_thp 278921216 [ 318.676043][T19688] inactive_anon 0 [ 318.676043][T19688] active_anon 292302848 [ 318.676043][T19688] inactive_file 0 [ 318.676043][T19688] active_file 0 [ 318.676043][T19688] unevictable 0 [ 318.676043][T19688] slab_reclaimable 1622016 [ 318.676043][T19688] slab_unreclaimable 5271552 [ 318.676043][T19688] pgfault 15576 [ 318.676043][T19688] pgmajfault 0 [ 318.676043][T19688] workingset_refault 0 [ 318.676043][T19688] workingset_activate 0 [ 318.676043][T19688] workingset_nodereclaim 0 [ 318.676043][T19688] pgrefill 409 [ 318.676043][T19688] pgscan 474 [ 318.676043][T19688] pgsteal 70 [ 318.676043][T19688] pgactivate 330 [ 318.830269][T19836] rtc_cmos 00:00: Alarms can be up to one day in the future [ 318.886316][T19688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19197,uid=0 08:42:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x1) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="36f02429e30caa8719d03aa1a292d6afa657a56ab825f0408b888661410d3329904beddb2df9276235f7a0abc05fedc59fdd4907c8518b3b95619064afd1a6"], 0x3, 0x1) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) [ 319.085337][T19830] rtc_cmos 00:00: Alarms can be up to one day in the future [ 319.115934][T19688] Memory cgroup out of memory: Killed process 19197 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 319.165253][T19695] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 319.218621][T19695] CPU: 1 PID: 19695 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 319.226564][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.236619][T19695] Call Trace: [ 319.239913][T19695] dump_stack+0x172/0x1f0 [ 319.244252][T19695] dump_header+0x10b/0x82d [ 319.248684][T19695] oom_kill_process.cold+0x10/0x15 [ 319.253803][T19695] out_of_memory+0x79a/0x12c0 [ 319.258479][T19695] ? lock_downgrade+0x920/0x920 [ 319.263418][T19695] ? oom_killer_disable+0x280/0x280 [ 319.268622][T19695] mem_cgroup_out_of_memory+0x1d8/0x240 [ 319.274165][T19695] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 319.279815][T19695] ? do_raw_spin_unlock+0x57/0x270 [ 319.284930][T19695] ? _raw_spin_unlock+0x2d/0x50 [ 319.289777][T19695] try_charge+0xa2d/0x1440 [ 319.294197][T19695] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 319.299745][T19695] ? get_mem_cgroup_from_mm+0x139/0x320 [ 319.305663][T19695] ? __kasan_check_read+0x11/0x20 [ 319.310694][T19695] ? lock_downgrade+0x920/0x920 [ 319.315555][T19695] ? percpu_ref_tryget_live+0x111/0x290 [ 319.321105][T19695] __memcg_kmem_charge_memcg+0x71/0xf0 [ 319.326550][T19695] ? memcg_kmem_put_cache+0x50/0x50 [ 319.326565][T19695] ? get_mem_cgroup_from_mm+0x156/0x320 [ 319.326578][T19695] __memcg_kmem_charge+0x13a/0x3a0 [ 319.326594][T19695] __alloc_pages_nodemask+0x4f4/0x900 [ 319.326608][T19695] ? __alloc_pages_slowpath+0x2520/0x2520 [ 319.326621][T19695] ? percpu_ref_put_many+0xb6/0x190 [ 319.326642][T19695] ? trace_hardirqs_on+0x5e/0x240 [ 319.364140][T19695] copy_process+0x3f8/0x6b00 [ 319.368738][T19695] ? trace_hardirqs_on_caller+0x6a/0x240 [ 319.374395][T19695] ? __cleanup_sighand+0x60/0x60 [ 319.379356][T19695] _do_fork+0x146/0xfa0 [ 319.383525][T19695] ? copy_init_mm+0x20/0x20 [ 319.388032][T19695] ? __kasan_check_read+0x11/0x20 [ 319.393040][T19695] ? _copy_to_user+0x118/0x160 [ 319.397780][T19695] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.404177][T19695] ? put_timespec64+0xda/0x140 [ 319.408928][T19695] __x64_sys_clone+0x18d/0x250 [ 319.413702][T19695] ? __ia32_sys_vfork+0xc0/0xc0 [ 319.418541][T19695] ? trace_hardirqs_off_caller+0x65/0x230 [ 319.424249][T19695] ? trace_hardirqs_on+0x67/0x240 [ 319.429316][T19695] do_syscall_64+0xfd/0x6a0 [ 319.433816][T19695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.447078][T19695] RIP: 0033:0x459879 [ 319.450955][T19695] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.470665][T19695] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 319.479164][T19695] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 319.487226][T19695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.495198][T19695] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.503845][T19695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 319.511808][T19695] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 319.526478][T19695] memory: usage 302984kB, limit 307200kB, failcnt 2389 [ 319.538819][T19695] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 319.548835][T19695] Memory cgroup stats for /syz4: [ 319.548949][T19695] anon 288051200 [ 319.548949][T19695] file 184320 [ 319.548949][T19695] kernel_stack 2883584 [ 319.548949][T19695] slab 6893568 [ 319.548949][T19695] sock 0 [ 319.548949][T19695] shmem 0 [ 319.548949][T19695] file_mapped 0 [ 319.548949][T19695] file_dirty 135168 [ 319.548949][T19695] file_writeback 0 [ 319.548949][T19695] anon_thp 274726912 [ 319.548949][T19695] inactive_anon 0 [ 319.548949][T19695] active_anon 288055296 [ 319.548949][T19695] inactive_file 0 [ 319.548949][T19695] active_file 0 [ 319.548949][T19695] unevictable 0 [ 319.548949][T19695] slab_reclaimable 1622016 [ 319.548949][T19695] slab_unreclaimable 5271552 [ 319.548949][T19695] pgfault 15609 [ 319.548949][T19695] pgmajfault 0 [ 319.548949][T19695] workingset_refault 0 [ 319.548949][T19695] workingset_activate 0 [ 319.548949][T19695] workingset_nodereclaim 0 [ 319.548949][T19695] pgrefill 409 [ 319.548949][T19695] pgscan 474 [ 319.548949][T19695] pgsteal 70 [ 319.548949][T19695] pgactivate 330 [ 319.648047][T19695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14441,uid=0 08:42:13 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0xf, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1e}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b0014060064000000000000000000000000000000fe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3d1a89cca4a080ed"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) 08:42:13 executing program 5: unshare(0x26020400) mkdir(&(0x7f0000001880)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000040)={{0x5000, 0xf000, 0x4, 0xd8, 0x3f, 0x2, 0x72, 0x5, 0x3, 0xda, 0x100000000, 0x1}, {0x1, 0x1, 0x0, 0x4, 0x5, 0x2, 0x4, 0x9519, 0x8, 0x8000, 0x6, 0x8}, {0x5000, 0x1000, 0x8, 0x521, 0x2, 0x3, 0x1, 0xa26, 0x7, 0x1ff, 0x6, 0x8}, {0x100000, 0x0, 0xc, 0xd, 0x7, 0x4, 0x1, 0x15, 0x6, 0x100, 0x3, 0x7}, {0x1000, 0x1, 0x13, 0x912a, 0x957d, 0x1000, 0x3, 0x0, 0x8, 0x10001, 0x100, 0x10000}, {0x3000, 0x3000, 0xf, 0x9, 0x76f7, 0x400, 0xffffffff, 0x2, 0x7, 0x7, 0xab, 0x2}, {0xf000, 0x4, 0x18, 0x5561, 0x6, 0x69, 0xffffffffffff5a01, 0x3, 0x0, 0x8e, 0x3ff, 0x1f}, {0x2, 0x1000, 0x23, 0x4, 0x0, 0x7, 0x6, 0x0, 0x2, 0xfffffffffffffffb, 0x1ff, 0x1}, {0x6000, 0x1000}, {0x4000, 0x6000}, 0x40000004, 0x0, 0xd146cfc5e5996fb, 0x240000, 0xa, 0x2d01, 0xd000, [0x8, 0x5, 0x5, 0x4]}) 08:42:13 executing program 3: r0 = socket(0x4, 0x800000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = accept(r1, &(0x7f00000002c0)=@rc, &(0x7f0000000340)=0x80) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000380)={0xfc, @multicast1, 0x4e21, 0x3, 'lc\x00', 0x30, 0x4, 0x43}, 0x2c) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9020008000100010423dcffdf00", 0x1f) r3 = socket(0x10, 0x800000000000002, 0xc) getsockname(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000140)=0xfffffffffffffe59) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f00000000c0)='./file0\x00', r4}, 0x10) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r5 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000001c0)={0x1, 0xda2a}) write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) 08:42:13 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x39, 0xd, 0x15, 0x2, 0x4, 0x800000000000000, 0x1, 0x158}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:13 executing program 0: r0 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1ff, 0x4c00) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0xffffffffffff8b0c, r2, 0x0, 0x0, 0x1}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x8000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000014) [ 319.666800][T19695] Memory cgroup out of memory: Killed process 14441 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 319.682952][ T1057] oom_reaper: reaped process 14441 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 319.732963][T19955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 319.786376][T19957] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 08:42:13 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x8, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:13 executing program 0: r0 = socket$inet(0x10, 0x0, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030207031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x0) 08:42:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646f74732c0028c62f6f63b04aa13b56f295b33895d177d18ecc9ea87f92e268b05a9d6c8f1a3a15650ddea863a917872e80c8ccf9852db41714e58a1a49be2e09f8412871268ee1fda568c9bbd676bb4f147dc119a6b701c2d1233f67869048b888a70ecdeb94d4c2ef3cb404d33475bfe9c17be0bfa95ace83a01af33c8821177f42b0a582fb6041d4ac076158349f6a1127b62e45f05201bb8ac54e45c46b4f1979"]) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3f) 08:42:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x20000000000, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_VFINFO_LIST, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 08:42:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) sysinfo(&(0x7f0000000080)=""/41) write$sndseq(r1, &(0x7f0000000040)=[{0x81ffffff, 0xa, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) [ 320.138015][T20084] FAT-fs (loop2): bogus number of reserved sectors [ 320.141713][T19963] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 320.170769][T20084] FAT-fs (loop2): Can't find a valid FAT filesystem [ 320.183205][T19963] CPU: 0 PID: 19963 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 320.191134][T19963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.201190][T19963] Call Trace: [ 320.204487][T19963] dump_stack+0x172/0x1f0 [ 320.208835][T19963] dump_header+0x10b/0x82d [ 320.213258][T19963] oom_kill_process.cold+0x10/0x15 [ 320.218374][T19963] out_of_memory+0x79a/0x12c0 [ 320.221366][T20090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.223053][T19963] ? lock_downgrade+0x920/0x920 [ 320.223076][T19963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.243419][T19963] ? oom_killer_disable+0x280/0x280 [ 320.248638][T19963] mem_cgroup_out_of_memory+0x1d8/0x240 [ 320.254193][T19963] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 320.259841][T19963] ? do_raw_spin_unlock+0x57/0x270 [ 320.264952][T19963] ? _raw_spin_unlock+0x2d/0x50 [ 320.269808][T19963] try_charge+0xf4b/0x1440 [ 320.274233][T19963] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 320.279771][T19963] ? percpu_ref_tryget_live+0x111/0x290 [ 320.285321][T19963] ? get_mem_cgroup_from_mm+0x16/0x320 [ 320.290800][T19963] ? get_mem_cgroup_from_mm+0x156/0x320 [ 320.296352][T19963] mem_cgroup_try_charge+0x136/0x590 [ 320.301647][T19963] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 320.307894][T19963] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 320.313620][T19963] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 320.319608][T19963] ? defrag_store+0x360/0x360 [ 320.324323][T19963] ? __this_cpu_preempt_check+0x3a/0x210 [ 320.329958][T19963] ? retint_kernel+0x2b/0x2b 08:42:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001400)={{{@in6=@ipv4={[], [], @broadcast}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001580)=0x0) r8 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001640)=0x0) r11 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r12, 0x116, 0x7f, &(0x7f0000000100), 0x4) r13 = getpgrp(0xffffffffffffffff) r14 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r12, r12, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) getresgid(&(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)=0x0) sendmmsg$unix(r3, &(0x7f00000017c0)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="84f30f5961c47f079e67b6b9fce0e11781b633237d6aff57be9fe728136d8e9a99aa133e3c23c22ee3f248045dd61e6ea2d10749821bd335b9c6c9d5e288a1096b5659bf628ca48991bdfe655c7107e95828984fbc4cb9eefd1d3dd389074c1690142a3d0ce20725f6ef490129ea80c7d6b8d9008445a0e4d41528b0f618a18d070297226ab4badcd3bbf32925014e7079", 0x91}, {&(0x7f0000000140)="152e3dafff4deac18f84b539ce41b09fb27147d06edb0c69f6ee2ba55b8092cfa8c891204af05c", 0x27}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000180)="35b37ef0f22947bfa5f8cddc1c6eceadf19a5281cd82f0e5eac3deeca846d116a1168f1eda47f5222ff2b382ad0fd6afe50aa085294d4764f01d1a7cd1deba158bc9b21874ea5c55bcc01bfb99bcf3482b89ae306c0c25c070c13004fc9b089b5954b2c112433513d3f834df1fde", 0x6e}], 0x4, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r14, r15}}}], 0x60, 0x80000}], 0x1, 0x840) r16 = shmget(0x0, 0x3000, 0x549558f1e98aa8c1, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r16, 0xd, &(0x7f0000001800)) [ 320.334561][T19963] do_huge_pmd_wp_page+0x806/0x2270 [ 320.339766][T19963] ? __split_huge_pmd+0x27e0/0x27e0 [ 320.345070][T19963] ? is_bpf_text_address+0xac/0x170 [ 320.350280][T19963] ? __kasan_check_read+0x11/0x20 [ 320.355306][T19963] ? pmd_val+0x85/0x100 [ 320.359452][T19963] ? add_mm_counter_fast.part.0+0x40/0x40 [ 320.365187][T19963] ? lock_downgrade+0x920/0x920 [ 320.370131][T19963] __handle_mm_fault+0x14cf/0x3f20 [ 320.375336][T19963] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 320.380881][T19963] ? __kasan_check_read+0x11/0x20 [ 320.385915][T19963] ? retint_kernel+0x2b/0x2b [ 320.385934][T19963] ? trace_hardirqs_on+0x67/0x240 [ 320.385950][T19963] handle_mm_fault+0x1b5/0x6b0 [ 320.385965][T19963] __get_user_pages+0x7d4/0x1b30 [ 320.385974][T19963] ? __mutex_lock+0x45d/0x13c0 [ 320.385990][T19963] ? follow_page_mask+0x19b0/0x19b0 [ 320.386007][T19963] ? process_vm_rw_core.isra.0+0x420/0xb10 [ 320.386022][T19963] get_user_pages_remote+0x234/0x4b0 [ 320.386037][T19963] process_vm_rw_core.isra.0+0x464/0xb10 [ 320.386056][T19963] ? pcpu_get_vm_areas.cold+0x49/0x49 [ 320.386071][T19963] ? rw_copy_check_uvector+0x1aa/0x390 [ 320.386086][T19963] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 320.386097][T19963] ? rw_copy_check_uvector+0x2ce/0x390 [ 320.386112][T19963] ? do_futex+0x17d/0x1dc0 [ 320.386126][T19963] process_vm_rw+0x21f/0x240 [ 320.386144][T19963] ? process_vm_rw_core.isra.0+0xb10/0xb10 [ 320.437390][T19963] ? lock_downgrade+0x920/0x920 [ 320.463089][T19963] ? __kasan_check_read+0x11/0x20 [ 320.463103][T19963] ? _copy_to_user+0x118/0x160 [ 320.463125][T19963] ? retint_kernel+0x2b/0x2b [ 320.478825][T19963] ? trace_hardirqs_on_caller+0x6a/0x240 [ 320.478847][T19963] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 320.494055][T19963] ? __this_cpu_preempt_check+0x3a/0x210 [ 320.494072][T19963] ? retint_kernel+0x2b/0x2b [ 320.494090][T19963] __x64_sys_process_vm_writev+0xe3/0x1a0 [ 320.494104][T19963] ? do_syscall_64+0x54/0x6a0 [ 320.494117][T19963] ? do_syscall_64+0x26/0x6a0 [ 320.494128][T19963] ? do_syscall_64+0x5b/0x6a0 [ 320.494146][T19963] do_syscall_64+0xfd/0x6a0 [ 320.515689][T19963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.515699][T19963] RIP: 0033:0x459879 [ 320.515720][T19963] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.525036][T19963] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 320.525049][T19963] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459879 [ 320.525055][T19963] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 00000000000002aa [ 320.525061][T19963] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 320.525068][T19963] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007efc996616d4 [ 320.525075][T19963] R13: 00000000004c6bba R14: 00000000004dbdd0 R15: 00000000ffffffff [ 320.536925][T19963] memory: usage 307200kB, limit 307200kB, failcnt 2408 [ 320.544516][T19963] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 320.580577][T19963] Memory cgroup stats for /syz4: [ 320.581375][T19963] anon 290283520 [ 320.581375][T19963] file 184320 [ 320.581375][T19963] kernel_stack 2883584 [ 320.581375][T19963] slab 6893568 [ 320.581375][T19963] sock 0 [ 320.581375][T19963] shmem 0 [ 320.581375][T19963] file_mapped 0 [ 320.581375][T19963] file_dirty 135168 [ 320.581375][T19963] file_writeback 0 [ 320.581375][T19963] anon_thp 274726912 [ 320.581375][T19963] inactive_anon 0 [ 320.581375][T19963] active_anon 290287616 [ 320.581375][T19963] inactive_file 0 [ 320.581375][T19963] active_file 0 [ 320.581375][T19963] unevictable 0 [ 320.581375][T19963] slab_reclaimable 1622016 [ 320.581375][T19963] slab_unreclaimable 5271552 [ 320.581375][T19963] pgfault 15741 [ 320.581375][T19963] pgmajfault 0 [ 320.581375][T19963] workingset_refault 0 [ 320.581375][T19963] workingset_activate 0 [ 320.581375][T19963] workingset_nodereclaim 0 [ 320.581375][T19963] pgrefill 409 [ 320.581375][T19963] pgscan 474 [ 320.581375][T19963] pgsteal 70 [ 320.581375][T19963] pgactivate 330 [ 320.604772][T19963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19961,uid=0 [ 320.739971][T19963] Memory cgroup out of memory: Killed process 19961 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:35784kB, shmem-rss:0kB [ 320.759561][ T1057] oom_reaper: reaped process 19961 (syz-executor.4), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 320.778716][T20088] FAT-fs (loop2): bogus number of reserved sectors [ 320.793979][T20088] FAT-fs (loop2): Can't find a valid FAT filesystem 08:42:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.cpus\x00:\xb5\xb5W\xd2\nEQyP\x03\x03^6K\xed\x19,\xfeP\xb0ytD\x04\x0e\"\x95c\xf2\xbf\xd8\xad\xe5\f\xf0\xa8\x04U\xd2\xf9\x1a\xfb\xa4\xccX\x1et\x17\xe4\x83\xcd\x86\xb4H\x0em\xfeu=r\xa9\xd5\n\x04O\x1b(\xb2n\x909I8\a\xeb\xd2\xachOt\xc5\xb5\xad\x85\xc3\xf5\xf34:~)\x16(\x96\xc1\x11\x18\x9dcL\bqlN\x04\x92(\x89\xec6\xde\xdc\xf8\x9eXf\xdd_\x16\v8\xde\xf7\x8fD\xe3\xb1dp)\xd7\x16\x10\xa5\xb6\xf1<%\x80\xd9\xe0\x7f\x19\x9c\x05\xb2\x06\x97T\x020\xa1\xcb,s\nn#{\x06lc\xf1\xaa\xbe\xff\xdb\xb9', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000000c0)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]], 0x8) 08:42:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x80000000000000bd) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x31c, 0x89100) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x7f) getsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x28, &(0x7f0000000140)}, 0x10) accept4(r1, 0x0, 0x0, 0x0) 08:42:14 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) finit_module(0xffffffffffffffff, &(0x7f0000000040)='%#\\ppp0\x00', 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x20, "c82b096da498ad0148499d373fe47a7d52557653b6328161741ac12b4b66433b", 0x1, 0x1}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:14 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x80) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4775, 0x110200) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x0, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x804000000000c) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="1f0000000102193b000007000000068100023b050900020000004000020058", 0x1f}], 0x1) 08:42:14 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x200000, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8000000000a) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000080)=""/202, 0xca) r4 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/dev/ashmem\x00', r3) keyctl$assume_authority(0x10, r4) 08:42:14 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:14 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xdb3aa9a78e1f56bd, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000740)={&(0x7f0000000200)={0x27, 0x0, 0x2, 0x2, 0x7, 0x7, "a167c2a59239744df219c442146ec1abc417586cc7285a80559b004478be3a09d5abf56f7e3c037cab1390891cfaa2446e1dfaadbd18303a8f83a9a3297e33", 0x3}, 0x60, &(0x7f00000005c0)=[{&(0x7f0000000180)="e17bf2154dc53aceca81dd71d8c64105f4dc9001f57cddc73dc45220970f3e896684ace9e9d1bb70e20666266e764ef74ecfb7ab7e3f0458235b8ce3", 0x3c}, {&(0x7f0000000280)="bddb5dabf495a4b220dafbab050bd678834fd0433f9b5c2387e0a61178339f5fd118a901d32d88745f92e1811f6af2721fae79829d6c19eb37d2ef37faa49964c8d8", 0x42}, {&(0x7f0000000300)="89e39efc4f09cf9bd17c526754b54ace767ca6fd080e2e16e7825de081c55d0fbbd6fa190c668224bccc1f271f099dca83a1139c74aecfa7fd50482b70c5e0f4306158aa152692d7c169ec5c93cf2f4acfb85cd50df8a3f454de129151ec9264be4d8a6acfa3123ca30bfff347eb4e159c6e08c38779d10026e423c17405042840b845ff4d3b4382fc4dfbac810622d4960e7647ff45d20cf5823d989d0238ceb04088530cd7056a5a7aff75921ae449db60d639713dc8363148cd86", 0xbc}, {&(0x7f00000003c0)="d82118a0d759ef22af3452f4fa744f4d89b1d95c253438c1fc49f5fe2624ed95e03d38f694a58aa1305c8fa3b0e1eab51f672522092fdd708dd6857649ffa068fd53d7ebfc99", 0x46}, {&(0x7f0000000440)="ba941060794c309065859b967f58f768f1936586994143ab048501b3bd864be6cb", 0x21}, {&(0x7f0000000480)="32b04064f46fe5845b5886e7ea4cebbdcc0000600ca420d2a99d1e1ff3db204b6a9f0ed986ed401d6e664ed6d37d1246ee2b9740f83cf0309d71fd9e5cf5776df4a54439a53da2bdfd475e456b09c5bb7d989ecca4a04ae1446f47900d565b84a8f304843fe12007a4df75b7cfef66c0ef9575e47f5b25cfb3c76d2c8d4a1d3ddc15c173d885eb7dc28a1409e7058d8ffeae14868d4a7dd0e62f", 0x16}, {&(0x7f0000000540)="c0cc762a4e0d79569d47256c7eed3045138ed67566649b4eeba726a711aa99c28afbf303b5ee8a5d1bff3459f7aa39409b1909358dd39ff02396040f9504df03247cc419b64be63d58300f572646672ffd51ecbd2440c53518a575912a5d033f6a16b457dc81df08270de15acfff7f862b", 0x71}], 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100, 0x4080}, 0x4002004) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) signalfd(r0, &(0x7f0000000780)={0x1}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80085, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x2, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x40, 0xe6e, 0xfff, 0xa53a}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x163000, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'ip6gre0\x00'}}) 08:42:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfe47bf070") mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0xffffffd3, 0x0, &(0x7f0000fc1ffc)=[@decrefs={0x40486311}], 0x0, 0x0, 0x0}) 08:42:14 executing program 2: clone(0x2102091ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioprio_set$pid(0x0, r0, 0x4) [ 321.075566][T20114] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 321.120626][T20130] binder: 20126:20130 ioctl c0306201 20a20000 returned -14 [ 321.139459][T20114] CPU: 1 PID: 20114 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 321.147398][T20114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.157454][T20114] Call Trace: [ 321.160751][T20114] dump_stack+0x172/0x1f0 [ 321.165089][T20114] dump_header+0x10b/0x82d [ 321.169512][T20114] ? oom_kill_process+0x94/0x3f0 [ 321.174457][T20114] oom_kill_process.cold+0x10/0x15 [ 321.179571][T20114] out_of_memory+0x79a/0x12c0 [ 321.184251][T20114] ? lock_downgrade+0x920/0x920 [ 321.189115][T20114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.195375][T20114] ? oom_killer_disable+0x280/0x280 [ 321.200577][T20114] ? __kasan_check_read+0x11/0x20 [ 321.205605][T20114] mem_cgroup_out_of_memory+0x1d8/0x240 [ 321.211175][T20114] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 321.216816][T20114] ? do_raw_spin_unlock+0x57/0x270 [ 321.222107][T20114] ? _raw_spin_unlock+0x2d/0x50 [ 321.227051][T20114] try_charge+0xf4b/0x1440 [ 321.231474][T20114] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 321.237029][T20114] ? percpu_ref_tryget_live+0x111/0x290 [ 321.242569][T20114] ? get_mem_cgroup_from_mm+0x16/0x320 [ 321.248286][T20114] ? get_mem_cgroup_from_mm+0x156/0x320 [ 321.253821][T20114] mem_cgroup_try_charge+0x136/0x590 [ 321.259099][T20114] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 321.265322][T20114] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 321.270934][T20114] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 321.276904][T20114] ? lock_downgrade+0x920/0x920 [ 321.281750][T20114] ? defrag_store+0x360/0x360 [ 321.286419][T20114] ? lock_downgrade+0x920/0x920 [ 321.291252][T20114] ? swp_swapcount+0x540/0x540 [ 321.295994][T20114] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 321.301866][T20114] ? __kasan_check_read+0x11/0x20 [ 321.306870][T20114] ? do_raw_spin_unlock+0x57/0x270 [ 321.311985][T20114] do_huge_pmd_wp_page+0x806/0x2270 [ 321.317167][T20114] ? __split_huge_pmd+0x27e0/0x27e0 [ 321.322788][T20114] ? balance_dirty_pages+0x2b80/0x2b80 [ 321.328239][T20114] ? ext4_set_page_dirty+0x2b7/0x480 [ 321.333519][T20114] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.339740][T20114] ? pmd_val+0x85/0x100 [ 321.343882][T20114] ? add_mm_counter_fast.part.0+0x40/0x40 [ 321.349582][T20114] ? fault_dirty_shared_page.isra.0+0x18c/0x200 [ 321.356068][T20114] __handle_mm_fault+0x14cf/0x3f20 [ 321.361287][T20114] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 321.366823][T20114] ? __kasan_check_read+0x11/0x20 [ 321.371855][T20114] ? trace_hardirqs_on+0x67/0x240 [ 321.377039][T20114] handle_mm_fault+0x1b5/0x6b0 [ 321.382095][T20114] __do_page_fault+0x536/0xdd0 [ 321.386858][T20114] do_page_fault+0x38/0x590 [ 321.391353][T20114] page_fault+0x39/0x40 [ 321.395510][T20114] RIP: 0033:0x4006c4 [ 321.399401][T20114] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a 08:42:14 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0x7, 0x4) 08:42:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x800001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100005070000ebffffca2c0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) [ 321.418999][T20114] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 321.425046][T20114] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 321.432999][T20114] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 321.440961][T20114] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 321.448924][T20114] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 321.456892][T20114] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x24, 0x3a, 0xd, 0x12, 0x7675, 0x8001, 0x6, 0x111, 0x1}) setgroups(0x4000000000000015, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000100)=""/210, &(0x7f0000000080)=0xd2) 08:42:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfb, 0x20, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0), 0x4) r3 = socket$kcm(0x2, 0x27, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r4, 0x4) r6 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xbfffffffffffffff, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/.yz0\xfe', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@in6, 0x80, 0x0, 0x263}, 0x200008c4) pipe(&(0x7f0000000440)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, r5, 0x0) recvmsg(r2, &(0x7f0000000c00)={&(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0xfffffffffffffea0, &(0x7f0000000d00), 0x73e82230f3c96c1, &(0x7f0000000cc0)=""/25, 0x19}, 0x21) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000300)=0x3) close(r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000580)="d8a170724fdb88bbf2ec02eab86d30afbcb8fbc4b74d8a18a5717df26245e37fe376e7cec0f7b8c0dc46d9864bfd0278c4760d69d43de7b13a314682e45549fb110676fa0277d6d8ab7524deb4a5fc33d4b9d3983994bb4cf426c0fd1964b3d1e7014fb8b13501759124021f96b1d5ea521f2dedc29c32f32b3e9c5891301cb392d9c7c248414435e4ed1bfe4729fd38251d0e8bcb1904aea6e6689430038b775a31489b3d8078f6dd5e53024a7e8b9c696102a927a4aebf7d6e88e2b0e07ed097db2e01b66ece", 0xc7}, {&(0x7f0000000500)="86d60403d199ad5636c11c1b829d3d07f67f24b9dd6bc0cffad6568231004fd12e84becc11e476171fb242292f379113526155234d306914e05d6ca0", 0x3c}, {&(0x7f0000000680)="da1da0849d62c612e5363a2b10f81783df1939045f9005185f58c334b13157f58ce3bb77a689384f3bccb4ce8323ebd6739d2d32f5fe3de89a90e46ff2688cd7cd131215f25ba4f1007766db5f696191920bad170d67a112184017102d9261d54d4abdba56a0a12e59c77831f4d4bb4a4f27fb5f9d5cec647af90fce8b2fd2a883e46ad9c7555bbc6abaed01d9fdd29938dc98b051e4f946ef6ec3855de2f33daf0a3f217d90c4c2922bc8203b03155abf1d2e78d12d28601179637dbc2e245db3f9501d191066", 0xc7}, {&(0x7f0000000780)="31cb61fc8d3a1e35b09c535b32c363cef647bbc6386252abec19ab16763fa08276c5763a7fd1ae56e64a8dab6967f17b31b73af952e7c0ef71404b8b7610379a8af181f8a43c35ffed6910179e290789f4b852dde1720508852a3902782f8c2697a0456d14db73e700537f0ddf722623516d9d5a9d69a11f875b", 0x7a}, {&(0x7f0000000800)="67efabba17a2f588ab01d726e395b934456272c742641a5c4e947cc31b48bd245a0dddf7659b4638d3533fad029dd583171527876fe9b4b10224d573f86116216371e3cd4db53c6a04ee05c8bf23c267613264bd65d7b2a848bd16913dad84b8b21988a75840aad61afead24a3d54f78c6114adcfd22b0943a5ddfb3df4ebb80488dff3b00b0af5962f90c8a8139cca3405177c3720f96e17a561d7dda998c8050d2ee9a104c696d1fcae7dbf0a42371a7873cbff73d6c18de25b1a165d62a15cb699ba2d565f976c070a2a051bf1c23513e3951f8c03a31e1c20b03f03aaac5f460c8a5", 0xe4}], 0x5, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x750a}}], 0x18}, 0x800) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 08:42:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1, &(0x7f0000000200)=""/68, &(0x7f0000000000)=0x44) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet(0x2, 0x3, 0x3ff) accept$inet(r3, 0x0, &(0x7f0000000140)) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000280)=""/243, 0xf3, 0x0) [ 321.562032][T20114] memory: usage 307200kB, limit 307200kB, failcnt 2464 [ 321.609564][T20114] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.642548][T20114] Memory cgroup stats for /syz4: [ 321.642636][T20114] anon 290209792 [ 321.642636][T20114] file 184320 [ 321.642636][T20114] kernel_stack 2883584 [ 321.642636][T20114] slab 6893568 [ 321.642636][T20114] sock 0 [ 321.642636][T20114] shmem 0 [ 321.642636][T20114] file_mapped 0 [ 321.642636][T20114] file_dirty 135168 [ 321.642636][T20114] file_writeback 0 [ 321.642636][T20114] anon_thp 276824064 [ 321.642636][T20114] inactive_anon 0 [ 321.642636][T20114] active_anon 290312192 [ 321.642636][T20114] inactive_file 0 [ 321.642636][T20114] active_file 0 [ 321.642636][T20114] unevictable 0 [ 321.642636][T20114] slab_reclaimable 1622016 [ 321.642636][T20114] slab_unreclaimable 5271552 [ 321.642636][T20114] pgfault 15840 [ 321.642636][T20114] pgmajfault 0 [ 321.642636][T20114] workingset_refault 0 [ 321.642636][T20114] workingset_activate 0 [ 321.642636][T20114] workingset_nodereclaim 0 [ 321.642636][T20114] pgrefill 409 [ 321.642636][T20114] pgscan 474 [ 321.642636][T20114] pgsteal 70 [ 321.642636][T20114] pgactivate 330 08:42:15 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x800) r2 = socket$packet(0x11, 0x0, 0x300) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x1) capget(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000100)={0x400, 0x3, 0xdb5, 0xfffffffffffff067, 0x3, 0x100000000}) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c, 0x2a, 0x1, 0x0, 0x0, {0x3}, [@nested={0x8, 0x9, [@generic="c9"]}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r3, 0x103, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x908}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10910282}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0x3ec, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400040000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x257}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) [ 321.788244][T20114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20054,uid=0 [ 321.808238][T20114] Memory cgroup out of memory: Killed process 20054 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:15 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0xd09acb823bfd6d67, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000001680)=0xffffffffffffff81, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={r0, 0x1, 0x6, @dev}, 0x10) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000005c0)=""/4096) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)={0xd1a, 0x9, 0x3, 0x80000003}, 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e20, @empty}, 'team_slave_0\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x12, 0x805, 0x380000000000000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0x1bdc80}, 0x1c) request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='/dev/loop-control\x00', 0xfffffffffffffff9) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 321.895383][T20250] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.931779][T20128] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 322.074891][T20128] CPU: 1 PID: 20128 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 322.082859][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.093092][T20128] Call Trace: [ 322.097867][T20128] dump_stack+0x172/0x1f0 [ 322.102222][T20128] dump_header+0x10b/0x82d [ 322.102233][T20128] ? oom_kill_process+0x94/0x3f0 [ 322.102251][T20128] oom_kill_process.cold+0x10/0x15 [ 322.116708][T20128] out_of_memory+0x79a/0x12c0 [ 322.121483][T20128] ? lock_downgrade+0x920/0x920 [ 322.126336][T20128] ? oom_killer_disable+0x280/0x280 [ 322.131529][T20128] ? __kasan_check_read+0x11/0x20 [ 322.136562][T20128] mem_cgroup_out_of_memory+0x1d8/0x240 [ 322.142195][T20128] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 322.147830][T20128] ? do_raw_spin_unlock+0x57/0x270 [ 322.152949][T20128] ? _raw_spin_unlock+0x2d/0x50 [ 322.157799][T20128] try_charge+0xa2d/0x1440 [ 322.157817][T20128] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 322.157841][T20128] ? get_mem_cgroup_from_mm+0x139/0x320 [ 322.173313][T20128] ? __kasan_check_read+0x11/0x20 [ 322.178434][T20128] ? lock_downgrade+0x920/0x920 [ 322.183282][T20128] ? percpu_ref_tryget_live+0x111/0x290 [ 322.188823][T20128] __memcg_kmem_charge_memcg+0x71/0xf0 [ 322.188842][T20128] ? memcg_kmem_put_cache+0x50/0x50 [ 322.199480][T20128] ? get_mem_cgroup_from_mm+0x156/0x320 [ 322.205023][T20128] __memcg_kmem_charge+0x13a/0x3a0 [ 322.210141][T20128] __alloc_pages_nodemask+0x4f4/0x900 [ 322.215521][T20128] ? __alloc_pages_slowpath+0x2520/0x2520 [ 322.221339][T20128] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 322.227584][T20128] alloc_pages_current+0x107/0x210 [ 322.232700][T20128] pte_alloc_one+0x1b/0x1a0 [ 322.237557][T20128] __handle_mm_fault+0x34d7/0x3f20 [ 322.242679][T20128] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 322.248231][T20128] ? __kasan_check_read+0x11/0x20 [ 322.248254][T20128] ? trace_hardirqs_on+0x67/0x240 [ 322.248273][T20128] handle_mm_fault+0x1b5/0x6b0 [ 322.263045][T20128] __do_page_fault+0x536/0xdd0 [ 322.267806][T20128] ? page_fault+0x16/0x40 [ 322.272143][T20128] do_page_fault+0x38/0x590 [ 322.276666][T20128] page_fault+0x39/0x40 [ 322.280830][T20128] RIP: 0033:0x459879 [ 322.284735][T20128] Code: Bad RIP value. [ 322.288796][T20128] RSP: 002b:00007efc99660c78 EFLAGS: 00010246 [ 322.294859][T20128] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000459879 [ 322.302834][T20128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.310809][T20128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.318791][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 322.326768][T20128] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 322.524359][T20259] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.591883][T20128] memory: usage 303428kB, limit 307200kB, failcnt 2464 [ 322.676694][T20128] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 322.727395][T20128] Memory cgroup stats for /syz4: [ 322.727494][T20128] anon 288067584 [ 322.727494][T20128] file 184320 [ 322.727494][T20128] kernel_stack 2818048 [ 322.727494][T20128] slab 6893568 [ 322.727494][T20128] sock 0 [ 322.727494][T20128] shmem 0 [ 322.727494][T20128] file_mapped 0 [ 322.727494][T20128] file_dirty 135168 [ 322.727494][T20128] file_writeback 0 [ 322.727494][T20128] anon_thp 272629760 [ 322.727494][T20128] inactive_anon 0 [ 322.727494][T20128] active_anon 288169984 [ 322.727494][T20128] inactive_file 0 08:42:16 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x81, 0x7, 0x5, 0x1}, 0x14a) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffd11, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x4}}}, 0x60) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000240)='`', &(0x7f00000008c0)=""/196}, 0x18) 08:42:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x4, 0x11, 0x6, 'queue0\x00', 0x7fff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000177000/0x1000)=nil, 0x1000, 0x6, 0x10010, r0, 0x10000000) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x1f) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000100), 0x4) r5 = getpgrp(0xffffffffffffffff) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r4, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) getresgid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r8, 0x0, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r9) r10 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) r11 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r12, 0x4070aea0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r13, 0x4070aea0, 0x0) r14 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, 0x0, 0x0) r15 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r16, 0x4070aea0, 0x0) r17 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r17, 0x107, 0x12, 0x0, 0x0) r18 = fcntl$getown(r17, 0x9) r19 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r20, 0x116, 0x7f, &(0x7f0000000100), 0x4) r21 = getpgrp(0xffffffffffffffff) r22 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r20, r20, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r20]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r23) r24 = syz_open_dev$sndtimer(&(0x7f00000006c0)='/dev/snd/timer\x00', 0x0, 0x400) r25 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r25, 0x107, 0x12, 0x0, 0x0) r26 = socket$caif_stream(0x25, 0x1, 0x5) r27 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/attr/exec\x00', 0x2, 0x0) r28 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r28, 0x107, 0x12, 0x0, 0x0) r29 = socket$inet6(0xa, 0x5, 0x20) r30 = getpgid(0xffffffffffffffff) r31 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r32 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r32, 0x116, 0x7f, &(0x7f0000000100), 0x4) r33 = getpgrp(0xffffffffffffffff) r34 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r32, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r31]}}, @cred={{0x1c, 0x1, 0x2, {r33, r34}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r32, r32, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r32]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="e5949b2c7b10fb2d17f784795ab08ccdddf3e510db63e0a86c3982b57316140e063c9227e8238217e0a71a1bc88ce728c2ab398ada04f889ac70de2adfa0fa38ba65fdb31411a282e89d6d113de4c31f8d6513c81ced57b8f889c8f9ea3732db131f43f983fca43fdd99b11c4b41a4f98fa4ab623118886ddb7bcd", 0x7b}, {&(0x7f0000000180)="82a2606d7931839f35f3318fa2688594224f4531560a6f86a3317ea915287ba98ff43f8fe65db4b6ccec667fc714190db4b6e927eb022f6d8d0685f7e683f77e0a5d7697e666b7924760ace269c247dba6dd22a89d530af3257dd1a0d5fca908976fddb921469eef5368ba27cd302053511460a708407945813a2303b2eff55d1ae45eac3747afeac456b42a340fe4fa5d7eb76db6b3abbec1a1af1357c54e07b8ed251293502103190fed5c8c8371", 0xaf}, {&(0x7f0000000240)="54caa7e241610168b31b18dfa2c2890dda919f3d6a785f3c05e4ce2e132c6af881dfed92cb83a49229aafd31cae1d5bdce95cd04f3caf43cebc502499fb947419dbafdcfba5a9af1295905351f5e2cb3ce1585c3de74e2cc5f4b0b36257443c613a5", 0x62}, {&(0x7f00000002c0)="a34c6c597416c922d780eb322806dcfbe4f7b5e5664f5cdc7ad87df3a57bc8f8405f7c7f08d082157fff0d35f4a7d5f42d73f74a807a709dffbca8aee1ea1739fa7934c7bf7568305e8b06bc5b89575893f33c4ca721fe17fee444b41865f5abdafb35c34025a0ce712e9b58fe2c5f47514ab054ad7504453bbfcc40ab1b0b7f608875bc699ed1b0c13a6fed018067b0b869d394ae16f793020efb521c9c05e2711789db5caabb961ed7f323dcbb4555ae996f", 0xb3}, {&(0x7f0000000380)="3945834e02cf6357c885e16cdf16464529719ea74f8d1d0b68a2c7b0bc89ad2458", 0x21}, {&(0x7f00000003c0)="b3b1b3a6a968d47260766d7b7660b3c74e7d30e2e5f33d727b994474cdc20686ee5e08a05fc8d7fe8f3d3e75ebd620adfe2b105930015525350ac68554aee6f70d5045f122c9539df03fad603a940e55eb9d379efec49d7f3c1531241cc4ba798fb1e056d8ed7d9b4f721776372020a21c1628136db66eeeabc46a28fbfd53aed0381365f8defbc571e662d09da8a7f323d49b7619ac78c662b48a543ead832817c344015bccd458d0a73b316d83", 0xae}, {&(0x7f0000000480)="632712d29dc6c03557252be5ad569f5d178a548b5bd5353a736aabc0002a72ebb474633af535dad2b1a88cca0fe833379a2c1d358a", 0x35}, {&(0x7f00000004c0)="73f9d017976068adae06ab06b24a37210a4a562a24cf1d5ebd43d0b626646860cfe173725f9a44d4c54404c7ac81e460bd02f1ec743c161c1824132446f4a62596b22317904c13617ffd450ad8271304730c6d881741182fdd19a225b4a5e84fe007f8503583a3c5a31e4ae5edbe8f89b641f7fff3db4ff3a69a0759595f8fa9961a67447af06d48a536a4354dcf4afa9a7e4e9bac63e6b5c23318c61103db481fda344bd27d3fe0f93eef61ddd5b1abd835beac178025e7c84f636e", 0xbc}], 0x8, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}, @rights={{0x28, 0x1, 0x1, [r10, r11, r12, r0, r13, r14]}}, @rights={{0x20, 0x1, 0x1, [r15, r0, 0xffffffffffffffff, r16]}}, @cred={{0x1c, 0x1, 0x2, {r18, r22, r23}}}, @rights={{0x2c, 0x1, 0x1, [r24, 0xffffffffffffffff, r0, r25, r26, r27, r28]}}, @rights={{0x14, 0x1, 0x1, [r29]}}, @cred={{0x1c, 0x1, 0x2, {r30, r34, r35}}}], 0x128, 0x4000c}, 0x240ac0d0) [ 322.727494][T20128] active_file 0 [ 322.727494][T20128] unevictable 0 [ 322.727494][T20128] slab_reclaimable 1622016 [ 322.727494][T20128] slab_unreclaimable 5271552 [ 322.727494][T20128] pgfault 15873 [ 322.727494][T20128] pgmajfault 0 [ 322.727494][T20128] workingset_refault 0 [ 322.727494][T20128] workingset_activate 0 [ 322.727494][T20128] workingset_nodereclaim 0 [ 322.727494][T20128] pgrefill 409 [ 322.727494][T20128] pgscan 474 [ 322.727494][T20128] pgsteal 70 [ 322.727494][T20128] pgactivate 330 08:42:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfb, 0x20, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0), 0x4) r3 = socket$kcm(0x2, 0x27, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r4, 0x4) r6 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xbfffffffffffffff, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/.yz0\xfe', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@in6, 0x80, 0x0, 0x263}, 0x200008c4) pipe(&(0x7f0000000440)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x100010, r5, 0x0) recvmsg(r2, &(0x7f0000000c00)={&(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0xfffffffffffffea0, &(0x7f0000000d00), 0x73e82230f3c96c1, &(0x7f0000000cc0)=""/25, 0x19}, 0x21) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000300)=0x3) close(r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000580)="d8a170724fdb88bbf2ec02eab86d30afbcb8fbc4b74d8a18a5717df26245e37fe376e7cec0f7b8c0dc46d9864bfd0278c4760d69d43de7b13a314682e45549fb110676fa0277d6d8ab7524deb4a5fc33d4b9d3983994bb4cf426c0fd1964b3d1e7014fb8b13501759124021f96b1d5ea521f2dedc29c32f32b3e9c5891301cb392d9c7c248414435e4ed1bfe4729fd38251d0e8bcb1904aea6e6689430038b775a31489b3d8078f6dd5e53024a7e8b9c696102a927a4aebf7d6e88e2b0e07ed097db2e01b66ece", 0xc7}, {&(0x7f0000000500)="86d60403d199ad5636c11c1b829d3d07f67f24b9dd6bc0cffad6568231004fd12e84becc11e476171fb242292f379113526155234d306914e05d6ca0", 0x3c}, {&(0x7f0000000680)="da1da0849d62c612e5363a2b10f81783df1939045f9005185f58c334b13157f58ce3bb77a689384f3bccb4ce8323ebd6739d2d32f5fe3de89a90e46ff2688cd7cd131215f25ba4f1007766db5f696191920bad170d67a112184017102d9261d54d4abdba56a0a12e59c77831f4d4bb4a4f27fb5f9d5cec647af90fce8b2fd2a883e46ad9c7555bbc6abaed01d9fdd29938dc98b051e4f946ef6ec3855de2f33daf0a3f217d90c4c2922bc8203b03155abf1d2e78d12d28601179637dbc2e245db3f9501d191066", 0xc7}, {&(0x7f0000000780)="31cb61fc8d3a1e35b09c535b32c363cef647bbc6386252abec19ab16763fa08276c5763a7fd1ae56e64a8dab6967f17b31b73af952e7c0ef71404b8b7610379a8af181f8a43c35ffed6910179e290789f4b852dde1720508852a3902782f8c2697a0456d14db73e700537f0ddf722623516d9d5a9d69a11f875b", 0x7a}, {&(0x7f0000000800)="67efabba17a2f588ab01d726e395b934456272c742641a5c4e947cc31b48bd245a0dddf7659b4638d3533fad029dd583171527876fe9b4b10224d573f86116216371e3cd4db53c6a04ee05c8bf23c267613264bd65d7b2a848bd16913dad84b8b21988a75840aad61afead24a3d54f78c6114adcfd22b0943a5ddfb3df4ebb80488dff3b00b0af5962f90c8a8139cca3405177c3720f96e17a561d7dda998c8050d2ee9a104c696d1fcae7dbf0a42371a7873cbff73d6c18de25b1a165d62a15cb699ba2d565f976c070a2a051bf1c23513e3951f8c03a31e1c20b03f03aaac5f460c8a5", 0xe4}], 0x5, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x750a}}], 0x18}, 0x800) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 08:42:16 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open(0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000)={0x5, 0xffffffffffffffff, [{0x100, 0x0, 0x100}, {0x4, 0x0, 0x3}, {0x7fff, 0x0, 0x103}, {0x1, 0x0, 0x69}, {0x961, 0x0, 0xf34}]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001000)=""/142) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x100a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 08:42:16 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x11, @multicast1, 0x4e22, 0x1, 'sed\x00', 0x2, 0x4, 0x12}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) fcntl$setflags(r2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x16c, 0x0, 0x310, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdfc7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd09}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x100000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r3, &(0x7f00000017c0), 0x333, 0x0) [ 322.977781][T20128] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14305,uid=0 [ 323.043610][T20128] Memory cgroup out of memory: Killed process 14305 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 323.073385][T20406] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 08:42:17 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffff8, 0x10e00) read(r0, &(0x7f0000000080)=""/185, 0xb9) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 08:42:17 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x401a40) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x6, 0x9, 0xffffffffffff676b, "cb82d96d8e8b"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x141482, 0x0) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x30, 0x3, 0x5}, 0x7}}, 0x18) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1) r2 = fcntl$getown(0xffffffffffffffff, 0x9) kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r0, &(0x7f0000000100)={r1, r0, 0xa5d4}) r3 = dup2(r0, r1) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon0\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote={[], 0x1}, 0x6, 'rose0\x00'}) eventfd2(0x0, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x400000, 0x0) r6 = eventfd(0xbb5) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000300)=0xeb9d69beca3f2472) getsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f00000003c0)={0x0, 0x2, [0x80000001, 0x400, 0xf5b, 0x5, 0x7, 0x1, 0xfffffffffffffffe, 0x1]}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x191084, 0x0) ioctl$PPPIOCGDEBUG(r7, 0x80047441, &(0x7f0000000440)) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_EDID(r8, 0xc0285629, &(0x7f0000000500)={0x0, 0xffffffff, 0xffffffff, [], &(0x7f00000004c0)=0x6}) syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x10000, 0x4000c3) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100000001) msgget(0x2, 0x2a2) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)={'gretap0\x00', 0xe8, 0x3}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x15, 0xf9}, 0x7) fstatfs(r5, &(0x7f00000006c0)=""/238) r9 = fcntl$dupfd(0xffffffffffffffff, 0x80c, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x187, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000840)={0x14, 0x88, 0xfa00, {r10, 0x1c, 0x0, @in={0x2, 0x4e20, @loopback}}}, 0x90) [ 323.411771][T20389] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 323.492940][T20389] CPU: 0 PID: 20389 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 323.500883][T20389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.510944][T20389] Call Trace: [ 323.514243][T20389] dump_stack+0x172/0x1f0 [ 323.518577][T20389] dump_header+0x10b/0x82d [ 323.523000][T20389] ? oom_kill_process+0x94/0x3f0 [ 323.527941][T20389] oom_kill_process.cold+0x10/0x15 [ 323.533062][T20389] out_of_memory+0x79a/0x12c0 [ 323.537746][T20389] ? lock_downgrade+0x920/0x920 08:42:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xc) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000380)={0x40000000000002df, &(0x7f00000003c0)=[{}, {}, {}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x80000000, 0x2, 0x120000000000, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x1f, 0x9, 0xffffffffffffff78, 0x9, 0xfffffffe}) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000400)=0x280, 0x4) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x50, r5, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800011}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r6, @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000808) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000500)={0x2b, @remote, 0x4e22, 0x2, 'sh\x00', 0x4, 0x6, 0x20}, 0x2c) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @rand_addr=0xf8}}, 0x6ceb, 0xfffffffffffffff9, 0x3, 0x7, 0xf6}, 0x98) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000280)={0x9, @raw_data="93d398e025aaaf73a20c304095eb1d004f7ae631ed1b9bfdd5c62c0d2b8f36ecd3bde7a20d76bae67b3d61eeef845bfb0da6c8cfebbaaeb2e1ebb6e71f7d2cbe638b9287daedd1739ec42e9b50c83d61fbb335e38a9e572f7d2f26a4df3bf9b49dd4805c952de4c49f696bcf0c2511d785721a3aa3c7cd06a913862efd936ac42e1436c82f20f19df77c7b8564ad926423359cbe5419351644cf11b1d294b318bb118c38f46eb4d2eddb6e42254d1bd1d3bf1e2cecc18603aefd79d2e5780ab3bd293e68ef0a0387"}) 08:42:17 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffffffc, 0x40) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000005c0)={0x3, 0x8000, 0xfffffffffffeffff, 0xfffffffffffffc00, [], [], [], 0x50d0, 0x10001, 0x10, 0x7fffffff, "1fc76a00401648492f457b86f42d5843"}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000100), 0x4) r5 = getpgrp(0xffffffffffffffff) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r4, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r7) setgroups(0x4000000000000063, &(0x7f0000000580)=[r7, 0x0]) getgroups(0x1, &(0x7f0000000080)=[r7]) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x2000, {0x2, 0x4, 0x4}, 0x16b, r6, r8, 0x400, 0x7fff, 0x4, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x1, 0x9, 0x7ff, 0x4, 0x40, 0x0, 0x6}}, 0xa0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r9, 0xc008240a, &(0x7f00000002c0)={0x1, 0x0, [0x0]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r10, 0x4070aea0, 0x0) write$P9_RSTAT(r10, &(0x7f0000000380)={0x5f, 0x7d, 0x2, {0x0, 0x58, 0x8, 0xba66, {0x80, 0x4, 0x6}, 0x80000000, 0x3bd, 0x2, 0x6, 0xf, 'trustedvboxnet1', 0xb, '/dev/audio\x00', 0x0, '', 0xb, '/dev/audio\x00'}}, 0x5f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 323.542604][T20389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.548849][T20389] ? oom_killer_disable+0x280/0x280 [ 323.554057][T20389] ? __kasan_check_read+0x11/0x20 [ 323.559091][T20389] mem_cgroup_out_of_memory+0x1d8/0x240 [ 323.564642][T20389] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 323.570284][T20389] ? do_raw_spin_unlock+0x57/0x270 [ 323.575405][T20389] ? _raw_spin_unlock+0x2d/0x50 [ 323.580264][T20389] try_charge+0xf4b/0x1440 [ 323.584694][T20389] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 323.590222][T20389] ? percpu_ref_tryget_live+0x111/0x290 [ 323.595752][T20389] ? get_mem_cgroup_from_mm+0x16/0x320 [ 323.601199][T20389] ? get_mem_cgroup_from_mm+0x156/0x320 [ 323.606727][T20389] mem_cgroup_try_charge+0x136/0x590 [ 323.612007][T20389] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 323.618233][T20389] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 323.623861][T20389] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 323.629844][T20389] ? defrag_store+0x360/0x360 [ 323.634515][T20389] ? lock_downgrade+0x920/0x920 [ 323.639353][T20389] ? swp_swapcount+0x540/0x540 [ 323.644110][T20389] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 323.650013][T20389] ? __kasan_check_read+0x11/0x20 [ 323.655027][T20389] ? do_raw_spin_unlock+0x57/0x270 [ 323.660138][T20389] do_huge_pmd_wp_page+0x806/0x2270 [ 323.665334][T20389] ? __split_huge_pmd+0x27e0/0x27e0 [ 323.670519][T20389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.676833][T20389] ? debug_smp_processor_id+0x3c/0x214 [ 323.682274][T20389] ? debug_smp_processor_id+0x3c/0x214 [ 323.687712][T20389] ? pmd_val+0x85/0x100 [ 323.691856][T20389] ? add_mm_counter_fast.part.0+0x40/0x40 [ 323.697563][T20389] __handle_mm_fault+0x14cf/0x3f20 [ 323.702655][T20389] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 323.708179][T20389] ? __kasan_check_read+0x11/0x20 [ 323.713189][T20389] ? trace_hardirqs_on+0x67/0x240 [ 323.718196][T20389] handle_mm_fault+0x1b5/0x6b0 [ 323.722941][T20389] __do_page_fault+0x536/0xdd0 [ 323.727691][T20389] do_page_fault+0x38/0x590 [ 323.732178][T20389] page_fault+0x39/0x40 [ 323.736341][T20389] RIP: 0033:0x400644 [ 323.740216][T20389] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 c1 54 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b [ 323.759809][T20389] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 323.765854][T20389] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 323.773805][T20389] RDX: 0000000000000000 RSI: 000000002025c000 RDI: 0000000000000000 [ 323.781754][T20389] RBP: 0000000000760948 R08: 0000000000000000 R09: 0000000000000000 [ 323.789702][T20389] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 323.797661][T20389] R13: 000000000000012c R14: 0000000000760950 R15: fffffffffffffffe [ 323.809597][T20389] memory: usage 307200kB, limit 307200kB, failcnt 2488 [ 323.824872][T20389] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 323.842541][T20389] Memory cgroup stats for /syz4: [ 323.842640][T20389] anon 290385920 [ 323.842640][T20389] file 184320 [ 323.842640][T20389] kernel_stack 2883584 [ 323.842640][T20389] slab 7028736 [ 323.842640][T20389] sock 0 [ 323.842640][T20389] shmem 0 [ 323.842640][T20389] file_mapped 0 [ 323.842640][T20389] file_dirty 135168 [ 323.842640][T20389] file_writeback 0 [ 323.842640][T20389] anon_thp 272629760 [ 323.842640][T20389] inactive_anon 0 [ 323.842640][T20389] active_anon 290353152 [ 323.842640][T20389] inactive_file 0 [ 323.842640][T20389] active_file 0 [ 323.842640][T20389] unevictable 0 [ 323.842640][T20389] slab_reclaimable 1622016 [ 323.842640][T20389] slab_unreclaimable 5406720 [ 323.842640][T20389] pgfault 15972 [ 323.842640][T20389] pgmajfault 0 [ 323.842640][T20389] workingset_refault 0 [ 323.842640][T20389] workingset_activate 0 [ 323.842640][T20389] workingset_nodereclaim 0 [ 323.842640][T20389] pgrefill 409 [ 323.842640][T20389] pgscan 474 [ 323.842640][T20389] pgsteal 70 [ 323.842640][T20389] pgactivate 330 [ 323.941635][T20389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20389,uid=0 [ 323.966324][T20406] syz-executor.3 (20406) used greatest stack depth: 22432 bytes left 08:42:17 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0xfffffffffffffe7d) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) r2 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x5}) sendto$inet(r0, &(0x7f0000000e80)="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", 0x480, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "d2a2fb796473ff76", "e2488ce9dbb432c02dc282d4bbc00fc3", "0a42a94e", "0cfb8725ed0a0f2b"}, 0x28) poll(&(0x7f0000000180), 0x48, 0x81) [ 323.984431][T20389] Memory cgroup out of memory: Killed process 20389 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:35784kB, shmem-rss:0kB [ 324.100276][ T1057] oom_reaper: reaped process 20389 (syz-executor.4), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 08:42:17 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x1040) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:17 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000040)) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x2000008, 0x3}, 0x13d) 08:42:17 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) dup3(r3, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) write$rfkill(r4, &(0x7f0000000140)={0xf7f2, 0x3, 0x0, 0x1}, 0x8) 08:42:17 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101001, 0x140) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000200)={0x3, 0x70, 0x5, 0x80, 0x8, 0x2, 0x0, 0x8, 0x10000, 0x5, 0x401, 0x1, 0x5, 0x8, 0x0, 0x7ff, 0x9, 0x1, 0xfffffffffffffffc, 0x6, 0x1, 0x3ff, 0x2, 0x8a0, 0x0, 0x0, 0xa4, 0x100, 0x4, 0x217, 0x8000, 0x9d6e, 0x0, 0x8000, 0x8, 0x8000, 0x5d, 0xffffffff, 0x0, 0x2, 0x5cbe6759559ae3fe, @perf_bp={&(0x7f0000000140), 0x8}, 0x40, 0x1, 0x1, 0x0, 0x5, 0x80, 0x9}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 08:42:17 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) inotify_add_watch(r3, &(0x7f00000003c0)='./file0\x00', 0x200) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000000000000000000000000000d500000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/213], @ANYBLOB="000000000000000000300000000000008000000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/128], @ANYBLOB="000000000000000001000000000000006800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/104], @ANYBLOB="00000000000000000200000000000000ed00000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/237], @ANYBLOB="000000000000000000001000"/24, @ANYPTR=&(0x7f00000003c0)=ANY=[], @ANYBLOB="000000000000000000280000000000001e00000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/30], @ANYBLOB="000000000000000000d00000000000002900000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/41], @ANYBLOB="000000000000000008300100000000009900000000000000", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYBLOB="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"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00W\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/87], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 08:42:17 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000100), 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40085400, 0x4001c2) 08:42:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r3, 0x0, 0x14, &(0x7f0000000280)='appraise_type=imasig', 0xffffffffffffffff}, 0x30) ptrace$getsig(0x4202, r4, 0xd4, &(0x7f0000000300)) sendmmsg(r1, &(0x7f00000092c0), 0x105, 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x1000, &(0x7f0000000200)={[{@nfs_export_off='nfs_export=off'}], [{@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r5}}, {@fowner_eq={'fowner', 0x3d, r6}}]}) [ 324.224143][T20633] block nbd0: shutting down sockets 08:42:18 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/68, &(0x7f0000000000)=0x44) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x3a, @multicast1, 0x4e21, 0x3, 'none\x00', 0xc, 0x81, 0x67}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0x3, 0x8000, 0x100000000, 0x2}}, 0x44) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) r3 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000600)='4', 0x4100) [ 324.337323][T20721] block nbd0: shutting down sockets 08:42:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) ioctl(r0, 0x200001000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") r2 = socket$inet(0x2, 0x100000000805, 0x0) listen(r2, 0x40000004) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000000000)=0xfffffe75) 08:42:18 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20000000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r4, 0x0, [], r2, r3, 0x5, 0x2}, 0x3c) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x69466ae0b82b7556, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0xffffffff, 0x4, 0xffffffff, 0x80, r1, 0x7c, [], r2, r5, 0x2, 0x1}, 0x3c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) r7 = semget$private(0x0, 0x2, 0x0) semop(r7, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(r7, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000200)=""/188) write$FUSE_GETXATTR(r6, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x3}}, 0x18) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) write$P9_RAUTH(r6, &(0x7f00000002c0)={0x14, 0x67, 0x1, {0x12, 0x1, 0x6}}, 0x14) [ 324.508695][T20659] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 324.535618][T20659] CPU: 1 PID: 20659 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 324.543552][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.553610][T20659] Call Trace: [ 324.556902][T20659] dump_stack+0x172/0x1f0 [ 324.561318][T20659] dump_header+0x10b/0x82d [ 324.565738][T20659] ? oom_kill_process+0x94/0x3f0 [ 324.570677][T20659] oom_kill_process.cold+0x10/0x15 [ 324.575787][T20659] out_of_memory+0x79a/0x12c0 [ 324.580473][T20659] ? lock_downgrade+0x920/0x920 [ 324.585351][T20659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.585369][T20659] ? oom_killer_disable+0x280/0x280 [ 324.596801][T20659] ? __kasan_check_read+0x11/0x20 [ 324.596820][T20659] mem_cgroup_out_of_memory+0x1d8/0x240 [ 324.607599][T20659] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 324.613238][T20659] ? do_raw_spin_unlock+0x57/0x270 [ 324.618364][T20659] ? _raw_spin_unlock+0x2d/0x50 [ 324.623234][T20659] try_charge+0xf4b/0x1440 [ 324.623249][T20659] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 324.623268][T20659] ? percpu_ref_tryget_live+0x111/0x290 [ 324.638812][T20659] ? get_mem_cgroup_from_mm+0x16/0x320 [ 324.644277][T20659] ? get_mem_cgroup_from_mm+0x156/0x320 [ 324.649827][T20659] mem_cgroup_try_charge+0x136/0x590 [ 324.655113][T20659] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 324.661358][T20659] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 324.666995][T20659] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 324.672960][T20659] ? account_page_redirty+0x550/0x550 [ 324.678338][T20659] ? defrag_store+0x360/0x360 [ 324.682997][T20659] ? lock_downgrade+0x920/0x920 [ 324.687832][T20659] ? swp_swapcount+0x540/0x540 [ 324.692585][T20659] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 324.698460][T20659] ? __kasan_check_read+0x11/0x20 [ 324.703481][T20659] ? do_raw_spin_unlock+0x57/0x270 [ 324.708578][T20659] do_huge_pmd_wp_page+0x806/0x2270 [ 324.713767][T20659] ? __split_huge_pmd+0x27e0/0x27e0 [ 324.718960][T20659] ? balance_dirty_pages+0x2b80/0x2b80 [ 324.724403][T20659] ? ext4_set_page_dirty+0x2b7/0x480 [ 324.729673][T20659] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 324.735987][T20659] ? pmd_val+0x85/0x100 [ 324.740122][T20659] ? add_mm_counter_fast.part.0+0x40/0x40 [ 324.745840][T20659] ? fault_dirty_shared_page.isra.0+0x18c/0x200 [ 324.752060][T20659] __handle_mm_fault+0x14cf/0x3f20 [ 324.757156][T20659] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 324.762678][T20659] ? __kasan_check_read+0x11/0x20 [ 324.767686][T20659] ? trace_hardirqs_on+0x67/0x240 [ 324.772695][T20659] handle_mm_fault+0x1b5/0x6b0 [ 324.777449][T20659] __do_page_fault+0x536/0xdd0 [ 324.782269][T20659] do_page_fault+0x38/0x590 [ 324.786759][T20659] page_fault+0x39/0x40 [ 324.790890][T20659] RIP: 0033:0x4006c4 08:42:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) 08:42:18 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000007c0)={[0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008914, &(0x7f0000000100)="0edca50d5e0bcfe47bf070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ac1414aa00000000070000000100000000ac1414aaac1414"], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 324.794771][T20659] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 324.814354][T20659] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 324.820402][T20659] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 324.828352][T20659] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 324.836302][T20659] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 324.844252][T20659] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 324.852210][T20659] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 324.917647][ T26] audit: type=1800 audit(1567759338.686:55): pid=20759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16539 res=0 [ 324.943835][T20659] memory: usage 307200kB, limit 307200kB, failcnt 2752 [ 324.953166][T20659] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 324.980757][T20659] Memory cgroup stats for /syz4: [ 324.981696][T20659] anon 290324480 [ 324.981696][T20659] file 184320 [ 324.981696][T20659] kernel_stack 2949120 [ 324.981696][T20659] slab 7028736 [ 324.981696][T20659] sock 0 [ 324.981696][T20659] shmem 0 [ 324.981696][T20659] file_mapped 0 [ 324.981696][T20659] file_dirty 135168 [ 324.981696][T20659] file_writeback 0 [ 324.981696][T20659] anon_thp 274726912 [ 324.981696][T20659] inactive_anon 0 [ 324.981696][T20659] active_anon 290328576 [ 324.981696][T20659] inactive_file 0 [ 324.981696][T20659] active_file 0 [ 324.981696][T20659] unevictable 0 [ 324.981696][T20659] slab_reclaimable 1622016 [ 324.981696][T20659] slab_unreclaimable 5406720 [ 324.981696][T20659] pgfault 16038 [ 324.981696][T20659] pgmajfault 0 [ 324.981696][T20659] workingset_refault 0 [ 324.981696][T20659] workingset_activate 0 [ 324.981696][T20659] workingset_nodereclaim 0 [ 324.981696][T20659] pgrefill 409 [ 324.981696][T20659] pgscan 474 [ 324.981696][T20659] pgsteal 70 [ 324.981696][T20659] pgactivate 330 [ 325.081837][T20659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20510,uid=0 [ 325.097680][T20659] Memory cgroup out of memory: Killed process 20510 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 325.112989][ T1057] oom_reaper: reaped process 20510 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 08:42:19 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:19 executing program 3: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/snmp\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='mo}nts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r5, 0xfffffffffffff800, 0x20, 0x9, 0x1}, &(0x7f0000000140)=0x18) sendfile(r4, r3, &(0x7f0000000180)=0x74000000, 0x80000000) 08:42:19 executing program 1: r0 = gettid() r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffff000, 0x20000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x28830825f5dcb255}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@int=0x7, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:42:19 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = gettid() tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/dev\x00') ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x401, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x7, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) tkill(r1, 0x1000000000016) 08:42:19 executing program 5: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$void(r1, 0x3cd261f7c2470f41) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x5f, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000180007041dfffd946f6105000260000a1f000007002808000800080004001000", 0x24}], 0x1}, 0x800c0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000001c0)="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") [ 325.347974][T20887] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 08:42:19 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000200)={{}, 0x4, 0x7ff, 0x7}, 0x18) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f0000000540)=0x1e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000100)='syz1\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$tipc(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1, 0xbffff000) write$P9_RXATTRWALK(r5, &(0x7f0000000580)={0xf, 0x1f, 0x1, 0x7fffffff}, 0xf) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000500)={0x1d1bc}, 0xfe90) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') socket$inet(0x10, 0x2, 0x0) 08:42:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0xfffffffffffffffd, @rand_addr="6e080000000000000080b5167329292c"}]}, &(0x7f0000000100)=0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x7a, &(0x7f0000000080)={r1, 0x0, 0x30, 0xfeffffff}, &(0x7f0000000140)=0xfffffffffffffec0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f00000001c0)="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", 0x1000) 08:42:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0xff74, 0x7, 0x2, {{0x10, '%(eth1vmnet0GPLD'}, 0x4}}, 0x1d) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x100807, 0x0, 0xffffffff}}) [ 325.635971][T20893] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:42:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x800000008, 0x10000, 0x8000000001, 0x1}, 0x3c) dup3(r0, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000001780), &(0x7f0000001740), 0x4000}, 0x20) [ 325.735614][T20893] CPU: 0 PID: 20893 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 325.743554][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.753608][T20893] Call Trace: [ 325.753629][T20893] dump_stack+0x172/0x1f0 [ 325.753646][T20893] dump_header+0x10b/0x82d [ 325.753656][T20893] ? oom_kill_process+0x94/0x3f0 [ 325.753668][T20893] oom_kill_process.cold+0x10/0x15 [ 325.753680][T20893] out_of_memory+0x79a/0x12c0 [ 325.753693][T20893] ? lock_downgrade+0x920/0x920 [ 325.753709][T20893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.753721][T20893] ? oom_killer_disable+0x280/0x280 [ 325.753734][T20893] ? __kasan_check_read+0x11/0x20 [ 325.753750][T20893] mem_cgroup_out_of_memory+0x1d8/0x240 [ 325.753769][T20893] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 325.775783][T20893] ? do_raw_spin_unlock+0x57/0x270 [ 325.785267][T20893] ? _raw_spin_unlock+0x2d/0x50 [ 325.785280][T20893] try_charge+0xf4b/0x1440 [ 325.785302][T20893] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 325.785316][T20893] ? percpu_ref_tryget_live+0x111/0x290 [ 325.785328][T20893] ? get_mem_cgroup_from_mm+0x16/0x320 [ 325.785347][T20893] ? get_mem_cgroup_from_mm+0x156/0x320 [ 325.823556][T20893] mem_cgroup_try_charge+0x136/0x590 [ 325.823571][T20893] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 325.823584][T20893] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 325.823598][T20893] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 325.823618][T20893] ? defrag_store+0x360/0x360 [ 325.877867][T20893] ? lock_downgrade+0x920/0x920 [ 325.877893][T20893] ? swp_swapcount+0x540/0x540 [ 325.887475][T20893] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 325.893377][T20893] ? __kasan_check_read+0x11/0x20 [ 325.898411][T20893] ? do_raw_spin_unlock+0x57/0x270 [ 325.903551][T20893] do_huge_pmd_wp_page+0x806/0x2270 [ 325.908759][T20893] ? __split_huge_pmd+0x27e0/0x27e0 [ 325.914045][T20893] ? do_wp_page+0x4a1/0x14d0 [ 325.918643][T20893] ? pmd_val+0x85/0x100 [ 325.922806][T20893] ? add_mm_counter_fast.part.0+0x40/0x40 [ 325.928535][T20893] __handle_mm_fault+0x14cf/0x3f20 [ 325.933655][T20893] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 325.939200][T20893] ? __kasan_check_read+0x11/0x20 [ 325.944234][T20893] ? trace_hardirqs_on+0x67/0x240 [ 325.949267][T20893] handle_mm_fault+0x1b5/0x6b0 [ 325.954041][T20893] __do_page_fault+0x536/0xdd0 [ 325.958810][T20893] do_page_fault+0x38/0x590 [ 325.963323][T20893] page_fault+0x39/0x40 [ 325.967479][T20893] RIP: 0033:0x4006c4 [ 325.971371][T20893] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 325.990973][T20893] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 325.997043][T20893] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 326.005049][T20893] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 326.013027][T20893] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 326.021008][T20893] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 326.028987][T20893] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:19 executing program 5: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00') r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d0000180000000000000000df0000040004000000000000000000000000000000000000000000000000000000120000000300000000000036fa98f5e7000000060000000000000000000000000000000000000000000001000000000000000025e6f70f2add3f87ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff000000"], 0xc0}}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x806) ioctl$FS_IOC_FSGETXATTR(r1, 0x8108551b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) timerfd_create(0x9, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000) close(r1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0xffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x24a289cb6430fc0}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000640), r2, 0x2}}, 0x18) 08:42:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x1000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x1}, 0x4) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x8000000, "6fc6b16e000000e100", 0x3, 0x1}) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58) [ 326.223358][T20893] memory: usage 307200kB, limit 307200kB, failcnt 2773 [ 326.231515][T20893] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 326.269154][T20893] Memory cgroup stats for /syz4: [ 326.269251][T20893] anon 290402304 [ 326.269251][T20893] file 184320 [ 326.269251][T20893] kernel_stack 2949120 [ 326.269251][T20893] slab 7163904 [ 326.269251][T20893] sock 0 [ 326.269251][T20893] shmem 0 [ 326.269251][T20893] file_mapped 0 [ 326.269251][T20893] file_dirty 135168 [ 326.269251][T20893] file_writeback 0 [ 326.269251][T20893] anon_thp 272629760 [ 326.269251][T20893] inactive_anon 0 [ 326.269251][T20893] active_anon 290406400 [ 326.269251][T20893] inactive_file 0 [ 326.269251][T20893] active_file 0 [ 326.269251][T20893] unevictable 0 [ 326.269251][T20893] slab_reclaimable 1622016 [ 326.269251][T20893] slab_unreclaimable 5541888 [ 326.269251][T20893] pgfault 16137 [ 326.269251][T20893] pgmajfault 0 [ 326.269251][T20893] workingset_refault 0 [ 326.269251][T20893] workingset_activate 0 [ 326.269251][T20893] workingset_nodereclaim 0 [ 326.269251][T20893] pgrefill 409 [ 326.269251][T20893] pgscan 474 [ 326.269251][T20893] pgsteal 70 [ 326.269251][T20893] pgactivate 330 [ 326.623856][T20893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14168,uid=0 [ 326.656304][T20893] Memory cgroup out of memory: Killed process 14168 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 326.691675][T20938] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 326.738491][T20938] CPU: 0 PID: 20938 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 326.746428][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.756485][T20938] Call Trace: [ 326.759792][T20938] dump_stack+0x172/0x1f0 [ 326.764128][T20938] dump_header+0x10b/0x82d [ 326.768547][T20938] ? oom_kill_process+0x94/0x3f0 [ 326.773486][T20938] oom_kill_process.cold+0x10/0x15 [ 326.778605][T20938] out_of_memory+0x79a/0x12c0 [ 326.783291][T20938] ? lock_downgrade+0x920/0x920 [ 326.788152][T20938] ? oom_killer_disable+0x280/0x280 [ 326.793351][T20938] ? __kasan_check_read+0x11/0x20 [ 326.798383][T20938] mem_cgroup_out_of_memory+0x1d8/0x240 [ 326.803943][T20938] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 326.809582][T20938] ? do_raw_spin_unlock+0x57/0x270 [ 326.814704][T20938] ? _raw_spin_unlock+0x2d/0x50 [ 326.819561][T20938] try_charge+0xa2d/0x1440 [ 326.823998][T20938] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 326.829556][T20938] ? get_mem_cgroup_from_mm+0x139/0x320 [ 326.835105][T20938] ? __kasan_check_read+0x11/0x20 [ 326.840139][T20938] ? lock_downgrade+0x920/0x920 [ 326.845009][T20938] ? percpu_ref_tryget_live+0x111/0x290 [ 326.850561][T20938] __memcg_kmem_charge_memcg+0x71/0xf0 [ 326.856023][T20938] ? memcg_kmem_put_cache+0x50/0x50 [ 326.861228][T20938] ? get_mem_cgroup_from_mm+0x156/0x320 [ 326.866782][T20938] __memcg_kmem_charge+0x13a/0x3a0 [ 326.871898][T20938] __alloc_pages_nodemask+0x4f4/0x900 [ 326.877272][T20938] ? __alloc_pages_slowpath+0x2520/0x2520 [ 326.883000][T20938] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 326.889257][T20938] alloc_pages_current+0x107/0x210 [ 326.894415][T20938] pte_alloc_one+0x1b/0x1a0 [ 326.898921][T20938] __handle_mm_fault+0x34d7/0x3f20 [ 326.904042][T20938] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 326.909600][T20938] ? __kasan_check_read+0x11/0x20 [ 326.914634][T20938] ? trace_hardirqs_on+0x67/0x240 [ 326.919668][T20938] handle_mm_fault+0x1b5/0x6b0 [ 326.924449][T20938] __do_page_fault+0x536/0xdd0 [ 326.929212][T20938] ? page_fault+0x16/0x40 [ 326.933547][T20938] do_page_fault+0x38/0x590 08:42:20 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x3f00) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:20 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)={0x3, 0x7fff, 0xb1a6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x1, 0x200a00) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x800) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000140)={0x2, 0xfffffffffffff001}) 08:42:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='/dev/binder#\x00'], &(0x7f0000000200)=[&(0x7f0000000180)='\xbc\'\xa0\x00', &(0x7f00000001c0)='/dev/binder#\x00']) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000547000/0x3000)=nil, &(0x7f0000b14000/0x2000)=nil, &(0x7f000074d000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000363000/0x4000)=nil, &(0x7f0000300000/0x4000)=nil, &(0x7f0000b78000/0x1000)=nil, &(0x7f000030b000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000b40000/0x200000)=nil, &(0x7f0000300000/0x1000)=nil, 0x0}, 0x68) 08:42:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x7530}, 0x10) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x0) sendfile(r0, r2, 0x0, 0x20020103000007) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000000c0)={0x10}) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x100100, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) 08:42:20 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={[{@nobarrier='nobarrier'}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x8}, 0x28, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x82) 08:42:20 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r3, 0x101, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x3}]}, 0x1c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) pidfd_send_signal(r1, 0x2, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/150, 0x96) [ 326.938053][T20938] page_fault+0x39/0x40 [ 326.942207][T20938] RIP: 0033:0x459879 [ 326.946136][T20938] Code: Bad RIP value. [ 326.950193][T20938] RSP: 002b:00007efc99660c78 EFLAGS: 00010246 [ 326.956253][T20938] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000459879 [ 326.964223][T20938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.972189][T20938] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.980157][T20938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 326.988124][T20938] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 327.023826][T20938] memory: usage 303832kB, limit 307200kB, failcnt 2773 [ 327.027908][T21054] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 327.033182][T20938] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 327.058714][T21053] debugfs: File '21048' in directory 'proc' already present! [ 327.063610][T20938] Memory cgroup stats for /syz4: [ 327.063705][T20938] anon 288260096 [ 327.063705][T20938] file 184320 [ 327.063705][T20938] kernel_stack 2949120 [ 327.063705][T20938] slab 7163904 [ 327.063705][T20938] sock 0 [ 327.063705][T20938] shmem 0 [ 327.063705][T20938] file_mapped 0 [ 327.063705][T20938] file_dirty 135168 [ 327.063705][T20938] file_writeback 0 [ 327.063705][T20938] anon_thp 268435456 [ 327.063705][T20938] inactive_anon 0 [ 327.063705][T20938] active_anon 288264192 [ 327.063705][T20938] inactive_file 0 [ 327.063705][T20938] active_file 0 [ 327.063705][T20938] unevictable 0 [ 327.063705][T20938] slab_reclaimable 1622016 [ 327.063705][T20938] slab_unreclaimable 5541888 [ 327.063705][T20938] pgfault 16137 [ 327.063705][T20938] pgmajfault 0 08:42:20 executing program 5: socket$xdp(0x2c, 0x3, 0x0) [ 327.063705][T20938] workingset_refault 0 [ 327.063705][T20938] workingset_activate 0 [ 327.063705][T20938] workingset_nodereclaim 0 [ 327.063705][T20938] pgrefill 409 [ 327.063705][T20938] pgscan 474 [ 327.063705][T20938] pgsteal 70 [ 327.063705][T20938] pgactivate 330 [ 327.079899][T21055] hfsplus: unable to find HFS+ superblock [ 327.197258][T21117] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 327.199157][T20938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14140,uid=0 08:42:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/18, 0x12, 0x7e, &(0x7f00000000c0)={r1, r2+10000000}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") gettid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x2) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000140)='3ysD\xb7cal') r5 = socket$l2tp(0x18, 0x1, 0x1) dup2(r4, r5) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xdbf0104943beb36a, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x8) 08:42:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = dup3(r1, r2, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x40) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8, 0x0, r3, 0x0}]) [ 327.252654][T20938] Memory cgroup out of memory: Killed process 14140 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:21 executing program 3: r0 = epoll_create1(0x0) epoll_create1(0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='trusted.ovdrlay.nlink\x10', &(0x7f0000000100)={'L-', 0x7f}, 0x28, 0x1) close(r0) openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0xa2601, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 08:42:21 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:21 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff00000000449ab3da7be934f95c02f400000000850000002c000000d500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="020043d05d25b666cd783f4b8e1c", 0x0, 0xf0}, 0x28) r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12070100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0000002bbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8c000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x100, 0x0) ioctl$VT_RELDISP(r2, 0x5605) 08:42:21 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000280)=@nl=@unspec, 0x368b754f9642b5ed, &(0x7f0000000080)=[{&(0x7f0000000340)="2af80000", 0x4}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0xba87242ce506a275, 0x0, @in6={0xa, 0x4e20, 0x80000001, @empty, 0x9}}}, 0x90) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, &(0x7f0000000440)="dc648fa99a50580ea75b7eebf5b64e67130d81be77695f8b84de93db1add38cc8ed8f3d5cc6fe4aa6c1039ca4c5da5fe289325d516e755ae5d14bbc2f94bb4d25b5832fc58a81b4af7a3cfc837ea0651331d6bea472f4e24d271eb4ac81d5d90650b06712b0d0d50d82ca209bb7ab72248d31ca43ede0fd7d31a9d0fe552b1683bfd3d21a4afeb0656433869a4cab3a666994c0e9dd4a50841fb3a49add7df049f53f844") setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x4000, 0x0) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000300)={0x100, 0x8001}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000200)={0x1c, 0x2, 0x409, 0x4}, 0x10) r7 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8, 0x1040) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) close(r3) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{}]}) ioctl$SIOCNRDECOBS(r7, 0x89e2) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000400)={{0x3ff, 0x0, 0x6, 0x7225, 0x5, 0x5}, 0x7b}) 08:42:21 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x4000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 327.493225][T21055] hfsplus: unable to find HFS+ superblock 08:42:21 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={0x0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000100)={r4, &(0x7f00000000c0)=""/26}) keyctl$invalidate(0x15, r1) 08:42:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) r2 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff92a4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x48000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07f02a0000000100ff0722000000450001070300001419001a00120002000d0001000a002500"/57, 0x39}], 0x1) write$binfmt_elf32(r4, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xf236, 0x5, 0x40008, 0x4, 0x9, 0x3, 0x3e, 0xffffffffffff989f, 0x57, 0x38, 0x33e, 0x5, 0x1, 0x20, 0x2, 0x400, 0xcb, 0x7f}, [{0x6, 0x100000000, 0x2fca, 0x1, 0xffffffff, 0x7, 0xffff}], "d78565dbd6beb09b3dc65e8ab8795c00233535fa0427a8a238a3121e2066c6d9700e83103ca4ed86b61268e04a8d84d4a1cb5d749b4362cd912a870c5a2a6cd0cfde02e63aadc123ee", [[], [], [], []]}, 0x4a1) 08:42:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) syz_genetlink_get_family_id$tipc2(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000040)=0x8000000003, 0xa) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 08:42:21 executing program 0: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x3, 0x4, 0x7, 'queue0\x00', 0x8000}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r2, 0x0) 08:42:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x2, &(0x7f0000000000)='.\x00'}, 0x30) ptrace$setopts(0x4200, r2, 0x8001, 0x67) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b47888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204e", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x35) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) wait4(r3, 0x0, 0x40000008, &(0x7f0000000180)) ptrace$cont(0x7, r3, 0x0, 0x0) 08:42:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimensat(r0, 0x0, &(0x7f0000000200)={{0x77359400}}, 0x0) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) 08:42:21 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 327.902960][T21227] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 327.925922][T21227] CPU: 1 PID: 21227 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 327.933856][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.943913][T21227] Call Trace: [ 327.947226][T21227] dump_stack+0x172/0x1f0 [ 327.951561][T21227] dump_header+0x10b/0x82d [ 327.955976][T21227] ? oom_kill_process+0x94/0x3f0 [ 327.960910][T21227] oom_kill_process.cold+0x10/0x15 [ 327.966035][T21227] out_of_memory+0x79a/0x12c0 [ 327.970715][T21227] ? lock_downgrade+0x920/0x920 [ 327.975576][T21227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.981813][T21227] ? oom_killer_disable+0x280/0x280 [ 327.981828][T21227] ? __kasan_check_read+0x11/0x20 [ 327.981844][T21227] mem_cgroup_out_of_memory+0x1d8/0x240 [ 327.981861][T21227] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 328.003188][T21227] ? do_raw_spin_unlock+0x57/0x270 [ 328.003202][T21227] ? _raw_spin_unlock+0x2d/0x50 [ 328.003216][T21227] try_charge+0xf4b/0x1440 [ 328.003232][T21227] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 328.023797][T21227] ? percpu_ref_tryget_live+0x111/0x290 [ 328.029359][T21227] ? get_mem_cgroup_from_mm+0x16/0x320 [ 328.034830][T21227] ? get_mem_cgroup_from_mm+0x156/0x320 [ 328.040383][T21227] mem_cgroup_try_charge+0x136/0x590 [ 328.045671][T21227] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 328.051916][T21227] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 328.057554][T21227] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 328.063538][T21227] ? defrag_store+0x360/0x360 [ 328.063555][T21227] ? lock_downgrade+0x920/0x920 [ 328.063573][T21227] ? swp_swapcount+0x540/0x540 [ 328.077910][T21227] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 328.083807][T21227] ? __kasan_check_read+0x11/0x20 [ 328.083821][T21227] ? do_raw_spin_unlock+0x57/0x270 [ 328.083835][T21227] do_huge_pmd_wp_page+0x806/0x2270 [ 328.083850][T21227] ? __split_huge_pmd+0x27e0/0x27e0 [ 328.083867][T21227] ? do_wp_page+0x4a1/0x14d0 [ 328.093977][T21227] ? pmd_val+0x85/0x100 [ 328.093990][T21227] ? add_mm_counter_fast.part.0+0x40/0x40 [ 328.094009][T21227] __handle_mm_fault+0x14cf/0x3f20 [ 328.123869][T21227] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 328.123888][T21227] ? __kasan_check_read+0x11/0x20 [ 328.134465][T21227] ? trace_hardirqs_on+0x67/0x240 [ 328.139494][T21227] handle_mm_fault+0x1b5/0x6b0 [ 328.144263][T21227] __do_page_fault+0x536/0xdd0 [ 328.149028][T21227] do_page_fault+0x38/0x590 08:42:21 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0xfffffce0}], 0x10000000000000ba, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)="2ec9a825ac913cdf3eef8c52027345d439d31779471755e3d508aa3550eccadf83019bff7fe3f2e1c41c17a81ba0d44ca91c3bcd2db2434875acf7b30e415999ac10ec671ab1aa99f97e35b4399369dffb88dd58c0170cdf7a11f1b1cddbf844f9bca445bffcf5bbebc37d8f0f5c5b00cc092d885846371bfa6374b13dac65430d9d0d66d42773caba61a2ec4e366c6d7fa414f35338fb84cdc135635288") ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x3) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2021, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000300)) ptrace$cont(0x7, r3, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000700)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f0000000400)=""/202, 0xca}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000600)=""/254, 0xfe}], 0x7, &(0x7f0000000780)=[{&(0x7f0000000300)}], 0x1, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000100)='a\xf3tr\x03\x00\xcf\n\n\xb9/fscreate\x00\xec\xc5l\xde\x17;\xe5e5i\xcf\xe3\xa6p+L\x96s\x01\x14%7\xff^\x9e\xc4\xbb\x1fQM\x12\xad\xc5\xfb\x9a\x1c\xd1\x82\xfa\x1f^\xd0\xfci\xb8G\xb3\x9f\x1bf\xf1\xfd\x15\x84\xcc\x04\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) preadv(r5, &(0x7f0000000700), 0x0, 0x0) 08:42:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @request_death], 0x0, 0x0, 0x0}) [ 328.149043][T21227] page_fault+0x39/0x40 [ 328.149052][T21227] RIP: 0033:0x4006c4 [ 328.149070][T21227] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 328.181167][T21227] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 328.187219][T21227] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 328.187226][T21227] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 08:42:22 executing program 3: syslog(0x9, &(0x7f0000000000)=""/56, 0x18d) epoll_create1(0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x200000, 0x0) [ 328.187232][T21227] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 328.187238][T21227] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 328.187244][T21227] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:22 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) r1 = getpid() getpriority(0xfffffffffffffffe, r1) clock_gettime(0x0, &(0x7f0000000040)) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='setg\x04\x00ups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$mice(0x0, 0x0, 0x404140) ioctl$VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000280)={0x10}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0x0, 0x0) dup2(r4, r6) syz_open_dev$ndb(0x0, 0x0, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x600) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000080)={{0x2, 0xadb5, 0x4, 0x9, 0x97d, 0x4494}, 0x6}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) select(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x100000004, 0x3, 0x1, 0x401, 0xfff, 0x7fff}, 0x0, &(0x7f0000000140)={0x0, 0x2710}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000009c0)) getpgid(0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, 0x0, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) [ 328.287812][T21227] memory: usage 307084kB, limit 307200kB, failcnt 2795 [ 328.301967][T21227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 328.323291][T21227] Memory cgroup stats for /syz4: [ 328.323390][T21227] anon 290643968 [ 328.323390][T21227] file 184320 [ 328.323390][T21227] kernel_stack 3014656 [ 328.323390][T21227] slab 7163904 [ 328.323390][T21227] sock 0 [ 328.323390][T21227] shmem 0 [ 328.323390][T21227] file_mapped 0 [ 328.323390][T21227] file_dirty 135168 [ 328.323390][T21227] file_writeback 0 [ 328.323390][T21227] anon_thp 268435456 [ 328.323390][T21227] inactive_anon 0 [ 328.323390][T21227] active_anon 290648064 [ 328.323390][T21227] inactive_file 0 [ 328.323390][T21227] active_file 0 [ 328.323390][T21227] unevictable 0 [ 328.323390][T21227] slab_reclaimable 1622016 [ 328.323390][T21227] slab_unreclaimable 5541888 [ 328.323390][T21227] pgfault 16368 [ 328.323390][T21227] pgmajfault 0 [ 328.323390][T21227] workingset_refault 0 [ 328.323390][T21227] workingset_activate 0 [ 328.323390][T21227] workingset_nodereclaim 0 [ 328.323390][T21227] pgrefill 409 [ 328.323390][T21227] pgscan 474 [ 328.323390][T21227] pgsteal 70 [ 328.323390][T21227] pgactivate 330 [ 328.419691][T21227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14119,uid=0 [ 328.539486][T21227] Memory cgroup out of memory: Killed process 14119 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 328.573544][ T1057] oom_reaper: reaped process 14119 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 08:42:22 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x4010) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:22 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28810}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:22 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000001e000507ed0080648c6394f21531d200100003402c00000001000080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 08:42:22 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000180)="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", 0x1000) r2 = syz_open_dev$radio(&(0x7f0000001180)='/dev/radio#\x00', 0x3, 0x2) setsockopt$packet_buf(r2, 0x107, 0xe373a169ab4b29b7, &(0x7f00000011c0)="4cc2dbcb4727bd658a047ccb9c54f0c22121a08081f18ac9ab9b6cd1a36b29737d997db647d901e360588859499486def3f8137766fe43a8105e6f79e3c54418d5cbef83c99de029b0c902b59d", 0x4d) r3 = syz_open_dev$radio(&(0x7f0000001240)='/dev/radio#\x00', 0x1, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000001280), &(0x7f00000012c0)=0x4) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000001300)={[0x26df, 0x60d, 0x4, 0x5, 0x100, 0xbb, 0x100, 0xaca7, 0x100, 0x1ff, 0xfff, 0x27d, 0x259, 0x4, 0xfffffffffffffe97, 0x5], 0x10000, 0x4}) read(r1, &(0x7f00000013c0)=""/4, 0x4) write$FUSE_OPEN(r3, &(0x7f0000001400)={0x20, 0x0, 0x7, {0x0, 0x3}}, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001440)='/proc/capi/capi20\x00', 0x400, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80800080}, 0xc, &(0x7f0000001680)={&(0x7f0000001500)={0x164, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x74, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc36}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a57}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001700)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000001740)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001780)={0x0, 0xffffffffffffffff}, &(0x7f00000017c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001800)={r7, 0x3}, &(0x7f0000001840)=0x8) r8 = syz_open_dev$usb(&(0x7f0000001880)='/dev/bus/usb/00#/00#\x00', 0x20, 0x40000) ioctl$KVM_GET_DEBUGREGS(r8, 0x8080aea1, &(0x7f00000018c0)) r9 = syz_open_dev$cec(&(0x7f0000001940)='/dev/cec#\x00', 0x0, 0x2) ioctl$FIONREAD(r9, 0x541b, &(0x7f0000001980)) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000019c0)='net/igmp\x00') r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r10, 0x2, r11) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001a00)=0x8001) r12 = syz_open_dev$amidi(&(0x7f0000001a40)='/dev/amidi#\x00', 0x9, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001a80)={0x0, 0x40000, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r13) 08:42:22 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = dup(r1) io_setup(0xae9, &(0x7f0000002840)=0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000002980)='/dev/usbmon#\x00', 0xff, 0x20101) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0) io_submit(r3, 0x6, &(0x7f0000002d40)=[&(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000002880)="4ba923360e774a4b41fcfa7f46e369f92ee19e08518f4df6b6eccbbbf8076edf3fe498cdb461a6602d0bc5c627e4716430e54a2b4e5532f8327165a9229571ce980ad2be4ba75c592ea532975bbc34aefa22ba0c4ea577de013d10890f1b2389d7", 0x61, 0x5, 0x0, 0x1, r2}, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x5a474a628a87a0af, 0x5, r4, &(0x7f0000002940)="379be5a8f98943e930f8cb2f54f61950bb9ab95df9b38b52faf6af0630cf5b947bd53a47dcaa17daa71b1b4761414a13c34986b37d534b41fedc21", 0x3b, 0x100, 0x0, 0x2, r5}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000002a00)="424458eb9b5521dc33fd55baf1a15e83b287c9e53973c716229d712809b26f8bf2c74b3db278902ed80df7123bc210fd928e5f40b8b47e02e8d709638d341ea811979d99e4d99195c388f0dae8eee6379c0f49fd91eb30f9e18719a4c5dd2d0e0702d4c9c6654298987cecd4bcc1f7d968017bf2a486bb53ef15e8be6e0e92bfbbff0c13c7b3cdef0c7a75eabc3ad31e37b4b1e5873e14f04cb08985a3b76ada3db11a4d5b58768434ec6a765ab449d42d2c5053e1d808ed60d6b0ddad3878b0d97bc14a18a1cb601a1351053b8806e6e92eeb3a5e673978c181a92ab769dabf6dd5bdfff234478def", 0xe9, 0x9, 0x0, 0x2, r2}, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x6, 0x400, r6, &(0x7f0000002b40), 0x0, 0xffffffff, 0x0, 0x2, r2}, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x6, 0x8, r7, &(0x7f0000002bc0)="878ddf55a795f731d3ce9331aea944c2458f0113092cc44b4b94c45c29801d907292f535ae415baaac95292b", 0x2c, 0x7f, 0x0, 0x2, r2}, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x1, r8, &(0x7f0000002c40)="d0f84bdd79133c447c15c42e383281f2bc569cc2af62687c8ee8361577325886a00bd0cf228d1720d7e5e8bfd0a59c6158d8bf3dd2824f41a23866111e5f454059e1eba5c7f0f97214131d002950c6ca3d9015f257b940ff23cc6d5b55e907093a59d723393db967a6ca4a933b367ae2c849117cb7d7f4d8ef221be657429fe9951ace125e3fbfcbd0f0a493a5dc4ce2c25e05a8bac207b5b632946ecef51f", 0x9f, 0x9, 0x0, 0x2, r9}]) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001440)={0x0, 0x8}, &(0x7f0000001480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000014c0)={0x0, 0x9}, &(0x7f0000001500)=0x8) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r12, 0x4070aea0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000001540)={0x0, 0x1000, "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"}, &(0x7f0000002580)=0x1008) r14 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r14, 0x4070aea0, 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r15, 0x84, 0x10, &(0x7f00000000c0)={r17}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f00000025c0)={0x0, 0x200, 0x200, 0x1, 0x2, 0xffff, 0xffffffffffffff00, 0x800, r17}, &(0x7f0000002600)=0x20) r19 = openat$full(0xffffffffffffff9c, &(0x7f0000002780)='/dev/full\x00', 0x0, 0x0) r20 = eventfd(0x8) fcntl$F_SET_FILE_RW_HINT(r20, 0x40e, &(0x7f0000002800)=0x5) r21 = socket$inet6_sctp(0xa, 0x5, 0x84) r22 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r22, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r21, 0x84, 0x10, &(0x7f00000000c0)={r23}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r19, 0x84, 0x71, &(0x7f00000027c0)={r23, 0x1}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000002740)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x0, @empty, 0x6}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000080)="568f7922080e91b2cce6a437d1a7eb9e425f422769fc2128c903a1392e43c1ec8de9de9cd5f9ccf1cf3b08e3f403c52050b7296f98177cb68a8f7e74aca7d96f68053bda53a3aabbc5de7bfa22f2f4c12dbb5d71ede932ceb00e666b7cfee24412c984de162ea1a0dcc89bad5d7fda86d4bbc33f866bf315cf072f206a7bdc5799f6bca2f88c2e9a3f2d39ea4f77ae896ce0ff62b2d562b48a7e5622", 0x9c}, {&(0x7f0000000140)="cee805bba5f5ac5ab4366f72a8c0819192dc0ea827f22d691c2cb7499cb68dc135", 0x21}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="e123efcf2577f2c03ab40df401b79bdb33eb56269219eadceb32092c77d93d70786da70a05b0e5b1f17c453115ad5091d735d266924c59b60da317e253aece4d866b7ad110bc1b42d326345f", 0x4c}, {&(0x7f0000001200)="6f6ea2a6ca2d888bce12192de984396a885dc78d6cf4881c41f6a277ca41a5161589d2e076f280e542b1f5b06a924e18f7db34c86949172cd814ecf4db4afecabb7ec39f4f013c56e5d705e167b2787904db9860df68717b22d193989510bc8ecec826c7e96640153a9a1eab3e7483ff1b0a3fa4c2adbcea06d71d2e08cb05e956f5e7370c40e2cb93c82f43071ae1255596e637eaf9e54fa2", 0x99}, {&(0x7f00000012c0)="857bacf327e5f7057e6dcfcc84b1f1f60da2f35f6c36751a9a0838ea45b0", 0x1e}, {&(0x7f0000001300)="475b9df1fc538302c5d5baf8f0ab2562d801c6f38e7640f1a0bb90634624bb07dbe80050657eb92467f7902a614ae719e9aa2f9b67fde14a7e4e432ba3304faba5e8c3a447cfa914540821f975b826baf5f144a8dea00930a7b763bba7010e37b46a28f452835d7beab8ceee2ef6ed480a73af94aeb41514f76f4754179468fa928ac23bf536a7962733933d19695e33bce7b7b3f9109f", 0x97}], 0x7, &(0x7f0000002640)=ANY=[@ANYBLOB="20000000000000008400000002000000070008020080000004000000", @ANYRES32=r10, @ANYBLOB="18000000000000008400000000000000008007009e0a040018000000000000008400000000000000bc00ff0007000001200000000000000084000000080000000000000000000000000000000000000120000000000000008400000002000000020004000000000008000000", @ANYRES32=r11, @ANYBLOB="06b0024b136700000000", @ANYRES32=r13, @ANYBLOB="20000000000000008400000002000000010000002248000000000000", @ANYRES32=r18, @ANYBLOB="18000000000000008400000006000000a004000000000000"], 0xd6, 0x68dff910605f4476}, 0x1) shutdown(r0, 0x0) 08:42:22 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"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"}) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x48020, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f757365030000007474722c00ff7a48978787ac59626d9c0a9e7dff4642f4d32ecf25638af1b15a5ac0fcfc9a420900a62a8ff25379e198276c98"]) [ 328.937682][T21469] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 328.963299][T21469] CPU: 0 PID: 21469 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 328.971240][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.981295][T21469] Call Trace: [ 328.984586][T21469] dump_stack+0x172/0x1f0 [ 328.988928][T21469] dump_header+0x10b/0x82d [ 328.993434][T21469] ? oom_kill_process+0x94/0x3f0 [ 328.998367][T21469] oom_kill_process.cold+0x10/0x15 [ 329.003477][T21469] out_of_memory+0x79a/0x12c0 [ 329.008152][T21469] ? lock_downgrade+0x920/0x920 [ 329.013004][T21469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.019241][T21469] ? oom_killer_disable+0x280/0x280 [ 329.024432][T21469] ? __kasan_check_read+0x11/0x20 [ 329.029455][T21469] mem_cgroup_out_of_memory+0x1d8/0x240 [ 329.035012][T21469] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 329.040652][T21469] ? do_raw_spin_unlock+0x57/0x270 [ 329.045766][T21469] ? _raw_spin_unlock+0x2d/0x50 [ 329.050622][T21469] try_charge+0xf4b/0x1440 [ 329.055042][T21469] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 329.060587][T21469] ? percpu_ref_tryget_live+0x111/0x290 [ 329.066138][T21469] ? get_mem_cgroup_from_mm+0x16/0x320 [ 329.071601][T21469] ? get_mem_cgroup_from_mm+0x156/0x320 [ 329.077178][T21469] mem_cgroup_try_charge+0x136/0x590 [ 329.082462][T21469] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 329.089062][T21469] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 329.094699][T21469] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 329.100690][T21469] ? lock_downgrade+0x920/0x920 [ 329.105549][T21469] ? defrag_store+0x360/0x360 [ 329.110223][T21469] ? lock_downgrade+0x920/0x920 [ 329.115073][T21469] ? swp_swapcount+0x540/0x540 [ 329.119855][T21469] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 329.125765][T21469] ? __kasan_check_read+0x11/0x20 [ 329.130792][T21469] ? do_raw_spin_unlock+0x57/0x270 [ 329.135994][T21469] do_huge_pmd_wp_page+0x806/0x2270 [ 329.141198][T21469] ? __split_huge_pmd+0x27e0/0x27e0 [ 329.146398][T21469] ? update_load_avg+0x1c6/0x1b10 [ 329.151424][T21469] ? pmd_val+0x85/0x100 [ 329.155582][T21469] ? add_mm_counter_fast.part.0+0x40/0x40 [ 329.161311][T21469] ? __kasan_check_read+0x11/0x20 [ 329.166473][T21469] __handle_mm_fault+0x14cf/0x3f20 [ 329.171591][T21469] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 329.177153][T21469] ? __kasan_check_read+0x11/0x20 [ 329.177171][T21469] ? trace_hardirqs_on+0x67/0x240 08:42:22 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r4, 0x0, [], r2, r3, 0x5, 0x2}, 0x3c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) sendmmsg$sock(r1, &(0x7f0000000d80)=[{{&(0x7f0000000040)=@can={0x1d, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="f997bdadd03bfef1af815912950fc0b99110fa6beec9adf1d4eb7f5c8a08868ac7fa732f20b971a707e0c8841a46f9d3256514f0b27bacfbc753926abbbddb4659a00c8762f7dc9fa0addb0678d1556087fb209e4c8cf5e045578e6d803d958a367b78a88acfdaf7ac2247876018c7a4a328de93ebceed11fef533c9d6288cb68cc85d45c6149d8654d0f6a60c06202703b0259c6db487ad52e8d0b88eff199864ad857b1f6db5f8246fd33ebe6b08d183ef28101f9fe958069dea358e8e39836dfc78887bb4f98d47101ef105af7337e90b5c8ebffebb38f88ebf252037f03411a4cf6d5a250fb051624e", 0xeb}, {&(0x7f0000000100)="7c20400507f99989b42824f178cb97082e700c4e06c9134b266cc9b4a405695b27a03e87812af952cf0da3e0824902a6a175bd2ccad3a28b98eef4b0a00c5e6f1af71a6ca7c03011357c33b68b53dc9ebcd5be81413d9ca1757bc662a22b71105d7bc9e1312a081cc1fb65beee442d", 0x6f}, {&(0x7f0000000300)="d68133850f137705eda655a0ea27e286c04a8ecaaaaf5093e79cf1f3783a5cd86d53aeb7013c4d5971bce21240250f04873793fd84c2f38862fa4d6e5c250cc6b1705659cfa917a153565168ccbac15d5cf5c5fa5d41e7863c2f6e1523f3a6e9b3b3a253e6198ba6eb3f3e6f2c5b4790c48c2d01ab6468d5bb875cdbb0ce2c022d4d6c847b0427c33b573356c7a90190a3af7761d240b211fb341f7e57c4101bb2aa4318e5834d7df45ceae07b8a86ae643948ae4134a468f4c3f33d68f1eab2d2904d44b87b3f24d52beffa495418615c4a59157ec6a0476dbcb854829a7181a8853c7138e1d1ccf4a7168414c8c5", 0xef}, {&(0x7f0000000400)="6b10847ad24b29196752ee72fc5712878e0265070e707cbfd18353ee", 0x1c}, {&(0x7f0000000440)}, {&(0x7f0000000480)="4fbc044cf06c02dfa871b1aa81347aae841b565773b0200b39710e813d82436133", 0x21}], 0x6, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}], 0x30}}, {{&(0x7f00000006c0)=@xdp={0x2c, 0x2, r5}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="ebbca6b12e68e1d0f530b252eada3802b17aab0c10c156e041663e282b97cf8839d681ce73dee96096930bdbbb63b7cfdc541bde92796eb40ef4aaddc1c3633bc1eb7913b5f8eddb28", 0x49}], 0x1, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)="3a892a052bb7b43a8e77f1a9bcc489c4ffbab186b07fd5faed0af5bd6d72ad8d4238d21830e57f5cabe69cffce1ed1ad16", 0x31}], 0x1, &(0x7f00000008c0)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x128}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}], 0x78}}, {{&(0x7f0000000940)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @bcast, @bcast]}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)="2e97344ad6bec712b65bc75225812e3fe5a25d15f4571eb65dca77024e81aef888e90542669f48ff1acb20309a772f098bc3059dbf4949c9702d9c467e31493aa7bd9a0bec1e56b60ad14db7f3208b8eed97a6a008acb98450a304d0fd75dc7b173d9e5b032288d8b60f7606efe496d18f494947ad2ea17c4275c793594dbed5b645d280d8df6d28cb117d73d5ee65c61add56222bb39a106a37ef8fe5eb17b933cb2cda7d8d8af4eda07226c83a", 0xae}, {&(0x7f0000000a80)="1a6d5bcac86558486afe51a84ded3813f09d0b61df27b30014db5ff20c86c298c8e5cb2bd869039459eadc40f952284356bf3bbee023554d2e18b5b5e5fcfbbf441152529a2e8c91868c30258318c570c071e96f90445ad5f35316dfa11e0baa85a9bcd9d924cf2026d78624a9d51d731ca32e0216a6dabaaabbe4052d2a20aa326a39bc15246356723ed051a6b1a1170d0187e0217cf60185daa06d1c0265a510622ecae213b6179e088ab8b9603e15825878afab927e0fad9ce694ce1a3fc00f1572f953ecc0104ab7fabdbd138168d95bdb8e", 0xd4}, {&(0x7f0000000b80)="a8cc11e69c6fe577e78b9ef352ccf5b61388b72fa23ed036bb4a90a80c06ec9cc2e4e3fc9fa742f8fb9a095405155c132ec4224199a7247ce4672548162e7f34349c86dde322bca246079a7bcc25426374eb8eee15eaf961eb6c8715ea381bddb7cd0c7f2c502b8cb16d5cebf3721bb2cc3fd7d57a", 0x75}, {&(0x7f0000000c00)="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", 0xfb}], 0x4, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}}], 0x4, 0x4040401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/ppp\x00', 0x40, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000e80)=r4, 0x4) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 329.177187][T21469] handle_mm_fault+0x1b5/0x6b0 [ 329.177204][T21469] __do_page_fault+0x536/0xdd0 [ 329.177223][T21469] do_page_fault+0x38/0x590 [ 329.187244][T21469] page_fault+0x39/0x40 [ 329.187253][T21469] RIP: 0033:0x4006c4 [ 329.187267][T21469] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 329.187273][T21469] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 329.187282][T21469] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 329.187287][T21469] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 329.187293][T21469] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 329.187299][T21469] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 329.187311][T21469] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 329.285610][T21469] memory: usage 307200kB, limit 307200kB, failcnt 2900 [ 329.295689][T21469] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 329.302819][T21469] Memory cgroup stats for /syz4: [ 329.302923][T21469] anon 290754560 [ 329.302923][T21469] file 184320 [ 329.302923][T21469] kernel_stack 3080192 [ 329.302923][T21469] slab 7163904 [ 329.302923][T21469] sock 0 [ 329.302923][T21469] shmem 0 [ 329.302923][T21469] file_mapped 0 [ 329.302923][T21469] file_dirty 135168 [ 329.302923][T21469] file_writeback 0 [ 329.302923][T21469] anon_thp 266338304 [ 329.302923][T21469] inactive_anon 0 [ 329.302923][T21469] active_anon 290758656 [ 329.302923][T21469] inactive_file 0 [ 329.302923][T21469] active_file 0 [ 329.302923][T21469] unevictable 0 [ 329.302923][T21469] slab_reclaimable 1622016 [ 329.302923][T21469] slab_unreclaimable 5541888 [ 329.302923][T21469] pgfault 16467 [ 329.302923][T21469] pgmajfault 0 [ 329.302923][T21469] workingset_refault 0 [ 329.302923][T21469] workingset_activate 0 [ 329.302923][T21469] workingset_nodereclaim 0 [ 329.302923][T21469] pgrefill 409 [ 329.302923][T21469] pgscan 474 [ 329.302923][T21469] pgsteal 70 [ 329.302923][T21469] pgactivate 330 [ 329.399867][T21469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14090,uid=0 [ 329.427239][T21469] Memory cgroup out of memory: Killed process 14090 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 329.444424][T21694] EXT4-fs (sda1): Unrecognized mount option "nouse" or missing value 08:42:23 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x100000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x2) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x8000, 0x4, 0xfffffffffffffffd}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000100)={0x2, 0x8, [0x100000001, 0xef1, 0xfffffffffffffffd, 0x80000000], 0x9}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0x1000, &(0x7f00000003c0)="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"}) 08:42:23 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6608}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 329.823574][T21472] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 329.849301][T21472] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.943091][T21735] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 329.962784][T21815] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 330.005389][T21735] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.043295][T21815] CPU: 0 PID: 21815 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 330.051231][T21815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.061289][T21815] Call Trace: [ 330.064592][T21815] dump_stack+0x172/0x1f0 [ 330.068928][T21815] dump_header+0x10b/0x82d [ 330.073358][T21815] ? oom_kill_process+0x94/0x3f0 [ 330.078314][T21815] oom_kill_process.cold+0x10/0x15 [ 330.083436][T21815] out_of_memory+0x79a/0x12c0 [ 330.088119][T21815] ? lock_downgrade+0x920/0x920 [ 330.092991][T21815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.099238][T21815] ? oom_killer_disable+0x280/0x280 [ 330.104453][T21815] mem_cgroup_out_of_memory+0x1d8/0x240 [ 330.110008][T21815] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 330.115673][T21815] ? do_raw_spin_unlock+0x57/0x270 [ 330.120783][T21815] ? _raw_spin_unlock+0x2d/0x50 [ 330.125629][T21815] try_charge+0xf4b/0x1440 [ 330.130054][T21815] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 330.135605][T21815] ? percpu_ref_tryget_live+0x111/0x290 [ 330.141155][T21815] ? get_mem_cgroup_from_mm+0x16/0x320 [ 330.146626][T21815] ? get_mem_cgroup_from_mm+0x156/0x320 [ 330.152183][T21815] mem_cgroup_try_charge+0x136/0x590 [ 330.157474][T21815] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 330.163840][T21815] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 330.169478][T21815] wp_page_copy+0x41e/0x15e0 [ 330.174093][T21815] ? page_trans_huge_mapcount+0x166/0x450 [ 330.179824][T21815] ? pmd_pfn+0x1d0/0x1d0 [ 330.184087][T21815] ? lock_downgrade+0x920/0x920 [ 330.188964][T21815] ? swp_swapcount+0x540/0x540 [ 330.193738][T21815] ? __kasan_check_read+0x11/0x20 [ 330.198769][T21815] ? do_raw_spin_unlock+0x57/0x270 [ 330.203887][T21815] do_wp_page+0x499/0x14d0 [ 330.208315][T21815] ? finish_mkwrite_fault+0x570/0x570 [ 330.213698][T21815] __handle_mm_fault+0x22f1/0x3f20 [ 330.218820][T21815] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 330.224382][T21815] ? __kasan_check_read+0x11/0x20 [ 330.229436][T21815] ? trace_hardirqs_on+0x67/0x240 [ 330.234472][T21815] handle_mm_fault+0x1b5/0x6b0 [ 330.239256][T21815] __do_page_fault+0x536/0xdd0 [ 330.244029][T21815] do_page_fault+0x38/0x590 [ 330.248548][T21815] page_fault+0x39/0x40 [ 330.252706][T21815] RIP: 0033:0x40cbe4 [ 330.256607][T21815] Code: 00 00 48 63 eb 74 0f 81 fb e7 03 00 00 b8 e8 03 00 00 48 0f 4e e8 e8 eb 58 ff ff bb e8 03 00 00 49 89 c5 4c 8d 74 05 00 eb 10 d7 58 ff ff 48 89 c2 4c 29 ea 48 39 d5 72 52 4c 89 f1 31 d2 4c [ 330.277178][T21815] RSP: 002b:00007ffd980dfd90 EFLAGS: 00010246 [ 330.283239][T21815] RAX: 0000000000000000 RBX: 00000000000003e8 RCX: 0000000000459879 [ 330.291207][T21815] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf2c [ 330.299174][T21815] RBP: 000000000000002d R08: ffffffffffffffff R09: ffffffffffffffff [ 330.307134][T21815] R10: 00007ffd980dfe60 R11: 0000000000000246 R12: 000000000075bf20 [ 330.315105][T21815] R13: 00000000000507fb R14: 0000000000050828 R15: 000000000075bf2c 08:42:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 08:42:24 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="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", 0x1000}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:24 executing program 0: r0 = fanotify_init(0xe11a11419a7fc765, 0x2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='tru\xf4\xbc\x88\x89\xfc\x06\xbb\x00\x00\x00 \x00', &(0x7f0000000040)={'U+', 0x5}, 0x28, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x40100) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) fchmod(r2, 0x5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") getsockopt$rose(r1, 0x104, 0x2, 0x0, &(0x7f00000000c0)=0xefcc79432bf45e79) 08:42:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) r2 = geteuid() setreuid(r2, r2) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r1) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) sendto$packet(r3, &(0x7f0000000080)="f8", 0x1, 0x2000, 0x0, 0x0) [ 330.402296][T21815] memory: usage 307200kB, limit 307200kB, failcnt 2963 [ 330.464886][T21815] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 330.486770][T21815] Memory cgroup stats for /syz4: [ 330.486874][T21815] anon 290791424 [ 330.486874][T21815] file 184320 [ 330.486874][T21815] kernel_stack 3080192 [ 330.486874][T21815] slab 7163904 [ 330.486874][T21815] sock 0 [ 330.486874][T21815] shmem 0 [ 330.486874][T21815] file_mapped 0 [ 330.486874][T21815] file_dirty 135168 [ 330.486874][T21815] file_writeback 0 [ 330.486874][T21815] anon_thp 264241152 [ 330.486874][T21815] inactive_anon 0 [ 330.486874][T21815] active_anon 290795520 [ 330.486874][T21815] inactive_file 0 [ 330.486874][T21815] active_file 0 [ 330.486874][T21815] unevictable 0 [ 330.486874][T21815] slab_reclaimable 1622016 [ 330.486874][T21815] slab_unreclaimable 5541888 [ 330.486874][T21815] pgfault 16566 [ 330.486874][T21815] pgmajfault 0 [ 330.486874][T21815] workingset_refault 0 08:42:24 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000002700)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000002600)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/199, 0xc7}, {&(0x7f0000002580)=""/122, 0x7a}], 0x9, &(0x7f00000026c0)=""/61, 0x3d}, 0x10001) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002740)={@remote, 0x7f}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") getsockopt$bt_BT_SECURITY(r1, 0x12, 0x3, &(0x7f0000000080), 0x4f7894) clock_getres(0x3, &(0x7f0000002780)) [ 330.486874][T21815] workingset_activate 0 [ 330.486874][T21815] workingset_nodereclaim 0 [ 330.486874][T21815] pgrefill 442 [ 330.486874][T21815] pgscan 474 [ 330.486874][T21815] pgsteal 70 [ 330.486874][T21815] pgactivate 363 [ 330.593363][T21815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14059,uid=0 08:42:24 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1c84b55920989dc2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x40800) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000100)=[{r2, 0x4020}, {r3, 0x81c8}, {r4, 0x40}, {r5, 0x20}, {r6, 0x2005}, {r7}], 0x6, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200)={0x4}, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) accept$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000280)="dcae92ed1c1d0b55b8a007bae12b27a585cc5eceba4e2713f982777bd6952bb24746e886126414f521bf0f346d135a77ac0ae147a34e0a29238875f399b3fd0de505", 0x23}, {&(0x7f0000000300)="fab7f7e5f683c6bda91f9a98e2d4c77f6f338710afa466e8e8e4a2076a158eb5675071efdeba35d8a931706a54edb18500cb727f93dd1506bbff16e8a58f4367781ffe38204b8b49409ba342841cbc239961b856d56fafa229fc9d28ef1bc43d46132eb9f377e08fc11d2cce1d416b458e4d53ff0b6dcbbfade9398d3a334682bf3cce4c5cc17487ff1fe92a73e7c6ce76478a45c4a0c05545aa49633f558725ae1118d37c5c6dcc599df977a2c747db943da8ff101d5adcacb555f676f24cbf2c3364b6", 0xc4}, {&(0x7f0000000400)="4c47822d3d8ffac7f8f80f7c5d4a12faa32fe886c654b5b828c2aac49289cdee4543e35392d9210163e41af72765a6899f403752668d1ba75c96f941c4dcd618f4b1ee40e109f9144c9e4b6ab5957a5ff8c231d10e8221c3467aba9b968c569a6960925a89abc75f49d98ee28b582ec5122e978e07e66d572113ce3995d08bd1faf55250724ca36869c0a145cd07d8d1dbcfeef368d9d89df5c3478a3da19f1196798d871a3569947d695f5f0086966d6e6ddc", 0x18}], 0x3, 0xa) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) 08:42:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x95b46a3e3b0eb614, 0x0) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$FUSE_WRITE(r4, &(0x7f00000002c0)={0x18, 0x0, 0x1, {0x7}}, 0x18) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000001c0)=0x9) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='k', 0x1}], 0x1, 0x0) 08:42:24 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @raw_data="e905a410d960458d4e5636317868f8554d1924f9028a1e0f93acfcbe4fd4aebecc1341062e41bd51cf17bb9d9983daf4e2074a65d1cf834d3f28928b1442b8acafd1929541be9b0d72cdce6b330872b19e4ceeec2cba0056bac090b957f0b14c1a62e15a4e5f4bdc7edcce371d39c991733b25b87afa39c232eccd3e9bd987910903032396c8a2ac3d2d414f500abbc2f484091914875e4a4f7a2b5fb6f9f0b70e704b228af3f450aef3ffa0db2f799cd17e4cb55cacb0c7f3ceb7755c93f16fdb0debd1facff55e"}) [ 330.736360][T21815] Memory cgroup out of memory: Killed process 14059 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 330.793256][ T1057] oom_reaper: reaped process 14059 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 08:42:24 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x200000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x81, 0x7, 0x5, 0x1}, 0x14a) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000180)={0x60}, 0xfffffe15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x101000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYBLOB="de6cdbeb9ce9eb5873d59b6dfa688fe9844531d3ee9a5a354b5b93b630b942d959b5315ef495159adba877d7400d21fc0443ad2b8e6556274fd62146f7d4fdc412995acb4adca2ead1444dc9c855067871adae2a0ddc9778fbe5bb04fe224c7fbc56cfc4cc7db2cb56f1fd7c31e1b7ce6732b060a0ffe9722759"], &(0x7f0000000240)=0xc) r7 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r7, 0x0, &(0x7f00000002c0)=""/196}, 0x18) 08:42:24 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xa86c, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)={0x80000001, 0x7, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1000000}]}}, 0x0, 0x26}, 0x20) 08:42:24 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', r2) 08:42:24 executing program 0: r0 = memfd_create(&(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "084c083452945899", "a2e14d28d227597140708e7fc168e4735ee2d542fb6ec89062a14b5a4680f90b", "62e52138", "b4652c214c7ecac4"}, 0x38) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00'}) dup2(r0, r2) 08:42:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x8c?O\xd2\xdc$j^\xf2i&\xder\x90\xa3\xc3\x96\x06c\xce@\x9a\x85\xff\\\x16\xb7\xa2V\xa9\x16\x1dh\xd8U\xdc\xf0M\xf2\a\xce\xaf\xef\x1f\xd0\xec\xf1W\x90\x9d\xd5\xa9\x81\xbf\xfd\x92\xfc)\xf1\x0f\xc7\xf2\xc5\xe1\xe9f=\xe8\x1c\xba\xd8v\x9c\xa5\x00y\xc4\x06\xd3\x8fT\xed\xaa\x18M\x0fR\x92\x1aZ\"\t\xdf\xaf\xd1vs\xc6\x80\"\xa0j\xf5\x9d\xef\xbf\xffV\xc8#\xec\x1a\x1c\xed\xd0=\x81\x89;L^i\x8e\xd3\x9fi\x11\xe8\xac\xf4V\xd8\xf1\xc8UFE\x0fM\x9c!\x0fy\x1c\x84\x9eu\x042\x92\x8a\x8c\xe8\xb66\x14\x180e\xf4\xcc\x14\xbc\x1dV\x00\xd9j\xb0\x8c18\xda\x0f\xe3\xf0\xf4x\x92\x18\x9fs\x8f#\x8f\xc0\xb90\amj\x15\xea\x18\x81t\xffY\x15(%r\xb6\xd5\x88\xf9\x1e\x1bF<\a') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0x5, 0x7, 0x8, 0x2, 0x1000}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x38d000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x3) 08:42:24 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x9}, 0x19b) 08:42:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="05630440000000000e630c40000084d1e02cbdbe483f00000f630c4000000000004000000000000011021c24cbbf50411da905c614d404dfc781bcf9170be7e1af5b9f19cde1d94c3000c539681124f907076e5baad6dbdaa1cc50ee4433663ee19820bc84f6e2b998c05910c2a3b359b8c8a46573f24a"], 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20480912}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa0, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @loopback}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x2000104) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000100), 0x4) r6 = getpgrp(0xffffffffffffffff) r7 = geteuid() r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000280)={0x7, 0x761e}) setfsuid(r7) 08:42:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, 0x1e, 0x101, 0x0, 0x0, {0x7}, [@typed={0x8, 0x13, @ipv4=@remote}, @typed={0x14, 0x5, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0x4, 0x1e}]}, 0x34}}, 0x0) 08:42:25 executing program 1: r0 = gettid() mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x5c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/21, 0x15}], 0x1}}], 0x2, 0x0, 0x0) [ 331.339653][T22195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 08:42:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000180)='\x1dd#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0x0, [], @p_u8=0x0}}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) 08:42:25 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x2000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:25 executing program 0: madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0xc) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:42:25 executing program 5: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200b2e9bdad000000010000040000000000000010000000001c0020000000000000007a55aa9b663d13f001fce3f3128a4efeeb2f3c2b27b172dfbff04b16966ce68878f829b5f7f8336f994fccc423839ebeedbabdec84d2b7f5a2cd26839b6ab3d7c9dbcb6f43fd5b836c11e7a3414babb606e82506dc7dd1bb59d0484adb5d2c75af463c8011f7b16c971b1711dafdf2ffffffffffff31ceb2b025d27b479de0e742779d6e0d64d322f5087c5735ee7e712e45fecdbc40e993c772"], 0x24, 0x0) 08:42:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xc, 0x4000000000000800, 0x1}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0), &(0x7f0000000200)}, 0x20) r1 = dup2(r0, r0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x8f070a915f7307e6, 0x80) getpeername$netlink(r3, &(0x7f0000000200), &(0x7f00000002c0)=0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000280)='n', &(0x7f0000000000)=""/84}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r5, 0x1, 0x6}, 0x10) 08:42:25 executing program 0: r0 = geteuid() quotactl(0x2e, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)="16da3cfe43e85e34bcf087c96efedbc465e73fdb6883") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}}, &(0x7f0000001400)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 08:42:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000000)=@can={0x1d, r1}, 0x80) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000240)={0xfffffffffffffffd, 0xfffffffffffff27b}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[]}}, 0x0) 08:42:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000080)="00286eb4fa920000000000000000", 0xffffffc7) recvmmsg(r1, &(0x7f0000006cc0)=[{{0x0, 0x2, 0x0, 0xd1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001840)=""/4096, 0x2dc}], 0x1}}], 0x2, 0x0, 0x0) 08:42:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r1, 0x0) listen(r1, 0x3ff) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r2, 0x0) syz_open_pts(r2, 0x402100) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0xfff, 0x4) ftruncate(r3, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x1ff, 0x84, 0x1, 0x0, 0x0, 0x9000000000, 0x5, 0x273a72ad, 0x7fff, 0x49e, 0x6, 0x7, 0x2, 0x6, 0xe, 0x9}}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x0, 0x0, 0x0, 0x0, 0x95}, 0x98) 08:42:26 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x10400000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x6, 0x1, 0x400, 0xfffffffffffff800}) [ 332.363466][T22365] input: syz1 as /devices/virtual/input/input15 08:42:26 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), 0x8) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 332.488092][T22365] input: syz1 as /devices/virtual/input/input16 08:42:26 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x8001, @empty, 0x9}, {0xa, 0x4e23, 0xa, @empty, 0x7}, 0x10000, [0x25d4, 0x8, 0x7, 0xffffffffffff7fff, 0x3ec0c000000000, 0x5, 0xffffffff, 0x2]}, 0x5c) 08:42:26 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x3f000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x2c6) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 08:42:26 executing program 1: r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000380)={'syz0', "8c50270449c7f62c9c791f7a20ff20d6d55858cf390e4471f04bce4b342a70efc2a93be77d5c317d2f0d0d91e1b63e6443824ee564901ebf61327e275702999215e680c77bebd364a5da5a80051a044268ab93a040ce9ed7bd8b949566f29d824b1fea2a0ef036b8e64d1b1a506668e1c36429037ca631f2203e5341af02da155965a75f69142f9275b033e594c24a414f2bbd52218ae3ea06c421f3b37dedf051d18cc66a536c682c43b61e56e703cbc2620e00dd"}, 0xb9) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b83bbb6a23b4b6942b78710010000000000000025173d1faa4833278daa9260b700eff0ffff0403ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000e80000008f0300000000000000000000000000007088a2cd4ecb77efb40ee3ea6411e7026c840c585bd87cc19001b7b455961dfad8165e2cf378176456564f2f109b12089bf9c03491ca6a8a9d2aacb01e09eb68bd913dacb98d3dc9b0a05156146902da70f415c4befb6f4baa320286d874e09e794ac205151f9b301ae0d248b7be63000078b3dd10281bdc14aaf233f22ad413ead799b91d44239e5d7495188412bd6a221fedcd40ce1f5036c6d481b958ec77c0803668e9af36e924a6367197358c217155d939ce1fb2f5c78f93122264ab7805e2"]) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2000, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:26 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$netrom(r0, &(0x7f0000000000)={{0x6, @default}, [@rose, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom, @netrom, @rose, @rose]}, 0x48) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x200) [ 332.993921][T22485] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 333.017559][T22485] CPU: 1 PID: 22485 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 333.025930][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.036005][T22485] Call Trace: [ 333.039304][T22485] dump_stack+0x172/0x1f0 [ 333.043657][T22485] dump_header+0x10b/0x82d [ 333.048095][T22485] oom_kill_process.cold+0x10/0x15 [ 333.053223][T22485] out_of_memory+0x79a/0x12c0 [ 333.057933][T22485] ? lock_downgrade+0x920/0x920 [ 333.062787][T22485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 333.069162][T22485] ? oom_killer_disable+0x280/0x280 [ 333.074371][T22485] ? trace_hardirqs_on_caller+0x6a/0x240 [ 333.080031][T22485] mem_cgroup_out_of_memory+0x1d8/0x240 [ 333.085589][T22485] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 333.091225][T22485] ? retint_kernel+0x2b/0x2b [ 333.095819][T22485] try_charge+0xf4b/0x1440 [ 333.100241][T22485] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 333.105810][T22485] ? get_mem_cgroup_from_mm+0x139/0x320 [ 333.111353][T22485] ? __kasan_check_read+0x11/0x20 [ 333.116474][T22485] ? lock_downgrade+0x920/0x920 [ 333.121340][T22485] ? percpu_ref_tryget_live+0x111/0x290 [ 333.126903][T22485] __memcg_kmem_charge_memcg+0x71/0xf0 [ 333.132362][T22485] ? memcg_kmem_put_cache+0x50/0x50 [ 333.137564][T22485] ? get_mem_cgroup_from_mm+0x156/0x320 [ 333.143120][T22485] __memcg_kmem_charge+0x13a/0x3a0 [ 333.148411][T22485] __alloc_pages_nodemask+0x4f4/0x900 [ 333.153794][T22485] ? __alloc_pages_slowpath+0x2520/0x2520 [ 333.159698][T22485] ? copy_page_range+0xef4/0x1ee0 [ 333.164726][T22485] ? __kasan_check_read+0x11/0x20 [ 333.169767][T22485] ? write_comp_data+0x1e/0x70 [ 333.174533][T22485] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 333.180778][T22485] alloc_pages_current+0x107/0x210 [ 333.185893][T22485] pte_alloc_one+0x1b/0x1a0 [ 333.190409][T22485] __pte_alloc+0x20/0x310 [ 333.194741][T22485] copy_page_range+0x1520/0x1ee0 [ 333.199676][T22485] ? retint_kernel+0x2b/0x2b [ 333.204266][T22485] ? trace_hardirqs_on_caller+0x6a/0x240 [ 333.209912][T22485] ? pmd_alloc+0x180/0x180 [ 333.214324][T22485] ? vma_gap_callbacks_rotate+0x62/0x80 [ 333.219867][T22485] ? __rb_insert_augmented+0x20c/0xd90 [ 333.225325][T22485] ? validate_mm_rb+0xa3/0xc0 [ 333.230014][T22485] ? __vma_link_rb+0x275/0x370 [ 333.234871][T22485] ? __kasan_check_write+0x14/0x20 [ 333.239997][T22485] dup_mm+0xa67/0x1430 [ 333.244072][T22485] ? vm_area_dup+0x170/0x170 [ 333.248660][T22485] ? debug_mutex_init+0x2d/0x5a [ 333.253508][T22485] copy_process+0x28b7/0x6b00 [ 333.258187][T22485] ? __cleanup_sighand+0x60/0x60 [ 333.263127][T22485] _do_fork+0x146/0xfa0 [ 333.267288][T22485] ? copy_init_mm+0x20/0x20 [ 333.271796][T22485] ? __kasan_check_read+0x11/0x20 [ 333.276820][T22485] ? _copy_to_user+0x118/0x160 [ 333.281585][T22485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 333.287832][T22485] ? put_timespec64+0xda/0x140 [ 333.292683][T22485] __x64_sys_clone+0x18d/0x250 [ 333.297451][T22485] ? __ia32_sys_vfork+0xc0/0xc0 [ 333.297469][T22485] ? trace_hardirqs_off_caller+0x65/0x230 [ 333.308002][T22485] ? trace_hardirqs_on+0x67/0x240 [ 333.308017][T22485] do_syscall_64+0xfd/0x6a0 [ 333.308034][T22485] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 333.308049][T22485] RIP: 0033:0x459879 [ 333.327399][T22485] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 333.347007][T22485] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 333.355574][T22485] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 333.363526][T22485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.371478][T22485] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.379429][T22485] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 333.387379][T22485] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff 08:42:27 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e2b, @loopback}, 0x39e) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r4 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r5, 0x0, [], r3, r4, 0x5, 0x2}, 0x3c) ioctl$KVM_NMI(r4, 0xae9a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x40000000010}, @rand_addr="10981eb61d19ea5565a016b43c0f8564", @mcast1, 0x1c000000, 0x3, 0x8, 0x580, 0xff, 0x42000000, r3}) [ 333.411514][T22485] memory: usage 307200kB, limit 307200kB, failcnt 3003 [ 333.419713][T22485] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 333.427375][T22485] Memory cgroup stats for /syz4: [ 333.428326][T22485] anon 289288192 [ 333.428326][T22485] file 184320 [ 333.428326][T22485] kernel_stack 3276800 [ 333.428326][T22485] slab 7299072 [ 333.428326][T22485] sock 0 [ 333.428326][T22485] shmem 0 [ 333.428326][T22485] file_mapped 0 [ 333.428326][T22485] file_dirty 135168 [ 333.428326][T22485] file_writeback 0 [ 333.428326][T22485] anon_thp 260046848 [ 333.428326][T22485] inactive_anon 0 [ 333.428326][T22485] active_anon 289292288 [ 333.428326][T22485] inactive_file 0 [ 333.428326][T22485] active_file 0 [ 333.428326][T22485] unevictable 0 [ 333.428326][T22485] slab_reclaimable 1622016 [ 333.428326][T22485] slab_unreclaimable 5677056 [ 333.428326][T22485] pgfault 16962 [ 333.428326][T22485] pgmajfault 0 [ 333.428326][T22485] workingset_refault 0 [ 333.428326][T22485] workingset_activate 0 08:42:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2000003, 0xaaaaaaaaaaaabae, &(0x7f0000000040), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/ip_tables_targets\x00') ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000080)={0x8, 0xfffffffffffffffe}) umount2(&(0x7f0000000000)='./file0\x00', 0xd) [ 333.428326][T22485] workingset_nodereclaim 0 [ 333.428326][T22485] pgrefill 442 [ 333.428326][T22485] pgscan 474 [ 333.428326][T22485] pgsteal 70 [ 333.428326][T22485] pgactivate 363 08:42:27 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40000, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0x40000000000032, &(0x7f0000000000)=0x6, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0x2, 0x3, 0x10001, 0x3, 0x20}) [ 333.591684][T22485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14043,uid=0 [ 333.650135][T22485] Memory cgroup out of memory: Killed process 14043 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:27 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f0000000140)={&(0x7f0000000080), 0x0, &(0x7f0000000100)}, &(0x7f0000000240)=0x18) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) gettid() 08:42:27 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/197, 0x6a}, {&(0x7f00000002c0)=""/4096}, {&(0x7f0000000100)=""/128}], 0xd6, 0xfffffffffffffffc) 08:42:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x90000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0xe65, 0x4) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0xfffffffffffffebd}, {0x0}, {0x0, 0xfffffffffffffd95}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa66010000800000", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) 08:42:27 executing program 0: socket$pppoe(0x18, 0x1, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm_plock\x00', 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r2, 0x103, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x908}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300a1214}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x7c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x14ea}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf749}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x58}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000020) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'bond0\x00'}}, 0x1e) 08:42:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:27 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x40000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:27 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xac}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fstat(r1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x4000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010000000000000000f5fe010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001f000800080000000000"], 0xc4}}, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x40c480, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000480)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x180000) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000000)={0x4, [0xfffffffffffffffc, 0x36, 0x2, 0x20]}) fcntl$setlease(r2, 0x400, 0x1) 08:42:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet6(0xa, 0x1, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="6e68979360a1bcfe8df16bdec578fa21", 0x3, 0x3, 0x0, 0x200, 0xffffffff, 0x2000000, r1}) write(r0, &(0x7f0000000000)="ccfd00b0545c74f71393f5125df36c234a4b1ca28747977fd343c77093aa6f1f2e83275846b52d798357a5212a4171a9cfd540a62268499e9f8b2192250e45fd9eba956386964efe117a1a3d582a9cfd0131e7f5d4e0dd52d988cce148f798a51adf4e4c92a63d004f82495e881f87b959f4a4e0c023e3d79877d9f0d75f41f53b600d834e4c11c2a5bae82c9eea", 0x8e) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = accept4(r2, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000140)=0x80, 0x800) recvfrom$ax25(r3, &(0x7f0000000280)=""/77, 0x4d, 0x10040, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}, 0x48) 08:42:27 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000000c0)='\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x1000, 0x10000, 0x2}, 0x8) connect$l2tp(r0, 0x0, 0x0) [ 334.150290][T22714] IPVS: ftp: loaded support on port[0] = 21 08:42:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) timer_create(0x2, 0x0, &(0x7f0000000580)=0x0) timer_settime(r2, 0x0, &(0x7f0000000600)={{}, {0x77359400}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) timer_delete(r2) getpriority(0x2, 0x0) 08:42:28 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote}}}}, &(0x7f0000000080)=0xb0) 08:42:28 executing program 2: perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = socket$xdp(0x2c, 0x3, 0x0) shutdown(r2, 0x1) [ 334.382287][T22748] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 334.424073][T22748] CPU: 1 PID: 22748 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 334.432109][T22748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.442164][T22748] Call Trace: [ 334.445481][T22748] dump_stack+0x172/0x1f0 [ 334.449829][T22748] dump_header+0x10b/0x82d [ 334.454259][T22748] ? oom_kill_process+0x94/0x3f0 [ 334.454272][T22748] oom_kill_process.cold+0x10/0x15 [ 334.454285][T22748] out_of_memory+0x79a/0x12c0 [ 334.454300][T22748] ? lock_downgrade+0x920/0x920 [ 334.454321][T22748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 334.464343][T22748] ? oom_killer_disable+0x280/0x280 [ 334.464358][T22748] ? __kasan_check_read+0x11/0x20 [ 334.464374][T22748] mem_cgroup_out_of_memory+0x1d8/0x240 [ 334.464388][T22748] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 334.464409][T22748] ? do_raw_spin_unlock+0x57/0x270 [ 334.506577][T22748] ? _raw_spin_unlock+0x2d/0x50 [ 334.511418][T22748] try_charge+0xf4b/0x1440 [ 334.516000][T22748] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 334.521531][T22748] ? percpu_ref_tryget_live+0x111/0x290 [ 334.527077][T22748] ? get_mem_cgroup_from_mm+0x16/0x320 [ 334.533049][T22748] ? get_mem_cgroup_from_mm+0x156/0x320 [ 334.538589][T22748] mem_cgroup_try_charge+0x136/0x590 [ 334.543862][T22748] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 334.550181][T22748] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 334.555806][T22748] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 334.561784][T22748] ? lock_downgrade+0x920/0x920 [ 334.566634][T22748] ? defrag_store+0x360/0x360 [ 334.571298][T22748] ? lock_downgrade+0x920/0x920 [ 334.576143][T22748] ? swp_swapcount+0x540/0x540 [ 334.580888][T22748] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 334.586765][T22748] ? __kasan_check_read+0x11/0x20 [ 334.591772][T22748] ? do_raw_spin_unlock+0x57/0x270 [ 334.596877][T22748] do_huge_pmd_wp_page+0x806/0x2270 [ 334.602062][T22748] ? __split_huge_pmd+0x27e0/0x27e0 [ 334.607347][T22748] ? update_load_avg+0x1c6/0x1b10 [ 334.612532][T22748] ? pmd_val+0x85/0x100 [ 334.616676][T22748] ? add_mm_counter_fast.part.0+0x40/0x40 [ 334.622393][T22748] ? __kasan_check_read+0x11/0x20 [ 334.627410][T22748] __handle_mm_fault+0x14cf/0x3f20 [ 334.632517][T22748] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 334.638060][T22748] ? __kasan_check_read+0x11/0x20 [ 334.643124][T22748] ? trace_hardirqs_on+0x67/0x240 [ 334.648151][T22748] handle_mm_fault+0x1b5/0x6b0 [ 334.652904][T22748] __do_page_fault+0x536/0xdd0 [ 334.657663][T22748] do_page_fault+0x38/0x590 [ 334.662238][T22748] page_fault+0x39/0x40 [ 334.666376][T22748] RIP: 0033:0x4006c4 [ 334.670368][T22748] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 334.689957][T22748] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 334.696015][T22748] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 334.703972][T22748] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 334.711929][T22748] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 334.719883][T22748] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 334.727840][T22748] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:28 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 334.785400][T22748] memory: usage 307200kB, limit 307200kB, failcnt 3037 [ 334.785416][T22748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 334.843925][T22748] Memory cgroup stats for /syz4: [ 334.844021][T22748] anon 287399936 [ 334.844021][T22748] file 184320 [ 334.844021][T22748] kernel_stack 3342336 [ 334.844021][T22748] slab 7299072 [ 334.844021][T22748] sock 0 [ 334.844021][T22748] shmem 0 [ 334.844021][T22748] file_mapped 0 [ 334.844021][T22748] file_dirty 0 [ 334.844021][T22748] file_writeback 0 [ 334.844021][T22748] anon_thp 257949696 [ 334.844021][T22748] inactive_anon 0 [ 334.844021][T22748] active_anon 287420416 [ 334.844021][T22748] inactive_file 0 [ 334.844021][T22748] active_file 0 [ 334.844021][T22748] unevictable 0 [ 334.844021][T22748] slab_reclaimable 1622016 [ 334.844021][T22748] slab_unreclaimable 5677056 [ 334.844021][T22748] pgfault 17127 [ 334.844021][T22748] pgmajfault 0 [ 334.844021][T22748] workingset_refault 0 [ 334.844021][T22748] workingset_activate 0 [ 334.844021][T22748] workingset_nodereclaim 0 [ 334.844021][T22748] pgrefill 442 [ 334.844021][T22748] pgscan 474 [ 334.844021][T22748] pgsteal 70 [ 334.844021][T22748] pgactivate 363 [ 334.981597][T22748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14013,uid=0 [ 335.006642][T22748] Memory cgroup out of memory: Killed process 14013 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 335.047296][T22750] IPVS: ftp: loaded support on port[0] = 21 08:42:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r1 = syz_open_dev$swradio(&(0x7f00000026c0)='/dev/swradio#\x00', 0x1, 0x2) recvmsg$kcm(r1, &(0x7f00000039c0)={&(0x7f0000002700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002780)=""/30, 0x1e}, {&(0x7f00000027c0)=""/232, 0xe8}, {&(0x7f00000028c0)}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x4, &(0x7f0000003940)=""/124, 0x7c}, 0x22) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r2, 0x8108551b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 08:42:30 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x1) 08:42:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6a6f75725961df3aefda0724f2a7c566696c65302c00"]) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x451163) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000180)={0x14, 0x69, 0x2, {0x84, 0x2, 0x1}}, 0x14) 08:42:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0edca50d5e0bcfe47bf070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x18000, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x1, 0x5) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000340), &(0x7f0000000380)=0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = semget$private(0x0, 0x2, 0x0) semop(r5, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(r5, &(0x7f0000000240)=[{0x3, 0x7fff}], 0x1) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000300)) semctl$GETNCNT(r5, 0x2, 0xe, &(0x7f0000000140)=""/224) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000280)={0xd0003, 0x0, [0x6, 0x46f, 0x6, 0x0, 0x7, 0x3, 0x6, 0x1]}) 08:42:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/fib_trie\x00') ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000140)=0x16) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) ptrace$cont(0x7, r6, 0x0, 0x7) syz_open_procfs(r5, &(0x7f0000000180)='children\x00') close(r3) r7 = socket(0x100000000000011, 0x3, 0x0) bind(r7, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) r8 = open(&(0x7f0000002000)='./bus\x00', 0x1416c2, 0x0) ftruncate(r8, 0x2) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f00000000c0)=0x8, 0x4) sendfile(r3, r8, 0x0, 0x800000000024) 08:42:30 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x10000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 336.873472][T22995] EXT4-fs (loop0): Unrecognized mount option "jourYaß:ïÚ$ò§Åfile0" or missing value [ 336.910557][T23001] debugfs: Directory 'vcpu0' with parent '23001-5' already present! 08:42:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="00009f0700000000"], 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000475e10b324389a9034170100000000000000000000000000000000000000000000000000000000000000000000005bc0b13c000000000000000000000000000000000000000000000000f90000000000000000030000000000000000000000000200"/123], 0xb8}}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000002c0), 0x8) [ 337.009135][T22995] EXT4-fs (loop0): Unrecognized mount option "jourYaß:ïÚ$ò§Åfile0" or missing value [ 337.045202][T22999] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 337.123844][T22999] CPU: 1 PID: 22999 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 337.131787][T22999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.141843][T22999] Call Trace: [ 337.145133][T22999] dump_stack+0x172/0x1f0 [ 337.149727][T22999] dump_header+0x10b/0x82d [ 337.154146][T22999] ? oom_kill_process+0x94/0x3f0 [ 337.159087][T22999] oom_kill_process.cold+0x10/0x15 [ 337.164286][T22999] out_of_memory+0x79a/0x12c0 [ 337.168963][T22999] ? lock_downgrade+0x920/0x920 [ 337.173816][T22999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 337.180060][T22999] ? oom_killer_disable+0x280/0x280 [ 337.185262][T22999] ? __kasan_check_read+0x11/0x20 [ 337.190293][T22999] mem_cgroup_out_of_memory+0x1d8/0x240 [ 337.195848][T22999] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 337.201500][T22999] ? do_raw_spin_unlock+0x57/0x270 [ 337.206615][T22999] ? _raw_spin_unlock+0x2d/0x50 [ 337.211476][T22999] try_charge+0xf4b/0x1440 [ 337.215897][T22999] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 337.221442][T22999] ? percpu_ref_tryget_live+0x111/0x290 [ 337.221460][T22999] ? get_mem_cgroup_from_mm+0x16/0x320 [ 337.232451][T22999] ? get_mem_cgroup_from_mm+0x156/0x320 [ 337.237999][T22999] mem_cgroup_try_charge+0x136/0x590 [ 337.243289][T22999] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 337.249540][T22999] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 337.249557][T22999] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 337.262528][T22999] ? defrag_store+0x360/0x360 [ 337.267213][T22999] ? lock_downgrade+0x920/0x920 [ 337.272075][T22999] ? swp_swapcount+0x540/0x540 [ 337.276923][T22999] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 337.282817][T22999] ? __kasan_check_read+0x11/0x20 [ 337.287856][T22999] ? do_raw_spin_unlock+0x57/0x270 [ 337.292970][T22999] do_huge_pmd_wp_page+0x806/0x2270 [ 337.298172][T22999] ? __split_huge_pmd+0x27e0/0x27e0 [ 337.303380][T22999] ? do_wp_page+0x4a1/0x14d0 [ 337.307959][T22999] ? pmd_val+0x85/0x100 [ 337.312105][T22999] ? add_mm_counter_fast.part.0+0x40/0x40 [ 337.317827][T22999] __handle_mm_fault+0x14cf/0x3f20 [ 337.322939][T22999] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 337.328483][T22999] ? __kasan_check_read+0x11/0x20 [ 337.333513][T22999] ? trace_hardirqs_on+0x67/0x240 [ 337.338539][T22999] handle_mm_fault+0x1b5/0x6b0 [ 337.343309][T22999] __do_page_fault+0x536/0xdd0 [ 337.348073][T22999] do_page_fault+0x38/0x590 [ 337.352578][T22999] page_fault+0x39/0x40 [ 337.356727][T22999] RIP: 0033:0x4006c4 [ 337.360624][T22999] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 337.380312][T22999] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 337.386376][T22999] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 337.394367][T22999] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 337.402338][T22999] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 337.410311][T22999] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 08:42:30 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x206000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f00000001c0)="db01ddc53163dc0f2f8fc48c3fb40233c5c1ca1b1b224f91e586b4d1fa47445be0aac63fd33d2c7e49e76f813d4714fded0009c125cc378f4fa8a19be3621287a87f4efc8f795bc454a6347019dfdca5b7cbacd46eaf5c7d3ebc5ed2", &(0x7f0000000240)=""/82}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x240100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, &(0x7f00000003c0), 0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_PIE_OFF(r0, 0x7006) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0xa874, 0x0, 0x0, 0x0, 0x0, 0xffffbffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x2, 0x200, 0x0, 0x0, 0x80, 0x40000000001, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x9, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x380]}, 0x3c) 08:42:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl(r2, 0xffffffffffffffb2, &(0x7f0000000040)) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000940)=""/4096, 0x1000) [ 337.418280][T22999] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:31 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="c43ab091ffda3c363562c24024772175a82095ca1fc1ed95f6f156eef0e50381c6d733287f8e3b53467a6ed77385c6fc3c428ccc66cd10a72789db0842950d739312465b68c49c7fa9a5f42caab09f8ffb690899a093d8c7c989919a3c86"}, {&(0x7f00000001c0)="fd60f872706fc6cf4b2998d55f0e79a45fe4a873c395b2675ec8c0daa80433c84b2969e797280494376f2f3028b0e51b39"}, {&(0x7f0000000200)="d0879343ac72e0522182451dff67cd6ebd5c4b0fd177f726d4ede015b33e1d340c78dc98b9e19b5811342981595fdc36b0296e31420e18d071289d3644405a1f36a1f252459b9619101616704913b8471228633fa5ea4a8248a2c0e6fa6d426d6e4c05b5f0587ffed25e7e244be774e45843ee1bf4d4b1fe9701"}], 0x1072}, 0x80) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x340840, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10400, 0x0) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000040)={0x80000001, 0x1, [0x995e, 0x2, 0x5, 0x1, 0xffffffffffffffff], 0x9}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="ae629c787e91e75e2d08f9cfa42b44cf54d5ba8a2b74ebb2b6827a"], 0xa) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0xfffffffffffffe04) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000004c0)=0x10, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @timestamp, @mss={0x2, 0x40}, @mss={0x2, 0xfffffffffffffffe}, @sack_perm], 0x5) ioctl(r3, 0x100000001, &(0x7f0000000100)="11dca50d0300cfa47bf070") r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x543641, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000340)=r1, 0x1) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600)='/dev/sequencer\x00', 0x80000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0) ioctl$VIDIOC_S_AUDOUT(r9, 0x40345632, &(0x7f0000000480)={0x8, "93022260f6577876fa24fbcaa9b574e3bdf7d63c492bc74fa3715c5fe34ac062", 0x0, 0x2}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) r10 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000400)={0x0, 0x0}) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000440)={r11, r12/1000+30000}, 0x10) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000002c0)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000001680)=0x10) 08:42:31 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000ea0200f3"], 0x8) 08:42:31 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000002380)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev={0xac, 0x5c}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) [ 337.626150][T22999] memory: usage 307200kB, limit 307200kB, failcnt 3068 [ 337.636430][T22999] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 337.664796][T22999] Memory cgroup stats for /syz4: [ 337.664899][T22999] anon 287555584 [ 337.664899][T22999] file 184320 [ 337.664899][T22999] kernel_stack 3342336 [ 337.664899][T22999] slab 7299072 [ 337.664899][T22999] sock 0 [ 337.664899][T22999] shmem 0 [ 337.664899][T22999] file_mapped 0 [ 337.664899][T22999] file_dirty 0 [ 337.664899][T22999] file_writeback 0 [ 337.664899][T22999] anon_thp 255852544 [ 337.664899][T22999] inactive_anon 0 [ 337.664899][T22999] active_anon 287576064 [ 337.664899][T22999] inactive_file 0 [ 337.664899][T22999] active_file 0 [ 337.664899][T22999] unevictable 0 [ 337.664899][T22999] slab_reclaimable 1622016 08:42:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9beb010018000000000000005400000054000000090000001000000006008005018000000b000000028c0000ffffffff0300000003000000010000000d000000050000007f0000000100000005000000090000000100000001000000ff0300000c00000001000000fbffffff000000000000000000"], &(0x7f00000000c0)=""/191, 0x75, 0xbf, 0x1}, 0x20) 08:42:31 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x214042) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000180)={0x3, 0x46f7}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d170fc8879a5616bb6f8521e7664abb99bafde2fb4a418fade553c53a7524de5dacf4e7ff35e0d6a4a8b3c2dd26aa0ae4cf9beb5ec674c5d06866886484882d815c1955176d53eb6d96779dad2be4a22bf7e45b91ac60a4c1f5bab6a4d8e4b3195323b6d5b79c3389222582ea728e189a6775c07a4fd004c1f3e43f993dd62d304b1a38b13ddd1045ce2de4fa54ee62f0e1a9952815663435c74dc02516e6", @ANYRESHEX=r3]) chdir(&(0x7f0000000000)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10008020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x50, r5, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffeffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) [ 337.664899][T22999] slab_unreclaimable 5677056 [ 337.664899][T22999] pgfault 17226 [ 337.664899][T22999] pgmajfault 0 [ 337.664899][T22999] workingset_refault 0 [ 337.664899][T22999] workingset_activate 0 [ 337.664899][T22999] workingset_nodereclaim 0 [ 337.664899][T22999] pgrefill 442 [ 337.664899][T22999] pgscan 474 [ 337.664899][T22999] pgsteal 70 [ 337.664899][T22999] pgactivate 363 [ 337.909601][T23249] 9pnet: Insufficient options for proto=fd [ 337.951863][T23252] 9pnet: Insufficient options for proto=fd [ 337.981610][T22999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13986,uid=0 [ 338.015472][T22999] Memory cgroup out of memory: Killed process 13986 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 338.042992][ T1057] oom_reaper: reaped process 13986 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 338.073654][T23018] debugfs: Directory 'vcpu0' with parent '23018-5' already present! 08:42:31 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000180)={0x8, 0x10001, 0x8, 0x6, 0x4916}) syz_emit_ethernet(0x76, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x7, 0x4080) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x100, 0x5, 0x3, 0x9, 0x0, 0xaa, 0x9, 0xce, 0x3, 0x7, 0x8, 0x4, 0x363}, {0x100, 0x4, 0x1, 0x7c000000000000, 0x101, 0x0, 0x5, 0x1, 0x1, 0x8000, 0x100, 0x1, 0xff}, {0x7, 0xaeae, 0x0, 0x1, 0xfe5, 0x100000000, 0xfffffffffffffc00, 0x0, 0x1, 0x2cd, 0x81, 0x2, 0x200}], 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000008a90f5f92097d9129e62000000000000000000e9ffffff212b000000000000000000"]}) 08:42:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x750, {0x2, 0x4e20, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}, 0x10e, 0x4000000000, 0x80000000000, 0xfffffffffffffffe}) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x10200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200)=0x3, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) uname(&(0x7f0000000000)=""/152) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:31 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setparam(r0, &(0x7f0000000080)) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xbe13725932cf96ed, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0xf6) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x3, 0x4, 0x1}}, 0x26) 08:42:31 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 08:42:31 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x20000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 338.299215][T23272] syz_tun: refused to change device tx_queue_len 08:42:32 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x3e0, &(0x7f0000000040), 0x1}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x200, 0x1, 0x1, 0x1, 0x9, 0x7}, &(0x7f0000000240)=0x20) r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="4c0000001200ffd5acae259567a2830007a600800000000000000068354046002c001d000cfa1a1ff2a7a5ff34cb5f39a7f32314c7a4bb5dec30de33a49868c62a2ca63d0000000000000000", 0x4c}], 0x1, 0x0, 0x49}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 08:42:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x2}, 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0x2710}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x1004, 0xbbab45b678e83d7}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x11, &(0x7f0000000000)={0x0, @rand_addr, 0x0, 0x0, 'sh\xd6\x00\x00\x80\x00\x93:\x00'}, 0x2c) [ 338.344764][T23260] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:42:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000040)='./file0\x00', 0x2c801, 0x40) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0) [ 338.407331][T23380] syz_tun: refused to change device tx_queue_len [ 338.444252][T23260] CPU: 1 PID: 23260 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 338.452187][T23260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.462234][T23260] Call Trace: [ 338.465674][T23260] dump_stack+0x172/0x1f0 [ 338.465688][T23260] dump_header+0x10b/0x82d [ 338.465699][T23260] ? oom_kill_process+0x94/0x3f0 [ 338.465710][T23260] oom_kill_process.cold+0x10/0x15 [ 338.465722][T23260] out_of_memory+0x79a/0x12c0 [ 338.465736][T23260] ? lock_downgrade+0x920/0x920 [ 338.465756][T23260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 338.500208][T23260] ? oom_killer_disable+0x280/0x280 08:42:32 executing program 1: r0 = gettid() pipe2$9p(&(0x7f0000000040), 0x4000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0xac901002c64272b5) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/250) setuid(r1) fspick(0xffffffffffffff9c, 0x0, 0x0) [ 338.505582][T23260] ? __kasan_check_read+0x11/0x20 [ 338.505600][T23260] mem_cgroup_out_of_memory+0x1d8/0x240 [ 338.505612][T23260] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 338.505630][T23260] ? do_raw_spin_unlock+0x57/0x270 [ 338.527094][T23260] ? _raw_spin_unlock+0x2d/0x50 [ 338.531942][T23260] try_charge+0xf4b/0x1440 [ 338.531959][T23260] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 338.541900][T23260] ? percpu_ref_tryget_live+0x111/0x290 [ 338.547465][T23260] ? get_mem_cgroup_from_mm+0x16/0x320 08:42:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4000000) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x100000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x37dfde8c28d4f77c, @dev={[], 0x13}}, 0x8, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_bridge\x00'}) [ 338.552930][T23260] ? get_mem_cgroup_from_mm+0x156/0x320 [ 338.558486][T23260] mem_cgroup_try_charge+0x136/0x590 [ 338.563779][T23260] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 338.570030][T23260] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 338.575680][T23260] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 338.581667][T23260] ? defrag_store+0x360/0x360 [ 338.586431][T23260] ? lock_downgrade+0x920/0x920 [ 338.591284][T23260] ? swp_swapcount+0x540/0x540 [ 338.596058][T23260] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 338.601958][T23260] ? __kasan_check_read+0x11/0x20 [ 338.606989][T23260] ? do_raw_spin_unlock+0x57/0x270 [ 338.612108][T23260] do_huge_pmd_wp_page+0x806/0x2270 [ 338.613773][T23395] misc userio: Invalid payload size [ 338.617310][T23260] ? __split_huge_pmd+0x27e0/0x27e0 [ 338.617325][T23260] ? do_wp_page+0x4a1/0x14d0 [ 338.617341][T23260] ? pmd_val+0x85/0x100 [ 338.636430][T23260] ? add_mm_counter_fast.part.0+0x40/0x40 [ 338.642316][T23260] __handle_mm_fault+0x14cf/0x3f20 [ 338.647448][T23260] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 338.652985][T23260] ? __kasan_check_read+0x11/0x20 [ 338.653002][T23260] ? trace_hardirqs_on+0x67/0x240 [ 338.653020][T23260] handle_mm_fault+0x1b5/0x6b0 [ 338.667790][T23260] __do_page_fault+0x536/0xdd0 [ 338.672565][T23260] do_page_fault+0x38/0x590 [ 338.677068][T23260] page_fault+0x39/0x40 [ 338.681216][T23260] RIP: 0033:0x4006c4 [ 338.685107][T23260] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 338.704710][T23260] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 338.710778][T23260] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 338.718838][T23260] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 338.726804][T23260] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 338.734788][T23260] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 338.742766][T23260] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x0, 0x4000}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3fffffffc0, 0x100) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) 08:42:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x80000) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 08:42:32 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0xf462ff92680d04d8, r3, 0x0, [], r1, r2, 0x205, 0x2}, 0x3c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @dev, 0x0}, &(0x7f00000000c0)=0xc) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'v|\xb7\xe9FpJ\x00\x00\x00\x1aT\x00', r4}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) bind$can_raw(r7, &(0x7f0000000040)={0x1d, r6}, 0x10) close(r0) [ 338.751883][ T26] audit: type=1800 audit(1567759352.516:56): pid=23404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16551 res=0 [ 338.796542][T23260] memory: usage 307200kB, limit 307200kB, failcnt 3100 [ 338.804005][T23260] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 338.810976][T23260] Memory cgroup stats for /syz4: [ 338.811087][T23260] anon 287559680 [ 338.811087][T23260] file 184320 [ 338.811087][T23260] kernel_stack 3407872 [ 338.811087][T23260] slab 7438336 [ 338.811087][T23260] sock 0 [ 338.811087][T23260] shmem 0 [ 338.811087][T23260] file_mapped 0 [ 338.811087][T23260] file_dirty 0 [ 338.811087][T23260] file_writeback 0 [ 338.811087][T23260] anon_thp 253755392 [ 338.811087][T23260] inactive_anon 0 [ 338.811087][T23260] active_anon 287563776 [ 338.811087][T23260] inactive_file 0 [ 338.811087][T23260] active_file 0 [ 338.811087][T23260] unevictable 0 [ 338.811087][T23260] slab_reclaimable 1622016 [ 338.811087][T23260] slab_unreclaimable 5816320 [ 338.811087][T23260] pgfault 17358 [ 338.811087][T23260] pgmajfault 0 [ 338.811087][T23260] workingset_refault 0 [ 338.811087][T23260] workingset_activate 0 [ 338.811087][T23260] workingset_nodereclaim 0 [ 338.811087][T23260] pgrefill 442 [ 338.811087][T23260] pgscan 474 [ 338.811087][T23260] pgsteal 70 [ 338.811087][T23260] pgactivate 363 [ 338.910888][T23260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13963,uid=0 [ 338.929475][T23260] Memory cgroup out of memory: Killed process 13963 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 338.961123][T23321] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 338.977226][T23321] CPU: 1 PID: 23321 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 338.985133][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.995962][T23321] Call Trace: [ 338.999253][T23321] dump_stack+0x172/0x1f0 [ 339.003580][T23321] dump_header+0x10b/0x82d [ 339.007989][T23321] ? oom_kill_process+0x94/0x3f0 [ 339.012919][T23321] oom_kill_process.cold+0x10/0x15 [ 339.018028][T23321] out_of_memory+0x79a/0x12c0 [ 339.022730][T23321] ? lock_downgrade+0x920/0x920 [ 339.027587][T23321] ? oom_killer_disable+0x280/0x280 [ 339.032785][T23321] mem_cgroup_out_of_memory+0x1d8/0x240 [ 339.038329][T23321] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 339.043980][T23321] ? do_raw_spin_unlock+0x57/0x270 [ 339.049091][T23321] ? _raw_spin_unlock+0x2d/0x50 [ 339.053948][T23321] try_charge+0xa2d/0x1440 08:42:32 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x200}, {r3, 0x8100}, {r1, 0x200}, {r4, 0xb0a6b79b561ab58e}], 0x4, &(0x7f0000000100)={r5, r6+10000000}, &(0x7f0000000140)={0x6}, 0x8) [ 339.058449][T23321] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 339.063992][T23321] ? percpu_ref_tryget_live+0x111/0x290 [ 339.069714][T23321] ? get_mem_cgroup_from_mm+0x16/0x320 [ 339.075174][T23321] ? get_mem_cgroup_from_mm+0x156/0x320 [ 339.081157][T23321] mem_cgroup_try_charge+0x136/0x590 [ 339.086446][T23321] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 339.092792][T23321] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 339.098451][T23321] wp_page_copy+0x41e/0x15e0 [ 339.103026][T23321] ? page_trans_huge_mapcount+0x166/0x450 [ 339.108748][T23321] ? pmd_pfn+0x1d0/0x1d0 [ 339.112997][T23321] ? lock_downgrade+0x920/0x920 [ 339.117872][T23321] ? swp_swapcount+0x540/0x540 [ 339.122627][T23321] ? do_raw_spin_unlock+0x57/0x270 [ 339.122641][T23321] ? __kasan_check_read+0x11/0x20 [ 339.122657][T23321] ? do_raw_spin_unlock+0x57/0x270 [ 339.132776][T23321] do_wp_page+0x499/0x14d0 [ 339.132792][T23321] ? finish_mkwrite_fault+0x570/0x570 [ 339.132810][T23321] __handle_mm_fault+0x22f1/0x3f20 [ 339.152751][T23321] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 339.158296][T23321] ? __kasan_check_read+0x11/0x20 [ 339.163329][T23321] ? trace_hardirqs_on+0x67/0x240 [ 339.168356][T23321] handle_mm_fault+0x1b5/0x6b0 [ 339.173127][T23321] __do_page_fault+0x536/0xdd0 [ 339.177990][T23321] do_page_fault+0x38/0x590 [ 339.182513][T23321] page_fault+0x39/0x40 [ 339.186663][T23321] RIP: 0033:0x404f08 [ 339.190558][T23321] Code: 85 02 00 00 80 3d 8f b5 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 7c b5 66 00 39 45 24 0f 84 e7 01 00 00 44 8b a5 80 00 00 00 b3 d5 ff ff 48 2b 05 fc 30 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 339.210162][T23321] RSP: 002b:00007efc99660c90 EFLAGS: 00010246 [ 339.216308][T23321] RAX: 00007efc9b662000 RBX: 0000000000000000 RCX: 0000000000459879 [ 339.224259][T23321] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 339.232208][T23321] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 339.240257][T23321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.248210][T23321] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff 08:42:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) io_setup(0x200, &(0x7f0000000140)=0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x81, 0x8, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x343, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}]) [ 339.323794][T23321] memory: usage 303632kB, limit 307200kB, failcnt 3100 [ 339.335932][T23321] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 339.370559][T23321] Memory cgroup stats for /syz4: [ 339.370656][T23321] anon 285376512 [ 339.370656][T23321] file 184320 [ 339.370656][T23321] kernel_stack 3407872 [ 339.370656][T23321] slab 7438336 [ 339.370656][T23321] sock 0 [ 339.370656][T23321] shmem 0 [ 339.370656][T23321] file_mapped 0 [ 339.370656][T23321] file_dirty 0 [ 339.370656][T23321] file_writeback 0 [ 339.370656][T23321] anon_thp 249561088 [ 339.370656][T23321] inactive_anon 0 [ 339.370656][T23321] active_anon 285380608 [ 339.370656][T23321] inactive_file 0 [ 339.370656][T23321] active_file 0 [ 339.370656][T23321] unevictable 0 [ 339.370656][T23321] slab_reclaimable 1622016 [ 339.370656][T23321] slab_unreclaimable 5816320 [ 339.370656][T23321] pgfault 17358 [ 339.370656][T23321] pgmajfault 0 [ 339.370656][T23321] workingset_refault 0 [ 339.370656][T23321] workingset_activate 0 [ 339.370656][T23321] workingset_nodereclaim 0 [ 339.370656][T23321] pgrefill 442 [ 339.370656][T23321] pgscan 474 [ 339.370656][T23321] pgsteal 70 [ 339.370656][T23321] pgactivate 363 [ 339.500062][T23321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13919,uid=0 [ 339.543246][T23321] Memory cgroup out of memory: Killed process 13919 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 339.706343][T23261] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 339.716842][T23261] CPU: 1 PID: 23261 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 339.724731][T23261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.734881][T23261] Call Trace: [ 339.738334][T23261] dump_stack+0x172/0x1f0 [ 339.742694][T23261] dump_header+0x10b/0x82d [ 339.747128][T23261] oom_kill_process.cold+0x10/0x15 [ 339.752224][T23261] out_of_memory+0x79a/0x12c0 [ 339.756890][T23261] ? __this_cpu_preempt_check+0x3a/0x210 [ 339.762502][T23261] ? retint_kernel+0x2b/0x2b [ 339.767300][T23261] ? oom_killer_disable+0x280/0x280 [ 339.772571][T23261] mem_cgroup_out_of_memory+0x1d8/0x240 [ 339.778164][T23261] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 339.783781][T23261] ? do_raw_spin_unlock+0x57/0x270 [ 339.788874][T23261] ? _raw_spin_unlock+0x2d/0x50 [ 339.793872][T23261] try_charge+0xa2d/0x1440 [ 339.798290][T23261] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 339.803829][T23261] ? percpu_ref_tryget_live+0x111/0x290 [ 339.809399][T23261] ? get_mem_cgroup_from_mm+0x16/0x320 [ 339.814877][T23261] ? get_mem_cgroup_from_mm+0x156/0x320 [ 339.820424][T23261] mem_cgroup_try_charge+0x136/0x590 [ 339.825695][T23261] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 339.831311][T23261] wp_page_copy+0x41e/0x15e0 [ 339.835885][T23261] ? page_trans_huge_mapcount+0x166/0x450 [ 339.841811][T23261] ? pmd_pfn+0x1d0/0x1d0 [ 339.846049][T23261] ? lock_downgrade+0x920/0x920 [ 339.850894][T23261] ? swp_swapcount+0x540/0x540 [ 339.855653][T23261] ? __kasan_check_read+0x11/0x20 [ 339.860699][T23261] ? do_raw_spin_unlock+0x57/0x270 [ 339.865796][T23261] do_wp_page+0x499/0x14d0 [ 339.870205][T23261] ? finish_mkwrite_fault+0x570/0x570 [ 339.875576][T23261] __handle_mm_fault+0x22f1/0x3f20 [ 339.880677][T23261] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 339.886222][T23261] ? __kasan_check_read+0x11/0x20 [ 339.891245][T23261] ? __this_cpu_preempt_check+0x3a/0x210 [ 339.896862][T23261] ? trace_hardirqs_on+0x67/0x240 [ 339.901887][T23261] handle_mm_fault+0x1b5/0x6b0 [ 339.906632][T23261] __do_page_fault+0x536/0xdd0 [ 339.911392][T23261] do_page_fault+0x38/0x590 [ 339.915888][T23261] page_fault+0x39/0x40 [ 339.920028][T23261] RIP: 0033:0x404f08 [ 339.923902][T23261] Code: 85 02 00 00 80 3d 8f b5 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 7c b5 66 00 39 45 24 0f 84 e7 01 00 00 44 8b a5 80 00 00 00 b3 d5 ff ff 48 2b 05 fc 30 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 339.943923][T23261] RSP: 002b:00007efc99660c90 EFLAGS: 00010246 [ 339.949973][T23261] RAX: 00007efc9b662000 RBX: 00000000000002fa RCX: 0000000000459879 [ 339.957968][T23261] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 339.966121][T23261] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 339.974080][T23261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.982040][T23261] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 339.993598][T23261] memory: usage 299228kB, limit 307200kB, failcnt 3100 [ 340.000514][T23261] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 340.007469][T23261] Memory cgroup stats for /syz4: [ 340.007956][T23261] anon 281223168 [ 340.007956][T23261] file 184320 [ 340.007956][T23261] kernel_stack 3407872 [ 340.007956][T23261] slab 7438336 [ 340.007956][T23261] sock 0 [ 340.007956][T23261] shmem 0 [ 340.007956][T23261] file_mapped 0 [ 340.007956][T23261] file_dirty 0 [ 340.007956][T23261] file_writeback 0 [ 340.007956][T23261] anon_thp 245366784 [ 340.007956][T23261] inactive_anon 0 [ 340.007956][T23261] active_anon 281227264 [ 340.007956][T23261] inactive_file 0 [ 340.007956][T23261] active_file 0 [ 340.007956][T23261] unevictable 0 [ 340.007956][T23261] slab_reclaimable 1622016 [ 340.007956][T23261] slab_unreclaimable 5816320 [ 340.007956][T23261] pgfault 17358 [ 340.007956][T23261] pgmajfault 0 [ 340.007956][T23261] workingset_refault 0 [ 340.007956][T23261] workingset_activate 0 [ 340.007956][T23261] workingset_nodereclaim 0 [ 340.007956][T23261] pgrefill 442 [ 340.007956][T23261] pgscan 474 [ 340.007956][T23261] pgsteal 70 [ 340.007956][T23261] pgactivate 363 [ 340.103641][T23261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13892,uid=0 [ 340.119348][T23261] Memory cgroup out of memory: Killed process 13892 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 340.136144][ T1057] oom_reaper: reaped process 13892 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 08:42:33 executing program 0: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) getrusage(0x0, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x224000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x40, @remote, 0x4}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x1, @empty, 0xffff}], 0x68) 08:42:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20008008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000), 0x4) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r0, r3, 0x0, 0x88000fc000000) 08:42:33 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x200000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:33 executing program 2: shmat(0x0, &(0x7f0000a00000/0x600000)=nil, 0x0) sched_setaffinity(0x0, 0xa64, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 08:42:33 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x2213}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x5, 0x6, 0xd7dbbf3fd47c7fe2, 0x1, 0x40, 0x2, 0x0, 0x200, r4}, &(0x7f00000002c0)=0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x730, &(0x7f0000106000/0x2000)=nil, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) socketpair(0x3, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) 08:42:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts={0x2c, 0x0, [], [@padn={0x1, 0x1, [0x0]}]}, 0x10) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000), 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 08:42:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0xa, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) umount2(0x0, 0x0) 08:42:34 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="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"/373) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000009000/0x3000)=nil) 08:42:34 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00004b7000/0x4000)=nil, 0x4000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000080)=""/202, 0xca) r2 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='@keyring\x97bdeveth0posix_acl_accesscgroupprocvmnet0vmnet0{\'em0vboxnet1\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r2, 0x4) 08:42:34 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$FICLONE(r0, 0x40049409, r1) 08:42:34 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3e) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000040)={0x5554, 0x1ff, 0x2, 0x1ff, 0x2, [{0x5, 0x401, 0x80000001, 0x0, 0x0, 0x100}, {0x2, 0x80000001, 0x1ff, 0x0, 0x0, 0x400}]}) dup2(r1, r2) tkill(r0, 0x16) pipe(&(0x7f0000000000)={0xffffffffffffffff}) dup2(r6, r4) 08:42:34 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 08:42:34 executing program 0: gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) creat(0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfffffe55, 0x100100002) [ 340.718953][ T26] audit: type=1800 audit(1567759354.486:57): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17057 res=0 08:42:34 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x200000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:34 executing program 1: r0 = syz_open_dev$midi(&(0x7f00000005c0)='/dev/midi#\x00', 0x81, 0x119000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x800002, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)={r1, r2}) r3 = gettid() r4 = semget$private(0x0, 0x2, 0x0) semop(r4, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(r4, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000200)=""/134) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x64102020}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x234, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb791}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x114, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x233e8106}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b0bc931}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6f1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffffffffffffa, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @remote, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfe0000000000}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x234}}, 0xc08d) getsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000040)=0x893a, &(0x7f0000000100)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a4ab12f728db4b2b2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf574b763e3062d037dca291318d0a17270bbce74b47888318b04aeb0747555ba16ea10e6ddb915ceb6397e514f3482ca3c22e31ebc6da732ee3d854a1d3b9b3c0887a22cf550250fc7204eaa3d026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe2229aad8dc604bb8c133e8382f58f1bd2aa7f74ae63383315926d787838c32a7", 0xa8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40854) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:42:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) connect$l2tp(r1, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) 08:42:34 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x1040000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:34 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0xedbc1566748cde9e, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1221000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xfff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000082}, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0xcc0100, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 341.149655][T23914] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 341.214445][T23914] CPU: 0 PID: 23914 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 341.222501][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.232563][T23914] Call Trace: [ 341.235852][T23914] dump_stack+0x172/0x1f0 [ 341.235866][T23914] dump_header+0x10b/0x82d [ 341.235875][T23914] ? oom_kill_process+0x94/0x3f0 [ 341.235886][T23914] oom_kill_process.cold+0x10/0x15 [ 341.235898][T23914] out_of_memory+0x79a/0x12c0 [ 341.235918][T23914] ? lock_downgrade+0x920/0x920 [ 341.265484][T23914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.271739][T23914] ? oom_killer_disable+0x280/0x280 [ 341.276961][T23914] mem_cgroup_out_of_memory+0x1d8/0x240 [ 341.282525][T23914] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 341.288180][T23914] ? do_raw_spin_unlock+0x57/0x270 [ 341.293300][T23914] ? _raw_spin_unlock+0x2d/0x50 [ 341.298161][T23914] try_charge+0xf4b/0x1440 [ 341.302587][T23914] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 341.308138][T23914] ? percpu_ref_tryget_live+0x111/0x290 08:42:35 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x10000) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 341.313712][T23914] ? get_mem_cgroup_from_mm+0x16/0x320 [ 341.319177][T23914] ? get_mem_cgroup_from_mm+0x156/0x320 [ 341.324726][T23914] mem_cgroup_try_charge+0x136/0x590 [ 341.330020][T23914] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 341.336274][T23914] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 341.341932][T23914] wp_page_copy+0x41e/0x15e0 [ 341.346534][T23914] ? page_trans_huge_mapcount+0x166/0x450 [ 341.352269][T23914] ? pmd_pfn+0x1d0/0x1d0 [ 341.356523][T23914] ? lock_downgrade+0x920/0x920 08:42:35 executing program 0: write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x800000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x1, 0x7fffffff}, {0x9, 0x74}, 0x3, 0x4, 0x8001}) [ 341.361402][T23914] ? swp_swapcount+0x540/0x540 [ 341.366193][T23914] ? do_raw_spin_unlock+0x57/0x270 [ 341.372291][T23914] ? __kasan_check_read+0x11/0x20 [ 341.377334][T23914] ? do_raw_spin_unlock+0x57/0x270 [ 341.382457][T23914] do_wp_page+0x499/0x14d0 [ 341.386886][T23914] ? finish_mkwrite_fault+0x570/0x570 [ 341.392324][T23914] __handle_mm_fault+0x22f1/0x3f20 [ 341.397467][T23914] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 341.403021][T23914] ? __kasan_check_read+0x11/0x20 [ 341.408043][T23914] ? trace_hardirqs_on+0x67/0x240 [ 341.408059][T23914] handle_mm_fault+0x1b5/0x6b0 [ 341.408075][T23914] __do_page_fault+0x536/0xdd0 [ 341.408090][T23914] do_page_fault+0x38/0x590 [ 341.408108][T23914] page_fault+0x39/0x40 [ 341.431363][T23914] RIP: 0033:0x404f08 [ 341.435262][T23914] Code: 85 02 00 00 80 3d 8f b5 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 7c b5 66 00 39 45 24 0f 84 e7 01 00 00 44 8b a5 80 00 00 00 b3 d5 ff ff 48 2b 05 fc 30 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 341.454912][T23914] RSP: 002b:00007efc99660c90 EFLAGS: 00010246 [ 341.461012][T23914] RAX: 00007efc9b662000 RBX: 0000000000000000 RCX: 0000000000459879 [ 341.468986][T23914] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 341.468993][T23914] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 341.468998][T23914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.469005][T23914] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 341.501725][T23914] memory: usage 307200kB, limit 307200kB, failcnt 3149 08:42:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) [ 341.508791][T23914] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 341.518837][T23914] Memory cgroup stats for /syz4: [ 341.518934][T23914] anon 287617024 [ 341.518934][T23914] file 184320 [ 341.518934][T23914] kernel_stack 3407872 [ 341.518934][T23914] slab 7438336 [ 341.518934][T23914] sock 0 [ 341.518934][T23914] shmem 0 [ 341.518934][T23914] file_mapped 0 [ 341.518934][T23914] file_dirty 0 [ 341.518934][T23914] file_writeback 0 [ 341.518934][T23914] anon_thp 247463936 [ 341.518934][T23914] inactive_anon 0 [ 341.518934][T23914] active_anon 287621120 [ 341.518934][T23914] inactive_file 0 [ 341.518934][T23914] active_file 0 [ 341.518934][T23914] unevictable 0 [ 341.518934][T23914] slab_reclaimable 1622016 [ 341.518934][T23914] slab_unreclaimable 5816320 [ 341.518934][T23914] pgfault 17556 [ 341.518934][T23914] pgmajfault 0 [ 341.518934][T23914] workingset_refault 0 [ 341.518934][T23914] workingset_activate 0 [ 341.518934][T23914] workingset_nodereclaim 0 [ 341.518934][T23914] pgrefill 442 [ 341.518934][T23914] pgscan 474 [ 341.518934][T23914] pgsteal 70 [ 341.518934][T23914] pgactivate 363 08:42:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40082, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x965a, 0x4) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) write$vnet(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000200)=""/237, 0xed, &(0x7f0000000300)=""/207, 0x2, 0x4}}, 0x68) r3 = dup2(0xffffffffffffffff, r1) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x81, 0x21, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:35 executing program 3: openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 341.615864][T23914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23887,uid=0 [ 341.642649][T24122] IPVS: ftp: loaded support on port[0] = 21 [ 341.650244][T23914] Memory cgroup out of memory: Killed process 23887 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB 08:42:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x1910, &(0x7f0000ff7000/0x3000)=nil) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x900, 0x0) shmctl$SHM_LOCK(r0, 0xb) [ 341.710789][T23904] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 341.745581][T23904] CPU: 0 PID: 23904 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 08:42:35 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x519b73ae, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 341.753522][T23904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.763692][T23904] Call Trace: [ 341.763713][T23904] dump_stack+0x172/0x1f0 [ 341.763729][T23904] dump_header+0x10b/0x82d [ 341.763741][T23904] ? oom_kill_process+0x94/0x3f0 [ 341.763753][T23904] oom_kill_process.cold+0x10/0x15 [ 341.763766][T23904] out_of_memory+0x79a/0x12c0 [ 341.763780][T23904] ? lock_downgrade+0x920/0x920 [ 341.763796][T23904] ? oom_killer_disable+0x280/0x280 [ 341.763815][T23904] ? __kasan_check_read+0x11/0x20 [ 341.775822][T23904] mem_cgroup_out_of_memory+0x1d8/0x240 [ 341.775840][T23904] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 341.817000][T23904] ? do_raw_spin_unlock+0x57/0x270 [ 341.822134][T23904] ? _raw_spin_unlock+0x2d/0x50 [ 341.822150][T23904] try_charge+0xa2d/0x1440 [ 341.822169][T23904] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 341.822182][T23904] ? percpu_ref_tryget_live+0x111/0x290 [ 341.822196][T23904] ? get_mem_cgroup_from_mm+0x16/0x320 [ 341.822215][T23904] ? get_mem_cgroup_from_mm+0x156/0x320 [ 341.822230][T23904] mem_cgroup_try_charge+0x136/0x590 [ 341.822246][T23904] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 341.822261][T23904] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 341.822276][T23904] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 341.822298][T23904] ? defrag_store+0x360/0x360 [ 341.822316][T23904] ? lock_downgrade+0x920/0x920 [ 341.822332][T23904] ? swp_swapcount+0x540/0x540 [ 341.822343][T23904] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 341.822356][T23904] ? __kasan_check_read+0x11/0x20 [ 341.822368][T23904] ? do_raw_spin_unlock+0x57/0x270 [ 341.822383][T23904] do_huge_pmd_wp_page+0x806/0x2270 [ 341.822400][T23904] ? __split_huge_pmd+0x27e0/0x27e0 [ 341.822415][T23904] ? do_wp_page+0x4a1/0x14d0 [ 341.822429][T23904] ? pmd_val+0x85/0x100 [ 341.822441][T23904] ? add_mm_counter_fast.part.0+0x40/0x40 [ 341.822459][T23904] __handle_mm_fault+0x14cf/0x3f20 [ 341.822476][T23904] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 341.822486][T23904] ? __kasan_check_read+0x11/0x20 [ 341.822508][T23904] ? trace_hardirqs_on+0x67/0x240 [ 341.822527][T23904] handle_mm_fault+0x1b5/0x6b0 [ 341.822547][T23904] __do_page_fault+0x536/0xdd0 [ 341.822567][T23904] do_page_fault+0x38/0x590 [ 341.822582][T23904] page_fault+0x39/0x40 [ 341.822593][T23904] RIP: 0033:0x4006c4 [ 341.822608][T23904] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 341.822622][T23904] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 341.859458][T23904] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 341.859466][T23904] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 341.859474][T23904] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 341.859482][T23904] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 341.859496][T23904] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 341.894890][T23904] memory: usage 302840kB, limit 307200kB, failcnt 3149 [ 341.907498][T23904] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 341.914834][T23904] Memory cgroup stats for /syz4: [ 341.914934][T23904] anon 283447296 [ 341.914934][T23904] file 184320 [ 341.914934][T23904] kernel_stack 3407872 [ 341.914934][T23904] slab 7438336 [ 341.914934][T23904] sock 0 [ 341.914934][T23904] shmem 0 [ 341.914934][T23904] file_mapped 0 [ 341.914934][T23904] file_dirty 0 [ 341.914934][T23904] file_writeback 0 [ 341.914934][T23904] anon_thp 247463936 [ 341.914934][T23904] inactive_anon 0 [ 341.914934][T23904] active_anon 283430912 [ 341.914934][T23904] inactive_file 0 [ 341.914934][T23904] active_file 0 [ 341.914934][T23904] unevictable 0 [ 341.914934][T23904] slab_reclaimable 1622016 [ 341.914934][T23904] slab_unreclaimable 5816320 [ 341.914934][T23904] pgfault 17556 [ 341.914934][T23904] pgmajfault 0 [ 341.914934][T23904] workingset_refault 0 [ 341.914934][T23904] workingset_activate 0 [ 341.914934][T23904] workingset_nodereclaim 0 [ 341.914934][T23904] pgrefill 442 [ 341.914934][T23904] pgscan 474 [ 341.914934][T23904] pgsteal 70 [ 341.914934][T23904] pgactivate 363 [ 341.924811][T23904] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23772,uid=0 [ 341.924893][T23904] Memory cgroup out of memory: Killed process 23772 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 341.947879][T23905] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 341.974358][T23905] CPU: 0 PID: 23905 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 341.997960][T23905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 08:42:35 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x80000, 0x100, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xffffffffffffff7f, @rand_addr="83c467b02707c86031ee2a790d52544b", 0x8}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r2, 0x4) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 341.997966][T23905] Call Trace: [ 341.997987][T23905] dump_stack+0x172/0x1f0 [ 341.998006][T23905] dump_header+0x10b/0x82d [ 341.998024][T23905] oom_kill_process.cold+0x10/0x15 [ 341.998040][T23905] out_of_memory+0x79a/0x12c0 [ 341.998056][T23905] ? lock_downgrade+0x920/0x920 [ 341.998074][T23905] ? oom_killer_disable+0x280/0x280 [ 341.998100][T23905] mem_cgroup_out_of_memory+0x1d8/0x240 [ 341.998115][T23905] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 341.998134][T23905] ? do_raw_spin_unlock+0x57/0x270 [ 341.998148][T23905] ? _raw_spin_unlock+0x2d/0x50 [ 341.998166][T23905] try_charge+0xa2d/0x1440 [ 342.028240][T23905] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 342.028256][T23905] ? percpu_ref_tryget_live+0x111/0x290 [ 342.028273][T23905] ? get_mem_cgroup_from_mm+0x16/0x320 [ 342.028294][T23905] ? get_mem_cgroup_from_mm+0x156/0x320 [ 342.028311][T23905] mem_cgroup_try_charge+0x136/0x590 [ 342.028330][T23905] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 342.028348][T23905] wp_page_copy+0x41e/0x15e0 [ 342.028361][T23905] ? page_trans_huge_mapcount+0x166/0x450 [ 342.028380][T23905] ? pmd_pfn+0x1d0/0x1d0 [ 342.028398][T23905] ? lock_downgrade+0x920/0x920 [ 342.028424][T23905] ? swp_swapcount+0x540/0x540 [ 342.051400][T23905] ? trace_hardirqs_on_caller+0x6a/0x240 [ 342.051418][T23905] ? __kasan_check_read+0x11/0x20 [ 342.051433][T23905] ? do_raw_spin_unlock+0x57/0x270 [ 342.051452][T23905] do_wp_page+0x499/0x14d0 [ 342.051471][T23905] ? finish_mkwrite_fault+0x570/0x570 [ 342.051493][T23905] __handle_mm_fault+0x22f1/0x3f20 [ 342.154921][T23905] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 342.154935][T23905] ? __kasan_check_read+0x11/0x20 [ 342.154961][T23905] ? trace_hardirqs_on+0x67/0x240 [ 342.154981][T23905] handle_mm_fault+0x1b5/0x6b0 [ 342.155002][T23905] __do_page_fault+0x536/0xdd0 [ 342.155024][T23905] do_page_fault+0x38/0x590 [ 342.155043][T23905] page_fault+0x39/0x40 [ 342.155054][T23905] RIP: 0033:0x404f08 [ 342.155069][T23905] Code: 85 02 00 00 80 3d 8f b5 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 7c b5 66 00 39 45 24 0f 84 e7 01 00 00 44 8b a5 80 00 00 00 b3 d5 ff ff 48 2b 05 fc 30 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 342.155077][T23905] RSP: 002b:00007efc99660c90 EFLAGS: 00010246 [ 342.194962][T23905] RAX: 00007efc9b662000 RBX: 0000000000000304 RCX: 0000000000459879 [ 342.194970][T23905] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 342.194978][T23905] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 342.194986][T23905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.194994][T23905] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 342.205821][T23905] memory: usage 299520kB, limit 307200kB, failcnt 3149 [ 342.276330][T23905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 342.310181][T23905] Memory cgroup stats for /syz4: [ 342.310871][T23905] anon 281182208 [ 342.310871][T23905] file 184320 [ 342.310871][T23905] kernel_stack 3407872 [ 342.310871][T23905] slab 7438336 [ 342.310871][T23905] sock 0 [ 342.310871][T23905] shmem 0 [ 342.310871][T23905] file_mapped 0 [ 342.310871][T23905] file_dirty 0 [ 342.310871][T23905] file_writeback 0 [ 342.310871][T23905] anon_thp 243269632 [ 342.310871][T23905] inactive_anon 0 [ 342.310871][T23905] active_anon 281186304 [ 342.310871][T23905] inactive_file 0 [ 342.310871][T23905] active_file 0 [ 342.310871][T23905] unevictable 0 [ 342.310871][T23905] slab_reclaimable 1622016 [ 342.310871][T23905] slab_unreclaimable 5816320 [ 342.310871][T23905] pgfault 17556 [ 342.310871][T23905] pgmajfault 0 [ 342.310871][T23905] workingset_refault 0 [ 342.310871][T23905] workingset_activate 0 [ 342.310871][T23905] workingset_nodereclaim 0 [ 342.310871][T23905] pgrefill 442 [ 342.310871][T23905] pgscan 474 [ 342.310871][T23905] pgsteal 70 [ 342.310871][T23905] pgactivate 363 [ 342.321593][T23905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13874,uid=0 [ 342.337742][T23905] Memory cgroup out of memory: Killed process 13874 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 342.709987][ T1057] oom_reaper: reaped process 13874 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 342.812074][T24136] IPVS: ftp: loaded support on port[0] = 21 08:42:37 executing program 5: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x0) ioctl$int_out(r0, 0x810080804537, 0x0) 08:42:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/57, 0x39) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f000002}) close(r1) syz_open_dev$video4linux(0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000100)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="757365720600797a23dc1819af2a33eaeacbfdeb46c500003df5b6dc2bab3e735c4acf234c9c70d011347cca24cfb6a5c7d679fb59de0f2ba27c33da7148b07ad2340381ee89ede87965c6000000000000000700000000d4753a00ff1da583f63bd8a343148f668e38c9105032978ac9e8017b18ae3e2aa4e7d6fc0fea46750df0a63689e7385078f7f3f8becf39963bcc483961042029535451d91dc10df26b3d530944e3dc5e9c2cf1bb0a841b7823e1cf3c24e51aa07468d4d788f7f0761200913dc1f494fad2f7ef5176380046"], &(0x7f0000000040)='/dev/usbmon#\x00', 0xd, 0x1) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 08:42:37 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x10000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x9, 0x54400) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x7}, 0x4) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4d28dae61333c37e, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x50) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x356c0e9e33f78e89, 0x1, 0x1e}) 08:42:37 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x3f00000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:37 executing program 2: prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x140, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x10}, @empty, @multicast1, @loopback, 0x4, 0xc7e3b9e609a7b79d}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x1, @dev={0xac, 0x14, 0x14, 0x22}, 0x2, 0x80000000}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x29}}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) r0 = gettid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400003, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0x80, 0x7fffffff}) tkill(r0, 0x38) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000040)) 08:42:37 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x79b1e7006d6f783a) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000140)=0x7) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="cd390b0830f2ffffffffffff86dd6002290f0030000000000000000000000000ffff00000000ff020000000000000000000000000001020090780000000060d5cae20000000000000000000000000000007db85d885a724ac821226c04001f0000000000ff02"], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000040100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x1, 0x0) 08:42:38 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semctl$SEM_STAT(r0, 0x2, 0x12, 0x0) [ 344.161088][T24470] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.189809][T24470] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (32 blocks) 08:42:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xe29}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000) fstatfs(r1, &(0x7f00000000c0)=""/124) 08:42:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)=r3) r4 = getpid() tgkill(0xffffffffffffffff, r4, 0x2a) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) 08:42:38 executing program 5: socket$isdn(0x22, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x20082, 0x174) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000017c0)={r4, r5, 0x9, 0x99, &(0x7f0000001700)="1512913b6306ec542212d7f330a07d1a4d1baacda9b8f55631fbb29d95adea2abc117f2c1c0c16a5d05b194185dc094d50211ec2fea506a832ada762644937e45da66eba44a0cbacf650c8ae137ba9ce215dacc953272c86593cacfd9f116a40783281aad891197d1647d958aa354b97d7d39557387ce59769734fa1884051a9daec5123f3e754391144d59cccf4ff1c87531795a4f698cf45", 0x4, 0x6, 0x7, 0xfff, 0x3, 0x2, 0x5, 'syz0\x00'}) accept4$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000016c0)=0x14, 0x800) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) preadv(r2, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/130, 0x82}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000001400)=""/165, 0xa5}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000014c0)=""/247, 0xf7}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f00000015c0)=""/102, 0x66}], 0x8, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 08:42:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) dup3(r0, r1, 0x0) 08:42:38 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x4000000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:38 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') writev(r0, &(0x7f0000001880)=[{&(0x7f0000000400)="1e65591ba43926471410ead81f5e6e5c21cca477daf21748d62b44f4ab6aff2b84df47a7e7682f9e6ea0b82d0adc56bad5e52f7f0ca7dd9d5387701af18460d816656d118a0334acf701a34d32348e3664f66d588576a8a309788a1e65ac0f10ff1785817d241a05906b1b569039609480391dbf8bfa5b43593c9842a7708ade28a5d6384d5acb62089b2b468fbd6bdf1087d0bf84dc080086ef4423d26141aed6bfafdecbe9aba5a89cf1bb2629449d679d00a013c475942bdf63c4f77db5b1b9e9bd67ec3f324394ef4095fbde7b7a666ce1790dc69de3cb075deaaff65fbd65eb91ee84ce6e", 0xe7}, {&(0x7f0000000000)="81919cf1", 0x4}, {&(0x7f0000000140)="e3b93d4488827f8968bba21199be839b3c5a24f38fc97c26de", 0x19}, {&(0x7f0000000340)="c82b8186394f4862db879e17f32e70fb622a4d6eeaa44050b09cedc8f9aef8394b7a08ca50aaba0387d9b94fc4012ed0d9525706a48f47ad9aba6cb01ecd7724a0a694b8dab247bc4c19f718", 0x4c}, {&(0x7f0000000500)="b2a8b82e96e1c162a6e1ff83c13496fab8dad0c16eb35e5d6de4c86aa3a88125cc6e5f28a964af97f3f581837e03f90f891419d971adce7aaccfc34c26201998949a404526764bd9d9d4be6fc3f834a85ee1fdfe9f940cefd8a91aff20b19cd983e97842a273e94b3bf9df2477d80f43940a2c4e97a7bb8722412c6e4a5fb6e87f8f29f0821a590d71426449d958d91d283c51d5c0e7d01e676ad60f13092ace1cf1e0ebf1bc709d7703a90065dee0a23448d616620acb3f3d41758c580ee08c9c050cf65249946a99bce819459ca00c1c", 0xd1}, {&(0x7f0000000600)="6e7b85fc83e2f6abe262e9f6f207de0651f10d2e44f07359f02cae4faec372e3dc2ad5cc03bdc6b5dd85f473636987c4fa12f65680e3932d0803866e2f2004dafb3b599c55bd2ad6ae05284165b70655a1b55a46c69c83360b5cd58b022328340dd8e4bc3ed092d40bee", 0x6a}, {&(0x7f0000000680)="e9ed303edebe597de17cbb4dca6e4bcd23d0a53b93ced1508177c8e84e1699556ef2fc1525168913f3aeaa6b3b082c12e47df87bbf327546973c3961101ab7b41ee854f46ddf09e2eda3340a75a546a5eb6f3a7753d9deea7a43eb391e7bab7e69ea27956fc69b07130f7fab04c551f8608f4789f15c8361ed97d4dfc8a2d720e9fa90002071b77f70840a7b98a3db6b187f7262", 0x94}, {&(0x7f0000000740)="31379fb421a38650037bf07056ff6a0acaf2eeedaf63f385e7d6baf7e90b2f52b6c770fdc1abcfc0e86c460e20364ec95ccc3aed9443d4413b8fea0efd4a5b58320782ab21377382d0596e73c59f7baa4cf2aaf3cf5dfe618de0c0d0a54b705ecd9f55d2fa0d8aa665547a2ed89d209156f83d43f3d966428b3a7ea60af1267ba597d9956a9c9b21f385516787fcf674b2500538fc7e49cf74253060af7382836e", 0xa1}, {&(0x7f0000000800)="52ec60d49b710c275c2b56256bc71aba3c5a20a3cbcef85a01c3e88cd9a639ca55230e3ae0e63095b0c32cb3b3a9ea07e36ec6da8d7b688abca15f9f4421132f3048dd493a70a331ba733d987d41120fadef", 0x52}, {&(0x7f0000000880)="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", 0x1000}], 0xa) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000003c0)='./file0\x00', 0x2) 08:42:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='\x0edtofs\x00', 0x135140, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000500)=""/208, 0xd0}], 0x1, 0xbfffffff) 08:42:38 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000100), 0x4) r2 = getpgrp(0xffffffffffffffff) r3 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) r4 = getuid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x8}, [{0x2, 0x1, r3}, {0x2, 0x4, r4}], {0x4, 0x3}, [{0x8, 0x448a11c554cf5539, r5}], {0x10, 0x1}, {0x20, 0x4}}, 0x3c, 0x2) r6 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:38 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x1, 0x4) accept4$alg(r1, 0x0, 0x0, 0x800) r2 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [0x0, 0x800000000000000], &(0x7f0000000000)={0x98f90a, 0xd408, [], @p_u8=&(0x7f0000000140)}}) [ 344.847979][T24608] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 344.965455][T24608] CPU: 1 PID: 24608 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 344.973401][T24608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.983460][T24608] Call Trace: [ 344.986764][T24608] dump_stack+0x172/0x1f0 [ 344.991100][T24608] dump_header+0x10b/0x82d [ 344.995517][T24608] ? oom_kill_process+0x94/0x3f0 [ 345.000461][T24608] oom_kill_process.cold+0x10/0x15 [ 345.005590][T24608] out_of_memory+0x79a/0x12c0 [ 345.010273][T24608] ? lock_downgrade+0x920/0x920 [ 345.015142][T24608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.021479][T24608] ? oom_killer_disable+0x280/0x280 [ 345.026694][T24608] ? __kasan_check_read+0x11/0x20 [ 345.031815][T24608] mem_cgroup_out_of_memory+0x1d8/0x240 [ 345.037402][T24608] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 345.043044][T24608] ? do_raw_spin_unlock+0x57/0x270 [ 345.048164][T24608] ? _raw_spin_unlock+0x2d/0x50 [ 345.053025][T24608] try_charge+0xf4b/0x1440 [ 345.057450][T24608] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 345.063007][T24608] ? percpu_ref_tryget_live+0x111/0x290 [ 345.068560][T24608] ? get_mem_cgroup_from_mm+0x16/0x320 [ 345.074037][T24608] ? get_mem_cgroup_from_mm+0x156/0x320 [ 345.079587][T24608] mem_cgroup_try_charge+0x136/0x590 [ 345.084882][T24608] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 345.091308][T24608] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 345.096966][T24608] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 345.102975][T24608] ? defrag_store+0x360/0x360 [ 345.107668][T24608] ? lock_downgrade+0x920/0x920 [ 345.112540][T24608] ? swp_swapcount+0x540/0x540 [ 345.117310][T24608] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 345.123210][T24608] ? __kasan_check_read+0x11/0x20 [ 345.128414][T24608] ? do_raw_spin_unlock+0x57/0x270 [ 345.133755][T24608] do_huge_pmd_wp_page+0x806/0x2270 [ 345.138977][T24608] ? __split_huge_pmd+0x27e0/0x27e0 [ 345.144494][T24608] ? do_wp_page+0x4a1/0x14d0 [ 345.149658][T24608] ? pmd_val+0x85/0x100 [ 345.153932][T24608] ? add_mm_counter_fast.part.0+0x40/0x40 [ 345.159697][T24608] __handle_mm_fault+0x14cf/0x3f20 [ 345.164819][T24608] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 345.170378][T24608] ? __kasan_check_read+0x11/0x20 [ 345.175412][T24608] ? trace_hardirqs_on+0x67/0x240 [ 345.180800][T24608] handle_mm_fault+0x1b5/0x6b0 [ 345.185672][T24608] __do_page_fault+0x536/0xdd0 [ 345.190556][T24608] do_page_fault+0x38/0x590 [ 345.195064][T24608] page_fault+0x39/0x40 [ 345.199215][T24608] RIP: 0033:0x4006c4 08:42:38 executing program 3: perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x24) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x8001, 0x20, 0x9, 0x99, &(0x7f0000000140)=""/153, 0xa1, &(0x7f0000000280)=""/161, 0x1000, &(0x7f0000000900)=""/4096}) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000380)={0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="0a00000000000000000000000000000000000000cd94efa33747924168054424de34eeecaf818d3ede"], 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x8890) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) accept4(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80, 0x80400) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0385720, &(0x7f00000000c0)={0x1, {r6, r7+30000000}, 0x7f, 0x5}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x3, "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", 0xb9, 0x4, 0xffc0000000000000, 0x2, 0x100000000, 0x1, 0x3}}}, 0x128) ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {0x0}, {}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) connect$packet(r4, &(0x7f0000000640)={0x11, 0x19, r10, 0x1, 0xffff, 0x6, @dev={[], 0x1b}}, 0x14) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000c00)={r9}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000340)={r9}) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r11, 0x4070aea0, 0x0) ioctl$TIOCGSID(r11, 0x5429, &(0x7f00000004c0)) r12 = fanotify_init(0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r13, 0x4070aea0, 0x0) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000000400)) fanotify_mark(r12, 0x2000000000000011, 0x2, r1, 0x0) r14 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r14, r14, 0x0, 0x8800000) 08:42:38 executing program 2: unshare(0x40600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) preadv(r0, 0x0, 0x0, 0x0) 08:42:38 executing program 2: write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xfffffffffffffecf) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/116, 0x74, 0x40002126, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) unshare(0x40000000) [ 345.203108][T24608] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 345.222713][T24608] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 345.228815][T24608] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 345.236792][T24608] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 345.244790][T24608] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 345.252856][T24608] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 08:42:39 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x80000239) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) dup2(r1, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x8057, 0x3}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffffffa, 0xc974, 0x20, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) [ 345.260841][T24608] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:39 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x44, 0x1, 0x3, 0x8, 0x0, 0x8, 0x1000, 0xc, 0x27, 0x7fff, 0x0, 0x0, 0x3, 0x5, 0x9, 0x9, 0x5304, 0x846, 0xfffffffffffffff7, 0x200, 0x5, 0x1, 0x3, 0x8001, 0x3, 0x6, 0x7, 0x1, 0xfffffffffffffffb, 0x58a0, 0x40, 0x51, 0x400, 0x467a, 0x2, 0x6, 0x0, 0x90, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x10, 0xffffffff, 0x0, 0x4, 0x7, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x8) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 345.471319][ T26] audit: type=1800 audit(1567759359.236:58): pid=24737 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16690 res=0 [ 345.533201][ T26] audit: type=1804 audit(1567759359.296:59): pid=24748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir508828651/syzkaller.ONQtP4/260/file0" dev="sda1" ino=16690 res=1 [ 345.693276][T24608] memory: usage 307196kB, limit 307200kB, failcnt 3208 [ 345.706226][T24608] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 345.900977][T24608] Memory cgroup stats for /syz4: [ 345.901079][T24608] anon 287858688 [ 345.901079][T24608] file 184320 [ 345.901079][T24608] kernel_stack 3407872 [ 345.901079][T24608] slab 7438336 [ 345.901079][T24608] sock 0 [ 345.901079][T24608] shmem 0 [ 345.901079][T24608] file_mapped 0 [ 345.901079][T24608] file_dirty 0 [ 345.901079][T24608] file_writeback 0 [ 345.901079][T24608] anon_thp 245366784 [ 345.901079][T24608] inactive_anon 0 [ 345.901079][T24608] active_anon 287862784 [ 345.901079][T24608] inactive_file 0 08:42:39 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/174, &(0x7f00000000c0)=0xae) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) socket$inet6(0xa, 0x4, 0xa5) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) accept4(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000001c0)=0x80, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 08:42:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000080)=[{r0}], 0x1, 0x10080c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x2) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x5, 0x4) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) [ 345.901079][T24608] active_file 0 [ 345.901079][T24608] unevictable 0 [ 345.901079][T24608] slab_reclaimable 1622016 [ 345.901079][T24608] slab_unreclaimable 5816320 [ 345.901079][T24608] pgfault 17754 [ 345.901079][T24608] pgmajfault 0 [ 345.901079][T24608] workingset_refault 0 [ 345.901079][T24608] workingset_activate 0 [ 345.901079][T24608] workingset_nodereclaim 0 [ 345.901079][T24608] pgrefill 442 [ 345.901079][T24608] pgscan 474 [ 345.901079][T24608] pgsteal 70 [ 345.901079][T24608] pgactivate 363 [ 346.041748][T24608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24591,uid=0 [ 346.061439][T24608] Memory cgroup out of memory: Killed process 24591 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB [ 346.218780][T24621] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 346.253398][T24621] CPU: 0 PID: 24621 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 346.261331][T24621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.261336][T24621] Call Trace: [ 346.261352][T24621] dump_stack+0x172/0x1f0 [ 346.261375][T24621] dump_header+0x10b/0x82d [ 346.283425][T24621] ? oom_kill_process+0x94/0x3f0 [ 346.288399][T24621] oom_kill_process.cold+0x10/0x15 [ 346.293520][T24621] out_of_memory+0x79a/0x12c0 [ 346.298249][T24621] ? lock_downgrade+0x920/0x920 [ 346.303120][T24621] ? oom_killer_disable+0x280/0x280 [ 346.308410][T24621] ? __kasan_check_read+0x11/0x20 [ 346.313450][T24621] mem_cgroup_out_of_memory+0x1d8/0x240 [ 346.319006][T24621] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 346.324644][T24621] ? do_raw_spin_unlock+0x57/0x270 [ 346.329755][T24621] ? _raw_spin_unlock+0x2d/0x50 [ 346.334612][T24621] try_charge+0xa2d/0x1440 [ 346.339119][T24621] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 346.344669][T24621] ? get_mem_cgroup_from_mm+0x139/0x320 [ 346.350220][T24621] ? __kasan_check_read+0x11/0x20 [ 346.355257][T24621] ? lock_downgrade+0x920/0x920 [ 346.355271][T24621] ? percpu_ref_tryget_live+0x111/0x290 [ 346.355284][T24621] __memcg_kmem_charge_memcg+0x71/0xf0 [ 346.355294][T24621] ? memcg_kmem_put_cache+0x50/0x50 [ 346.355309][T24621] ? get_mem_cgroup_from_mm+0x156/0x320 [ 346.355321][T24621] __memcg_kmem_charge+0x13a/0x3a0 [ 346.355335][T24621] __alloc_pages_nodemask+0x4f4/0x900 [ 346.355351][T24621] ? __alloc_pages_slowpath+0x2520/0x2520 [ 346.365732][T24621] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.365748][T24621] alloc_pages_current+0x107/0x210 [ 346.365763][T24621] pte_alloc_one+0x1b/0x1a0 [ 346.365780][T24621] __handle_mm_fault+0x34d7/0x3f20 [ 346.419421][T24621] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 346.425093][T24621] ? __kasan_check_read+0x11/0x20 [ 346.430097][T24621] ? trace_hardirqs_on+0x67/0x240 [ 346.435112][T24621] handle_mm_fault+0x1b5/0x6b0 [ 346.439866][T24621] __do_page_fault+0x536/0xdd0 [ 346.444616][T24621] ? page_fault+0x16/0x40 [ 346.448925][T24621] do_page_fault+0x38/0x590 [ 346.453543][T24621] page_fault+0x39/0x40 [ 346.457696][T24621] RIP: 0033:0x459879 [ 346.461590][T24621] Code: Bad RIP value. [ 346.465639][T24621] RSP: 002b:00007efc99660c78 EFLAGS: 00010246 [ 346.471690][T24621] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000459879 [ 346.479662][T24621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.487616][T24621] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.495592][T24621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 346.503597][T24621] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 346.511738][T24621] memory: usage 304184kB, limit 307200kB, failcnt 3208 [ 346.519478][T24621] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 346.526460][T24621] Memory cgroup stats for /syz4: [ 346.526556][T24621] anon 285650944 [ 346.526556][T24621] file 184320 [ 346.526556][T24621] kernel_stack 3407872 [ 346.526556][T24621] slab 7438336 [ 346.526556][T24621] sock 0 [ 346.526556][T24621] shmem 0 [ 346.526556][T24621] file_mapped 0 [ 346.526556][T24621] file_dirty 0 [ 346.526556][T24621] file_writeback 0 [ 346.526556][T24621] anon_thp 245366784 [ 346.526556][T24621] inactive_anon 0 [ 346.526556][T24621] active_anon 285564928 [ 346.526556][T24621] inactive_file 0 [ 346.526556][T24621] active_file 0 [ 346.526556][T24621] unevictable 0 [ 346.526556][T24621] slab_reclaimable 1622016 [ 346.526556][T24621] slab_unreclaimable 5816320 [ 346.526556][T24621] pgfault 17754 [ 346.526556][T24621] pgmajfault 0 [ 346.526556][T24621] workingset_refault 0 [ 346.526556][T24621] workingset_activate 0 [ 346.526556][T24621] workingset_nodereclaim 0 [ 346.526556][T24621] pgrefill 442 [ 346.526556][T24621] pgscan 474 [ 346.526556][T24621] pgsteal 70 [ 346.526556][T24621] pgactivate 363 [ 346.622558][T24621] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24496,uid=0 [ 346.638348][T24621] Memory cgroup out of memory: Killed process 24496 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 346.654388][ T1057] oom_reaper: reaped process 24496 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 346.658466][T24611] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 346.675894][T24611] CPU: 0 PID: 24611 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 346.683878][T24611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.693919][T24611] Call Trace: [ 346.697268][T24611] dump_stack+0x172/0x1f0 [ 346.701612][T24611] dump_header+0x10b/0x82d [ 346.706009][T24611] oom_kill_process.cold+0x10/0x15 [ 346.711101][T24611] out_of_memory+0x79a/0x12c0 [ 346.715763][T24611] ? lock_downgrade+0x920/0x920 [ 346.720594][T24611] ? oom_killer_disable+0x280/0x280 [ 346.725793][T24611] mem_cgroup_out_of_memory+0x1d8/0x240 [ 346.731337][T24611] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 346.736974][T24611] ? do_raw_spin_unlock+0x57/0x270 [ 346.742068][T24611] ? _raw_spin_unlock+0x2d/0x50 [ 346.746916][T24611] try_charge+0xa2d/0x1440 [ 346.751404][T24611] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 346.757088][T24611] ? percpu_ref_tryget_live+0x111/0x290 [ 346.762620][T24611] ? get_mem_cgroup_from_mm+0x16/0x320 [ 346.768059][T24611] ? get_mem_cgroup_from_mm+0x156/0x320 [ 346.773592][T24611] mem_cgroup_try_charge+0x136/0x590 [ 346.778871][T24611] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 346.785108][T24611] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 346.790727][T24611] wp_page_copy+0x41e/0x15e0 [ 346.795309][T24611] ? page_trans_huge_mapcount+0x166/0x450 [ 346.801038][T24611] ? pmd_pfn+0x1d0/0x1d0 [ 346.805354][T24611] ? lock_downgrade+0x920/0x920 [ 346.810183][T24611] ? swp_swapcount+0x540/0x540 [ 346.814936][T24611] ? __kasan_check_read+0x11/0x20 [ 346.819958][T24611] ? do_raw_spin_unlock+0x57/0x270 [ 346.825049][T24611] do_wp_page+0x499/0x14d0 [ 346.829448][T24611] ? finish_mkwrite_fault+0x570/0x570 [ 346.834821][T24611] __handle_mm_fault+0x22f1/0x3f20 [ 346.839927][T24611] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 346.845452][T24611] ? __kasan_check_read+0x11/0x20 [ 346.850462][T24611] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 346.855928][T24611] ? trace_hardirqs_on+0x67/0x240 [ 346.860956][T24611] handle_mm_fault+0x1b5/0x6b0 [ 346.865706][T24611] __do_page_fault+0x536/0xdd0 [ 346.870455][T24611] do_page_fault+0x38/0x590 [ 346.874959][T24611] page_fault+0x39/0x40 [ 346.879128][T24611] RIP: 0033:0x404f08 [ 346.883009][T24611] Code: 85 02 00 00 80 3d 8f b5 66 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 7c b5 66 00 39 45 24 0f 84 e7 01 00 00 44 8b a5 80 00 00 00 b3 d5 ff ff 48 2b 05 fc 30 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 346.902729][T24611] RSP: 002b:00007efc99660c90 EFLAGS: 00010246 [ 346.908799][T24611] RAX: 00007efc9b662000 RBX: 0000000000000310 RCX: 0000000000459879 [ 346.916785][T24611] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000 [ 346.924758][T24611] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.932739][T24611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.940700][T24611] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 346.949323][T24611] memory: usage 299948kB, limit 307200kB, failcnt 3208 [ 346.956452][T24611] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 346.963493][T24611] Memory cgroup stats for /syz4: [ 346.964014][T24611] anon 281440256 [ 346.964014][T24611] file 184320 [ 346.964014][T24611] kernel_stack 3407872 [ 346.964014][T24611] slab 7438336 [ 346.964014][T24611] sock 0 [ 346.964014][T24611] shmem 0 [ 346.964014][T24611] file_mapped 0 [ 346.964014][T24611] file_dirty 0 [ 346.964014][T24611] file_writeback 0 [ 346.964014][T24611] anon_thp 241172480 [ 346.964014][T24611] inactive_anon 0 [ 346.964014][T24611] active_anon 281354240 [ 346.964014][T24611] inactive_file 0 [ 346.964014][T24611] active_file 0 [ 346.964014][T24611] unevictable 0 [ 346.964014][T24611] slab_reclaimable 1622016 [ 346.964014][T24611] slab_unreclaimable 5816320 [ 346.964014][T24611] pgfault 17787 [ 346.964014][T24611] pgmajfault 0 [ 346.964014][T24611] workingset_refault 0 [ 346.964014][T24611] workingset_activate 0 [ 346.964014][T24611] workingset_nodereclaim 0 [ 346.964014][T24611] pgrefill 442 [ 346.964014][T24611] pgscan 474 [ 346.964014][T24611] pgsteal 70 [ 346.964014][T24611] pgactivate 363 [ 347.060979][T24611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13822,uid=0 [ 347.079571][T24611] Memory cgroup out of memory: Killed process 13822 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:40 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x8000000000000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:40 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x460002, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x20, 0x3, 0x1}, 0x5}}, 0x18) 08:42:40 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000005940)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, 0xe0000000, @loopback}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000740)='%', 0x1}], 0x1}}], 0x2, 0x4004040) 08:42:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x44041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100), 0x4) getpgrp(0xffffffffffffffff) geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xfffffffffffffeb5) r5 = inotify_init() r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r7 = epoll_create(0x80001) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00007a8000)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, &(0x7f0000000080)={0xa4000011}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000000240), &(0x7f0000000280)=0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r9, 0x116, 0x7f, &(0x7f0000000100), 0x4) getpgrp(0xffffffffffffffff) geteuid() 08:42:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000000)={0x1000, 0xf000, 0x0, 0x5b8, 0x7}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:42:40 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x41802, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) 08:42:41 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000100), 0x4) r4 = getpgrp(0xffffffffffffffff) r5 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r5, r6}, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) futimesat(r7, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)="2e0000001d008104e00f80ecdb4cb9d902631912140202003b000000120001081506000040d819a90600150000ff", 0x2e}], 0x1}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe95a101123cebe7c, 0x80000001, 0x20000) 08:42:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) sendmsg$nl_netfilter(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe9a18f048f7ede93}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, 0x5, 0xb, 0x400, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x1}, [@generic="170b10ed23bc2dced065ccca1e61cc52ea90b28f7dc547b46fb453269bfc02b42db666697080486ae9b792bbac6e4435fac46280529e9c8f7b7bae8e429a61e3ef54f149a9897c58a1e47bf1df25fbb0f40b1b1fe253d1617e94aba5fcfdd823f35eb44842ec49a2476ba70d5a2459bf027e5d72625c4ad6d630cf772ff40371dd552eb04bd129afdb4d48956dfe130c2537c054215893707e8301188f38aa90da"]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000020}, 0x4018800) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r6, 0x4070aea0, 0x0) syz_open_pts(r6, 0x111001) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x80000000000000) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x4100) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x10000000, [0x1d7, 0x40000003, 0x0, 0x1000]}) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0x4) 08:42:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x1, 0x405) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r2) setgid(r2) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="92a2527da0d3a05c4c05eb0ec4c9b2d57205cf5120f5e54b54085fdb93ccb2e191e666c1ffefa2816459e7fadebfd941f233a2921c88689c117cb8f62b64cf30e29810e1300a55b1a6d7a4d29d98b01205d2fa8c8b6da0ce3a27494dd37c30f81a9c696c3ca3d1846da1d5e2f64592cae5eff7d16539fd97e67cf1b559b9f082a4e1c1c02b2a175f8c06fff709c9e3d1facdfc920696337875aa8cac3eb1a6f75fc0d69f87e669a5bd605d35623758e94551eabc620c1f9b3b06d1aafbfb6e7f045b9b3d", 0xc4}, {&(0x7f0000000300)="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", 0xfc}], 0x2) 08:42:41 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind(r0, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev}, 0xfffffffffffffda7) 08:42:41 executing program 0: setresgid(0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1c0000000000000}, 0x8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) 08:42:41 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0401340a57"], 0x5, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x4e, &(0x7f0000000080)=0xcc6c, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x14, [0x0, 0x200002c0, 0x2000041e, 0x200005da], 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r6]}, 0x8c) 08:42:41 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0xffffffff00000000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:41 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffff9c, &(0x7f0000000280)=""/130, 0x82) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1000, 0x0) getdents(r2, &(0x7f0000000100)=""/76, 0x4c) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd2, 0x60, 0x0, 0xffffffffffffffc2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x503080, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroupx\xe4') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000080)=0x10000) 08:42:41 executing program 3: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/33) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101081, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000480)={0x20, 0x1, 0x10001}) recvfrom$packet(r0, &(0x7f0000000180)=""/120, 0x78, 0x100, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000003c0)={0x0}) syz_mount_image$btrfs(&(0x7f0000000200)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x8, &(0x7f0000002940)=[{&(0x7f0000000580)="9492c47d57151a11c708f4ca91cacdc40e901f9af1b834721b587fc733e2ea1ee07a07915cb3f4ac8d9d7b41b6a359d2eb690d2ae237edf4c367b184b7bac723c2", 0x41, 0x10001}, {&(0x7f0000000600)="cd6bb89bad0475fc220f93e51699e88b5f7e75c1f7eb0552ae35aaefb0e58eb7e14366c96b53c8314a61e72ecab9b6f10ebf26483bbfe833d5a786c577bbd896808ef43a81aaed1bbc30e5b584199e09", 0x50}, {&(0x7f0000000680)="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", 0x1000, 0x80000000}, {&(0x7f0000001680)="23804bbabe4402b5de30245857de93a147468b42f72bcb17ff37bb4ec2e5d424bc01ad27ac38910d7adeef523ef497688ed9b9067904610e85dab0dc6252c5d3cb997df225e1d5f15c78877f1e1580e43a30f297b6932d121148857e58f5f78a2b90ce95931eabce4668082ad731434bca913a2632a4437e6994f90198d0199101", 0x81, 0xfffffffffffffff7}, {&(0x7f0000001740)="ac8cbad29eb719dc7904f8249b61ef789a48debdc4fde21364fe437af48163152c5dfa39d63707154efd8dc7bacc4f1f9f91a90c8d98cfc5af1429b8e98a3246b3865e025c5b0337a43690ff85d12f1e5891c38f356245f6998b25ef843fe0e97b05512824d897a49a46239632ea96de85e6a45d7b5f0285fa8b9ff31ab6ed18cea21d55170de2e97f5c22a374ad138d1f7bdd9cb3ee5691352a82523bdc6b06accc7bbeedb70de98a892bce95798a7ee4cecdc3", 0xb4, 0x5}, {&(0x7f0000001800)="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", 0x1000, 0x1}, {&(0x7f0000002800)="8a501f352e29f98954bcf33ef87546be60e742475e2eec0aecfdee7f56789105bd73c92044f6b48b3647c75bbb656f129a876de431dfdc50bfc0de83dd5f484b28abf8b8dfa114a9208c002169fa8cf2306a6713f5f65a6b317d02c082edc3dbde477075beb7ced27b3de7d010556dd28993cb98b82572fbf3563a3d577ff70bcd6cc886264297d80360647fc9ffddbe0702c099f2d8381e9135fd236314ea609df35679171cdb5a994554c05a04429cd2d4c72b687da0036bc37d156eadc5098e09357496b6f6dcd44d84ef4fd5a5", 0xcf, 0x2d84}, {&(0x7f0000002900)="2810b5d17927a2b7f93e751908fd23764cc350f294e9337caa5df528bfd6722e27", 0x21}], 0x2002410, &(0x7f0000002a00)={[{@noflushoncommit='noflushoncommit'}, {@subvolid={'subvolid', 0x3d, 0xffffffffffffffff}}, {@ref_verify='ref_verify'}, {@enospc_debug='enospc_debug'}], [{@fsname={'fsname', 0x3d, 'vmnet1'}}, {@permit_directio='permit_directio'}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x340, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={r2, 0x80000, r3}) openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x80100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000500), &(0x7f0000000540)=0xffffffffffffffa8) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="800002000000000019000300e60100006c00004000160040000000000000000000006d5ebe5a0000ffff53ef1fd893ba7c635f43c86cda0083be2157", 0x3c, 0x400}], 0x8, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x20201, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000380)=0x7995) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f00000002c0)={0x0, @src_change}) 08:42:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000680)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sR/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0xfffffffffffffda0, 0xfa00, {0x0, {0x2, 0x4e21, 0x5, @local, 0x7}, r3}}, 0x30) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2eab82, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r4}}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x10000000017) write(r5, &(0x7f0000000100)="2700000014000707030e0000120f0a0010000100f5fe001259f338c57410e8a99f47ff00000007", 0x27) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) [ 348.101457][T25026] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 348.251536][T25048] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 348.263286][T25026] CPU: 1 PID: 25026 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 348.271430][T25026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.281483][T25026] Call Trace: [ 348.284773][T25026] dump_stack+0x172/0x1f0 [ 348.289096][T25026] dump_header+0x10b/0x82d [ 348.293492][T25026] ? oom_kill_process+0x94/0x3f0 [ 348.298412][T25026] oom_kill_process.cold+0x10/0x15 [ 348.303524][T25026] out_of_memory+0x79a/0x12c0 [ 348.308187][T25026] ? lock_downgrade+0x920/0x920 [ 348.313024][T25026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.319249][T25026] ? oom_killer_disable+0x280/0x280 [ 348.324428][T25026] ? __kasan_check_read+0x11/0x20 [ 348.329437][T25026] mem_cgroup_out_of_memory+0x1d8/0x240 [ 348.334966][T25026] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 348.340585][T25026] ? do_raw_spin_unlock+0x57/0x270 [ 348.345697][T25026] ? _raw_spin_unlock+0x2d/0x50 [ 348.350530][T25026] try_charge+0xf4b/0x1440 [ 348.354941][T25026] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 348.360490][T25026] ? percpu_ref_tryget_live+0x111/0x290 [ 348.366992][T25026] ? get_mem_cgroup_from_mm+0x16/0x320 [ 348.372453][T25026] ? get_mem_cgroup_from_mm+0x156/0x320 [ 348.378070][T25026] mem_cgroup_try_charge+0x136/0x590 [ 348.383340][T25026] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 348.389565][T25026] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 348.395184][T25026] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 348.401151][T25026] ? defrag_store+0x360/0x360 [ 348.405823][T25026] ? lock_downgrade+0x920/0x920 [ 348.410668][T25026] ? swp_swapcount+0x540/0x540 [ 348.415414][T25026] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 348.421304][T25026] ? __kasan_check_read+0x11/0x20 [ 348.426317][T25026] ? do_raw_spin_unlock+0x57/0x270 [ 348.431410][T25026] do_huge_pmd_wp_page+0x806/0x2270 [ 348.436591][T25026] ? __split_huge_pmd+0x27e0/0x27e0 [ 348.441798][T25026] ? do_futex+0x17d/0x1dc0 [ 348.446202][T25026] ? __might_fault+0x12b/0x1e0 [ 348.450946][T25026] ? __kasan_check_read+0x11/0x20 [ 348.455954][T25026] ? pmd_val+0x85/0x100 [ 348.460094][T25026] ? add_mm_counter_fast.part.0+0x40/0x40 [ 348.465974][T25026] __handle_mm_fault+0x14cf/0x3f20 [ 348.471329][T25026] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 348.476879][T25026] ? __kasan_check_read+0x11/0x20 [ 348.481893][T25026] ? trace_hardirqs_on+0x67/0x240 [ 348.486918][T25026] handle_mm_fault+0x1b5/0x6b0 [ 348.491681][T25026] __do_page_fault+0x536/0xdd0 [ 348.496428][T25026] do_page_fault+0x38/0x590 [ 348.500946][T25026] page_fault+0x39/0x40 [ 348.505082][T25026] RIP: 0033:0x4006c4 [ 348.509005][T25026] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 348.528589][T25026] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 348.534636][T25026] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 348.542591][T25026] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 08:42:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x40000004e21, @dev={0xac, 0x14, 0x14, 0x13}}, {0x307, @random="750d42470eb1"}, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'batadv0\x00'}) r2 = memfd_create(&(0x7f0000000300)='wlan1(\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) [ 348.551151][T25026] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 348.559108][T25026] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 348.567079][T25026] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10001, 0x100000001, 0x10000, 0x1}, 0x1c) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80, 0x800) close(r1) [ 348.785075][T25055] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 348.797043][T25026] memory: usage 307200kB, limit 307200kB, failcnt 3260 [ 348.827181][T25026] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.856572][T25026] Memory cgroup stats for /syz4: [ 348.856692][T25026] anon 287895552 [ 348.856692][T25026] file 184320 [ 348.856692][T25026] kernel_stack 3473408 [ 348.856692][T25026] slab 7438336 [ 348.856692][T25026] sock 0 [ 348.856692][T25026] shmem 0 [ 348.856692][T25026] file_mapped 0 [ 348.856692][T25026] file_dirty 0 [ 348.856692][T25026] file_writeback 0 [ 348.856692][T25026] anon_thp 243269632 [ 348.856692][T25026] inactive_anon 0 [ 348.856692][T25026] active_anon 287899648 [ 348.856692][T25026] inactive_file 0 [ 348.856692][T25026] active_file 0 [ 348.856692][T25026] unevictable 0 [ 348.856692][T25026] slab_reclaimable 1486848 [ 348.856692][T25026] slab_unreclaimable 5951488 [ 348.856692][T25026] pgfault 17985 08:42:42 executing program 5: sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0xa80, 0x9, 0x3, 0x93e}, 0xfffffffffffffea5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2, 0x0, 0xff, 0x0, 0xed}, 0x1c) listen(r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 08:42:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000140001cb000000000000000002000000", @ANYRES32=r1, @ANYBLOB="1400030065716c0000000000000000000000000008000200ac141400"], 0x34}}, 0x0) 08:42:42 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0xfff, 0x7, &(0x7f0000000600)=[{&(0x7f0000000200)="dd1fab77688d3f1628c7bb0cf703b67b2e7912389a09153f277449e92a5c47d37557b4f1ad76c77808cdfa3b4fae9d28336ed9d52003ff1d8b0fa9b97e603283e8245cffff3386615ad158ff27539edfdec3ae86cb3e001608209d054b19e2075267b38d29f3b1f51b662ae532125770b7f814509d275381590e5376ded015c89f18395325509142b7fa", 0x8a, 0xba7}, {&(0x7f00000002c0)="9306f990cdf9f793e1eb98af7700c70f48ef656b717bb8047fb3abbbad116b9ca281ef182a349856c934614ca07c7c99d58496048ec486e18612385f4256e622fa1668c40d20496a299406380bb356e91c45a46c9605", 0x56, 0x20}, {&(0x7f0000000340)="99f32ae6ac3b269b4f0dc3123d517ac4ba5dc8f49f865e82c809ac6ea0157981fb37b01a50511ca75c8050666c48b9f34a0937db6e6d414818cc8ffdceb8f994528d3d5d970cf386d510d7a86e37b6263864f130", 0x54, 0x4}, {&(0x7f00000003c0)="ada46878579adfbe97703a90dbfb219fdd4fcf2ea953d203385280217c1e2bc4cd4617c7ba9fc183432ebaf60fb4f0ea82cd3c309a4a31fcfc628188de140d229cb809b91a89ac9325a3afa510c292c2ee7a0f594232492b8561bd7a375f0af28e1e3f3529d30ad0e979736a428539d624f4da94fecbc2da6f66781681835e89caa1615083a023666c1b7c7326379b3188c1293d748162310290eb16b7ee0dbd53afc56d944b372883ae15db41f7f35e7833032f31283a6252ec4e37c332924746ff358cd5587d0b0b1f5c5ee7bb048fff30f60019f5fa", 0xd7, 0x1}, {&(0x7f00000004c0)="0ce8491f525948ac74c1ca3d809901c2e05323ad4874a8a8c8ff2e6461bd11716ef3381ccd6156f5f8132f4ddef89a449373618ac313f0c0271fd4c037f69cd2ffd71b0bc9e167445ce7425fc7ca0aa67a7398429dccb9671689fc4bfbb4325f638e12b63b1606ba4e301988712a415d743fa584dd65b919bd32f47f7407a4371531a1cc3dbde00d7149428d825b7f8379ecfae185f2c352c6bbc605df9e4f75989146dbeceee59bf3165bc975cb8c605373526ab99aa3a8f1b5a82415e633326f5a6b44de959407875bc1d089e3aa99daa66ccbaf8c7cdd3a9c", 0xda, 0x1f}, {&(0x7f0000000140)="26456fcbd3a9297a7d20e78d8d67f493e67bb125abdd140f99e3", 0x1a, 0xffffffffffffff00}, {&(0x7f00000005c0)="140c6238f248d1f21d6e122055d2a84264f2182e60424d7f8134b321bfde9c0d9bd3", 0x22, 0xffffffffffff0001}], 0x100800, &(0x7f00000006c0)='\x00') [ 348.856692][T25026] pgmajfault 0 [ 348.856692][T25026] workingset_refault 33 [ 348.856692][T25026] workingset_activate 0 [ 348.856692][T25026] workingset_nodereclaim 0 [ 348.856692][T25026] pgrefill 442 [ 348.856692][T25026] pgscan 540 [ 348.856692][T25026] pgsteal 70 [ 348.856692][T25026] pgactivate 363 [ 348.958019][T25026] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25014,uid=0 08:42:42 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0xfffffffffffffed1, 0x2008400, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:urandom_device_t:s0\x00', 0x26, 0x1) [ 348.999801][T25026] Memory cgroup out of memory: Killed process 25014 (syz-executor.4) total-vm:72708kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB 08:42:43 executing program 4: mmap(&(0x7f0000824000/0x2000)=nil, 0x2000, 0x3000002, 0x4010, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x284, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:43 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x8400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x3, @local, 0x100}, @in6={0xa, 0x4e21, 0x8b81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xc60}, @in6={0xa, 0x4e22, 0x1, @local}], 0x54) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) setuid(r2) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x730) 08:42:43 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x10, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0xb6d, 0x1}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r7, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x4228, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x200}, @in6={0xa, 0x4e21, 0xfffffffffffffffa, @local, 0x3}]}, &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') preadv(r8, &(0x7f00000017c0), 0x333, 0x200000000000000) 08:42:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r4 = dup3(r3, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) readlinkat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/164, 0xa4) getsockname(r4, &(0x7f00000000c0)=@in={0x2, 0x0, @remote}, &(0x7f0000000180)=0x80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000080)) 08:42:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002540), 0x1000) statfs(&(0x7f0000000100)='./file0/file1\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000100), 0x4) r4 = getpgrp(0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@hci={0x1f, 0x0}, &(0x7f0000000480)=0x80) r6 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x200000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x800000000001c9, 0x86, 0x4, 0x80, r7, 0x0, [], r5, r6, 0x5, 0x2}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', r5}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r9, 0x4070aea0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x7, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x47}, @exit, @ldst={0x5, 0x0, 0x1, 0x3a957fc7067b31ee, 0x7, 0xc, 0x4}, @call={0x85, 0x0, 0x0, 0x31}, @alu={0x5, 0x8000, 0xb, 0x5, 0x3, 0x100, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='syzkaller\x00', 0x7ff, 0x6d, &(0x7f0000000380)=""/109, 0x41000, 0x0, [], r8, 0xf, r9, 0x8, &(0x7f00000005c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x5, 0x80000000, 0x1}, 0x10}, 0x70) r10 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r10}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) r11 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r12, 0x116, 0x7f, &(0x7f0000000100), 0x4) r13 = getpgrp(0xffffffffffffffff) r14 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) r15 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r15, 0x107, 0x12, 0x0, 0x0) r16 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r16, 0x107, 0x12, 0x0, 0x0) r17 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r17, 0x107, 0x12, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r18, 0x4070aea0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@rights={{0x20, 0x1, 0x1, [r15, r16, r18, r17]}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [r12, r12, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x2004000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read'}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@fowner_eq={'fowner', 0x3d, r14}}, {@context={'context', 0x3d, 'root'}}]}}) creat(&(0x7f0000000180)='./file0/file1\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000280)={0x90, 0x0, 0x2}, 0x90) 08:42:43 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x6, 0x724f65f01d7f8347) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000300), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000000, 0x200000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'\xe2\xff\xff\xec\xbc\x04\x00'}) io_setup(0x2, &(0x7f0000000240)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000700)={0x401, {{0x2, 0x4e20, @broadcast}}, 0x1, 0x7, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e20, @multicast2}}]}, 0x410) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="32c36bf8", 0x4}]) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) r6 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x40400) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000100)={0x5, 0x3, 0xf398, 0x4, 0x8001, 0x8}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000180), 0x4) 08:42:43 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x4, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r1 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getrusage(0x1, &(0x7f0000000000)) dup2(r1, r4) 08:42:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x3, 0x3, 0x2, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x12, 0x0, &(0x7f0000000080)) 08:42:43 executing program 5: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x3, 0x400) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) ioctl(r0, 0xffffffffffffffae, &(0x7f0000000000)="ba6b8a62ba1db964c6aa442f8559816eeb4b46aefaf2db7dc8c4e5b893d1f60283cfc58d6b45783f66de9490522612e4444d618e8c8edcdb91a96f0d0b48e9b749239311f9988dac5db65e75fd1b513f4789fee8bf6370bd025ede929fbe38d558489244e73eeed887032b86b8f5b64c090d1380957c83d50609b8451ebd31ae7d37db515873436eb0caed216eb5f10648af7a4b106768334e144e017e48fca712f91eb935c6b76cd5ff7c83e1") [ 349.871492][T25310] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 349.913240][T25310] CPU: 0 PID: 25310 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 349.921179][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.931285][T25310] Call Trace: [ 349.934578][T25310] dump_stack+0x172/0x1f0 [ 349.938898][T25310] dump_header+0x10b/0x82d [ 349.943321][T25310] ? oom_kill_process+0x94/0x3f0 [ 349.948254][T25310] oom_kill_process.cold+0x10/0x15 [ 349.953361][T25310] out_of_memory+0x79a/0x12c0 [ 349.958031][T25310] ? lock_downgrade+0x920/0x920 [ 349.962886][T25310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.969119][T25310] ? oom_killer_disable+0x280/0x280 [ 349.974311][T25310] ? __kasan_check_read+0x11/0x20 [ 349.979329][T25310] mem_cgroup_out_of_memory+0x1d8/0x240 [ 349.984879][T25310] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 349.990501][T25310] ? do_raw_spin_unlock+0x57/0x270 [ 349.995692][T25310] ? _raw_spin_unlock+0x2d/0x50 [ 350.000905][T25310] try_charge+0xf4b/0x1440 [ 350.005489][T25310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 350.011028][T25310] ? percpu_ref_tryget_live+0x111/0x290 [ 350.016573][T25310] ? get_mem_cgroup_from_mm+0x16/0x320 [ 350.022044][T25310] ? get_mem_cgroup_from_mm+0x156/0x320 [ 350.028366][T25310] mem_cgroup_try_charge+0x136/0x590 [ 350.033640][T25310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 350.039876][T25310] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 350.045497][T25310] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 350.051466][T25310] ? lock_downgrade+0x920/0x920 [ 350.056327][T25310] ? defrag_store+0x360/0x360 [ 350.061009][T25310] ? lock_downgrade+0x920/0x920 [ 350.065849][T25310] ? swp_swapcount+0x540/0x540 [ 350.070596][T25310] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 350.076478][T25310] ? __kasan_check_read+0x11/0x20 [ 350.081503][T25310] ? do_raw_spin_unlock+0x57/0x270 [ 350.086606][T25310] do_huge_pmd_wp_page+0x806/0x2270 [ 350.091815][T25310] ? __split_huge_pmd+0x27e0/0x27e0 [ 350.097008][T25310] ? balance_dirty_pages+0x2b80/0x2b80 [ 350.102465][T25310] ? ext4_set_page_dirty+0x2b7/0x480 [ 350.107742][T25310] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 350.113970][T25310] ? pmd_val+0x85/0x100 [ 350.118114][T25310] ? add_mm_counter_fast.part.0+0x40/0x40 [ 350.123822][T25310] ? fault_dirty_shared_page.isra.0+0x18c/0x200 [ 350.130139][T25310] __handle_mm_fault+0x14cf/0x3f20 [ 350.135332][T25310] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 350.140870][T25310] ? __kasan_check_read+0x11/0x20 [ 350.145892][T25310] ? trace_hardirqs_on+0x67/0x240 [ 350.150978][T25310] handle_mm_fault+0x1b5/0x6b0 [ 350.155738][T25310] __do_page_fault+0x536/0xdd0 [ 350.160517][T25310] do_page_fault+0x38/0x590 [ 350.165011][T25310] page_fault+0x39/0x40 [ 350.169273][T25310] RIP: 0033:0x4006c4 [ 350.173155][T25310] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 350.192858][T25310] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 350.198911][T25310] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 350.206870][T25310] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 [ 350.214850][T25310] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 350.222814][T25310] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 350.230778][T25310] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe 08:42:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x200004e24, @empty}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x800, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000002c0)) [ 350.261715][T25310] memory: usage 307200kB, limit 307200kB, failcnt 3272 [ 350.283368][T25310] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:42:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000000010000000040530000000000000000000000000000000000000000000000000000000000000000000000000022335be5a06d8d4a3e0fd782bfb29a35d111b22d37a168d0c81e22fa4ae35cc78de14c820e7a49d66076ecb0f8c7b68e722a7e29f2606e35e39aeae5232e1431310c6febb21db58a0457b0b688f92aeacf"]) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000180)=""/144, 0x90, 0xfffffffffffffff7, 0xffffffffffffb75f, 0x200000000, 0x400, 0x8931}, 0x120) [ 350.349168][T25310] Memory cgroup stats for /syz4: [ 350.349268][T25310] anon 287920128 [ 350.349268][T25310] file 184320 [ 350.349268][T25310] kernel_stack 3538944 [ 350.349268][T25310] slab 7438336 [ 350.349268][T25310] sock 0 [ 350.349268][T25310] shmem 0 [ 350.349268][T25310] file_mapped 0 [ 350.349268][T25310] file_dirty 0 [ 350.349268][T25310] file_writeback 0 [ 350.349268][T25310] anon_thp 245366784 [ 350.349268][T25310] inactive_anon 0 [ 350.349268][T25310] active_anon 287940608 [ 350.349268][T25310] inactive_file 0 [ 350.349268][T25310] active_file 0 [ 350.349268][T25310] unevictable 0 [ 350.349268][T25310] slab_reclaimable 1486848 [ 350.349268][T25310] slab_unreclaimable 5951488 [ 350.349268][T25310] pgfault 18084 [ 350.349268][T25310] pgmajfault 0 [ 350.349268][T25310] workingset_refault 33 [ 350.349268][T25310] workingset_activate 0 [ 350.349268][T25310] workingset_nodereclaim 0 [ 350.349268][T25310] pgrefill 442 [ 350.349268][T25310] pgscan 540 [ 350.349268][T25310] pgsteal 70 [ 350.349268][T25310] pgactivate 363 [ 350.417739][T25449] ALSA: seq fatal error: cannot create timer (-22) [ 350.450946][T25310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24944,uid=0 [ 350.622161][T25310] Memory cgroup out of memory: Killed process 24944 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x4, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r1 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getrusage(0x1, &(0x7f0000000000)) dup2(r1, r4) 08:42:44 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:44 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0x33, ""/51}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff51, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002d00050fd25a80648c63940d0124fc001000024002020000053582c137153e3709000180f0000000d1bd", 0x2e}], 0x1}, 0x0) 08:42:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x4, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) r1 = inotify_init() socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getrusage(0x1, &(0x7f0000000000)) dup2(r1, r4) 08:42:44 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000280)={'ip_vti0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x28800, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000140)={0x5, 0x1}) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r2}) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) getgid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000080)='mime_type#$,\x00', &(0x7f0000000100)="55feefe58e25641895de4add5bb6770042386ce3a0eff70f0f5b5b9b2d732db7", 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:44 executing program 5: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000005c0)={0x5, 0x200, 0x9, 0xfffffffffffffff8, 0x8ec}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000200)="1efb81cb062aebd663044001eec7fd47ed912480bb29a2e116abc7d13195c04470710ca941d52027951b35b9da961c556442a1dcb59eac98f1f853e18cee550ba6905e9e36551775251689e22bf0a418a105d2ba3c96726de15fb3781592a622f38751a14c35", 0x66, 0x2}, {&(0x7f0000000280)="cd9565547f0fa0fa77a99ca636f18be94044e4d184eb4bc2cd88ca4c81089ddbd1b0b1d913ed95c9b302282042ae66949d4d8e66d350c826fce2934f942bfeb783a4ad8d016d6fce7a589de9b7784ec49d5c339e44558dac9ff98b2d13a6da9fedeb0986ecbbde0b54e4bd2adb9f4a792a726a1bd1835a79316131553d3dc69eddbf018e74a097dd3d2f253d89101603708a32913ed41bb7b22c64dcc5ad838092a73c1028deaa586382ac93f8d5cde72af4c555edeec13be063e5f6b9ab", 0xbe, 0x63f}, {&(0x7f0000000340)="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", 0xfa, 0x5}], 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f62682c6d626c6b5f696f12de5d7375626d69742c62682c6e6f776e65723c000000000000", @ANYRESDEC=r3, @ANYBLOB=',dont_appraise,\x00']) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{r1, r2/1000+30000}, 0x1}, {{0x0, 0x2710}}], 0x30) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaace2, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003805000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', r4}, 0x10) 08:42:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x12, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x2e, @bond_slave={{0x10, 0x1, 'bond_slave\x00'}, {0xc, 0x5, @IFLA_BOND_SLAVE_QUEUE_ID={0x8}}}}]}, 0x40}}, 0x0) 08:42:44 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) [ 351.173689][T25580] netlink: 'syz-executor.3': attribute type 46 has an invalid length. [ 351.182038][T25580] netlink: 'syz-executor.3': attribute type 46 has an invalid length. 08:42:45 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) wait4(r1, &(0x7f0000000040), 0x80000000, &(0x7f0000000200)) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x100, 0x14000) ioctl$TIOCEXCL(r2, 0x540c) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x802) [ 351.305460][T25589] netlink: 'syz-executor.3': attribute type 46 has an invalid length. [ 351.364787][T25589] netlink: 'syz-executor.3': attribute type 46 has an invalid length. 08:42:45 executing program 0: timer_create(0x2, &(0x7f0000000140)={0x0, 0x13, 0x4, @thr={&(0x7f0000000000)="5c1a99ffb24d72e9b5a94659c3eb66e671950cd0a7f89c03d142555f2d0ea8a95bff92023ea7507f2188cb4ad5a4c2b964572b8523db2839eb40c176d4408f58ac89ed2b5c78944fe500489b71471402e7ed211f588f2f66ab018acb1d7aed028a857af435128d4febeea98ad7f4bc758f16905a729f9226d9d3f3ee", &(0x7f0000000080)="a6740c27b4eee078b760e76340aafe6b980f073f53ef6ee19d8a0c3aac72137fcb22bb767b5746a578a3e7220a5cc5a1ce2bb8017a134e25707635cd4fba70232af64615e189b7e57c08b3f36fce95c9cbc90ce07b64e8e2280ea4a9e5fdb7628176d3ee815d26697bdb674a2b7b00ae7b8a65"}}, &(0x7f0000000180)) io_setup(0x1, &(0x7f0000000300)=0x0) io_getevents(r0, 0x3ff, 0x0, 0x0, &(0x7f0000000100)) 08:42:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x4, 0x9, "b0dda25d987523f5b2d6f0ad33b345c00427e3273eda0a8045e813b0960a4817be9a637f8d2978bb52d3bf4564c9605ee8e4ba3983b2d890c26cd5b50843debde19bbf4791a7b6151d3a13962a89585e840856766cd9de153a824adfa3d4f49491faf790f1e7c25e97b6b767c35573b211f8534a607522a7b22a5a442886972f7f02a9bdd3610e18bc45e4460ed54407af1e44db3066b622ea1907b5ca9e3115f988423efc44dbffa1053610956203ed29bccba16f55a885e1d5ce0903aa48da9413deb7a8a390574da196328e552cb0b6b32e8c37e4f9fe6ffcdfe1067fdd41ea5490d1d2ad8c5e50ae15f9bc8e41a2cd172c97a925f8723770e5b1c2cb75dd", 0x70, 0x2, 0x200, 0x7, 0x9, 0xb5}}}, 0x120) ioctl(r0, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070") getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r2, &(0x7f0000000000)="240000004a005f0014f9f407000904000a0200"/36, 0x24) 08:42:45 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40400, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x3, 0x2, 0x5, 0x1, 0x7}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000300)=0xfffffffffffffff9, 0x42d) [ 351.519132][T25612] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 351.590426][T25612] CPU: 1 PID: 25612 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 351.598481][T25612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.608665][T25612] Call Trace: [ 351.611967][T25612] dump_stack+0x172/0x1f0 [ 351.616303][T25612] dump_header+0x10b/0x82d [ 351.620730][T25612] oom_kill_process.cold+0x10/0x15 [ 351.625865][T25612] out_of_memory+0x79a/0x12c0 [ 351.630554][T25612] ? retint_kernel+0x2b/0x2b [ 351.635141][T25612] ? oom_killer_disable+0x280/0x280 [ 351.640501][T25612] mem_cgroup_out_of_memory+0x1d8/0x240 [ 351.646075][T25612] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 351.651720][T25612] ? do_raw_spin_unlock+0x57/0x270 [ 351.656835][T25612] ? _raw_spin_unlock+0x2d/0x50 [ 351.661718][T25612] try_charge+0xf4b/0x1440 [ 351.666146][T25612] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 351.671699][T25612] ? get_mem_cgroup_from_mm+0x139/0x320 [ 351.677244][T25612] ? __kasan_check_read+0x11/0x20 [ 351.682270][T25612] ? lock_downgrade+0x920/0x920 [ 351.687125][T25612] ? percpu_ref_tryget_live+0x111/0x290 [ 351.692763][T25612] __memcg_kmem_charge_memcg+0x71/0xf0 [ 351.698226][T25612] ? memcg_kmem_put_cache+0x50/0x50 [ 351.703432][T25612] ? get_mem_cgroup_from_mm+0x156/0x320 [ 351.703446][T25612] __memcg_kmem_charge+0x13a/0x3a0 [ 351.703461][T25612] __alloc_pages_nodemask+0x4f4/0x900 [ 351.703476][T25612] ? __alloc_pages_slowpath+0x2520/0x2520 [ 351.703488][T25612] ? retint_kernel+0x2b/0x2b [ 351.703500][T25612] ? trace_hardirqs_on_caller+0x6a/0x240 [ 351.703519][T25612] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 351.714175][T25612] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 351.714190][T25612] alloc_pages_current+0x107/0x210 [ 351.714204][T25612] pte_alloc_one+0x1b/0x1a0 [ 351.714222][T25612] __pte_alloc+0x20/0x310 [ 351.761360][T25612] copy_page_range+0x1520/0x1ee0 [ 351.766305][T25612] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 351.771775][T25612] ? pmd_alloc+0x180/0x180 [ 351.776200][T25612] ? vma_gap_callbacks_rotate+0x62/0x80 [ 351.781752][T25612] ? __rb_insert_augmented+0x20c/0xd90 [ 351.787214][T25612] ? validate_mm_rb+0xa3/0xc0 [ 351.791893][T25612] ? __vma_link_rb+0x275/0x370 [ 351.796659][T25612] ? __kasan_check_write+0x14/0x20 [ 351.801762][T25612] dup_mm+0xa67/0x1430 [ 351.805839][T25612] ? vm_area_dup+0x170/0x170 [ 351.810436][T25612] ? debug_mutex_init+0x2d/0x5a [ 351.815285][T25612] copy_process+0x28b7/0x6b00 [ 351.819961][T25612] ? __cleanup_sighand+0x60/0x60 [ 351.824901][T25612] _do_fork+0x146/0xfa0 [ 351.829067][T25612] ? copy_init_mm+0x20/0x20 [ 351.833571][T25612] ? __kasan_check_read+0x11/0x20 [ 351.833584][T25612] ? _copy_to_user+0x118/0x160 [ 351.833602][T25612] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.833614][T25612] ? put_timespec64+0xda/0x140 [ 351.833633][T25612] __x64_sys_clone+0x18d/0x250 [ 351.843409][T25612] ? __ia32_sys_vfork+0xc0/0xc0 [ 351.843425][T25612] ? trace_hardirqs_off_caller+0x65/0x230 [ 351.843437][T25612] ? trace_hardirqs_on+0x67/0x240 [ 351.843453][T25612] do_syscall_64+0xfd/0x6a0 [ 351.843473][T25612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.885206][T25612] RIP: 0033:0x459879 08:42:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r1 = msgget(0x1, 0x4d) msgrcv(r1, &(0x7f0000000000)={0x0, ""/72}, 0x50, 0x3, 0x2000) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 08:42:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x802) 08:42:45 executing program 1: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40000, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="ff0f000000"], 0x5, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4000807) [ 351.889106][T25612] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.908807][T25612] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 351.917233][T25612] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 351.925200][T25612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.933168][T25612] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 351.941125][T25612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 351.949104][T25612] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff 08:42:45 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) io_uring_enter(r1, 0x0, 0x1, 0x1, &(0x7f00000001c0)={0x7fff}, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/stat\x00') ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffffffff0bd8, 0x0, 0x9, 0x9, 0x0, "36881fe43dd2aa6870f87b20c27d6b99b2fed63f4bba46bff8b64b0d2b2638b02b7cf0c9e2c63a3c4e8edad182877a0c7e61b2fdf9391f085b051d94a754bbd7", "a460b23a3f7eeadb267dffd16f5e149047837a22b13cd2bbfd19c9ec6554ae97a466403c06f6b868efb808d04dc6a79589eecd86a29af4882212bb954e52d332", "56a8d61ce81451200eb961d1a1881887e5bac11e5b331750c1520c02990ccc7c", [0x10001, 0xffffffffffff3ffd]}) fcntl$setflags(r2, 0x2, 0x3) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r3, 0x0) 08:42:45 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000059000000950000000000000051ac81d2bb5fcff6e6eb4d67767c644c3374cb79bb6ac43ccb8a067f8fbdda949b6c639ee1fb215584e4c7d3c8a718b1790f784b86f88bfe8e151e8ad6f8d87fc459b8bd427189b89a8e599e2fec0d6fb3bfc8a3f722695d564fca0ac30c7f9267b1edfd57b0851fecc98170b1377b6b07b05a260df74c3452a2c71ef008eb75fe15e5512b8b923e6a33599aa43d607f6fced9d0d566800bbd6650b8862d242ab87212dc6143e732"], &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x13, 0x1, {0x0, 0x4, 0x2}}, 0x14) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000300)={@remote, 0x0}, &(0x7f0000000340)=0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc7, 0x0, 0x0, 0x0, 0x7ff}, [@jmp={0x5, 0x4de4000000000000, 0x0, 0x0, 0x8, 0xfffffffffffffff8, 0xc}, @generic={0x1, 0xffa5, 0x1bff, 0x6, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5f0e04a}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0xa, &(0x7f00000002c0)=""/10, 0x41100, 0x1, [], r1, 0x7, r0, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x9, 0x7}, 0x10}, 0x70) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 08:42:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r1 = msgget(0x1, 0x4d) msgrcv(r1, &(0x7f0000000000)={0x0, ""/72}, 0x50, 0x3, 0x2000) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) [ 352.071308][T25612] memory: usage 307192kB, limit 307200kB, failcnt 3303 08:42:45 executing program 0: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x201) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') [ 352.137374][T25612] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 352.217016][T25612] Memory cgroup stats for /syz4: [ 352.218150][T25612] anon 288243712 [ 352.218150][T25612] file 184320 [ 352.218150][T25612] kernel_stack 3538944 [ 352.218150][T25612] slab 7438336 [ 352.218150][T25612] sock 0 [ 352.218150][T25612] shmem 0 [ 352.218150][T25612] file_mapped 0 [ 352.218150][T25612] file_dirty 0 [ 352.218150][T25612] file_writeback 0 [ 352.218150][T25612] anon_thp 243269632 [ 352.218150][T25612] inactive_anon 0 [ 352.218150][T25612] active_anon 288178176 [ 352.218150][T25612] inactive_file 0 [ 352.218150][T25612] active_file 0 [ 352.218150][T25612] unevictable 0 [ 352.218150][T25612] slab_reclaimable 1486848 [ 352.218150][T25612] slab_unreclaimable 5951488 [ 352.218150][T25612] pgfault 18249 [ 352.218150][T25612] pgmajfault 0 [ 352.218150][T25612] workingset_refault 33 [ 352.218150][T25612] workingset_activate 0 [ 352.218150][T25612] workingset_nodereclaim 0 [ 352.218150][T25612] pgrefill 442 [ 352.218150][T25612] pgscan 540 [ 352.218150][T25612] pgsteal 70 [ 352.218150][T25612] pgactivate 363 [ 352.342453][T25612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13795,uid=0 [ 352.368264][T25612] Memory cgroup out of memory: Killed process 13795 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:46 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$getregs(0x7, r1, 0x4, &(0x7f0000000040)=""/98) 08:42:46 executing program 1: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x280a2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0x4) ptrace$cont(0x7, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xb39, 0xdd5a, 0xffffffffffffffe1, 0x5, 0x0, 0x9, 0xa00, 0x2, 0x200, 0x1, 0x12, 0x5, 0x8f7, 0xffff, 0x110d, 0x6, 0x1d5, 0x3, 0x1f, 0x3f, 0x1, 0x0, 0x3f, 0x400, 0x0, 0xb291, 0x1, 0xd96, 0x9, 0xf6, 0xef, 0x1f, 0x1, 0x4, 0x9ec, 0x4, 0x0, 0x50, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x40, 0xfffffffffffffffc, 0x40, 0x0, 0x5, 0x1, 0x5}, r2, 0xc, r1, 0x19) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000280)={0x8001, 0x1000, 0x33, 0x1, 0x1, 0x380d17e3}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001100000829bd7000fbdbdf2500000000000000000000000000000001000004d402006e000c001c00", @ANYRES32=r4, @ANYBLOB="01000000fa1a9dd100151359073500fff3c8c6aca580020000000000000067cdcd182ccd816546070d4e2c69cf08ed42a6fd802a22462acdba9b79257739cdf52f0fa7b9852bccfc65bae945e9"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:46 executing program 2: r0 = socket$inet6(0xa, 0xb, 0x36) setsockopt(r0, 0x3a, 0x1, &(0x7f0000000040)="00d41bd3055ca69d54405ed814adb6f388c5b22da2684fa0b3ed6c16eaa446f708f568ba31000000000000", 0x2b) mincore(&(0x7f0000bfd000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/233) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xa8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @dev, 0x0}, &(0x7f0000000140)=0xc) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0x80000000, 0xfffffffffffffffe, 0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@local, @dev={0xfe, 0x80, [], 0x1d}, @mcast2, 0x5, 0x0, 0xffffffff, 0x400, 0x4, 0x4010011, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x80000001) 08:42:46 executing program 5: r0 = getpid() openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000440)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000340)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x40a85323, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x200000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 08:42:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x5, [0x480, 0xd07ee511], [0xc1]}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x2000, 0x1000, 0x70a, 0x4, 0xfffffffffffff63d}) 08:42:46 executing program 2: r0 = memfd_create(&(0x7f0000000100)='/q\x88dev/cut*Sofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp6\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') 08:42:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x2, 0x7ff, 0x1}) [ 352.722109][T25929] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 352.791474][T25929] CPU: 0 PID: 25929 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 352.799411][T25929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.809505][T25929] Call Trace: [ 352.812807][T25929] dump_stack+0x172/0x1f0 [ 352.817146][T25929] dump_header+0x10b/0x82d [ 352.821573][T25929] oom_kill_process.cold+0x10/0x15 [ 352.826780][T25929] out_of_memory+0x79a/0x12c0 [ 352.831477][T25929] ? lock_downgrade+0x920/0x920 [ 352.836419][T25929] ? css_next_descendant_pre+0x18/0x190 [ 352.841972][T25929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.848224][T25929] ? oom_killer_disable+0x280/0x280 [ 352.853425][T25929] ? __kasan_check_read+0x11/0x20 [ 352.858462][T25929] mem_cgroup_out_of_memory+0x1d8/0x240 [ 352.864016][T25929] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 352.869744][T25929] ? do_raw_spin_unlock+0x57/0x270 [ 352.874864][T25929] ? _raw_spin_unlock+0x2d/0x50 [ 352.879759][T25929] try_charge+0xf4b/0x1440 [ 352.884189][T25929] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 352.889742][T25929] ? get_mem_cgroup_from_mm+0x139/0x320 [ 352.895300][T25929] ? __kasan_check_read+0x11/0x20 [ 352.900335][T25929] ? lock_downgrade+0x920/0x920 [ 352.905190][T25929] ? percpu_ref_tryget_live+0x111/0x290 [ 352.910751][T25929] __memcg_kmem_charge_memcg+0x71/0xf0 [ 352.916217][T25929] ? memcg_kmem_put_cache+0x50/0x50 [ 352.921425][T25929] ? get_mem_cgroup_from_mm+0x156/0x320 [ 352.926984][T25929] __memcg_kmem_charge+0x13a/0x3a0 [ 352.932129][T25929] __alloc_pages_nodemask+0x4f4/0x900 [ 352.937514][T25929] ? __alloc_pages_slowpath+0x2520/0x2520 [ 352.943644][T25929] ? trace_hardirqs_on_caller+0x6a/0x240 [ 352.949293][T25929] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 352.954767][T25929] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.961014][T25929] alloc_pages_current+0x107/0x210 [ 352.966119][T25929] pte_alloc_one+0x1b/0x1a0 [ 352.971354][T25929] __pte_alloc+0x20/0x310 [ 352.975668][T25929] copy_page_range+0x1520/0x1ee0 [ 352.980587][T25929] ? trace_hardirqs_on_caller+0x6a/0x240 [ 352.986226][T25929] ? pmd_alloc+0x180/0x180 [ 352.990624][T25929] ? vma_gap_callbacks_rotate+0x62/0x80 [ 352.996155][T25929] ? __rb_insert_augmented+0x20c/0xd90 [ 353.001617][T25929] ? validate_mm_rb+0xa3/0xc0 [ 353.006275][T25929] ? __vma_link_rb+0x275/0x370 [ 353.011022][T25929] ? __kasan_check_write+0x14/0x20 [ 353.016131][T25929] dup_mm+0xa67/0x1430 [ 353.020195][T25929] ? vm_area_dup+0x170/0x170 [ 353.024771][T25929] ? debug_mutex_init+0x2d/0x5a [ 353.029696][T25929] copy_process+0x28b7/0x6b00 [ 353.034373][T25929] ? __cleanup_sighand+0x60/0x60 [ 353.039299][T25929] _do_fork+0x146/0xfa0 [ 353.043454][T25929] ? copy_init_mm+0x20/0x20 [ 353.047942][T25929] ? __kasan_check_read+0x11/0x20 [ 353.052949][T25929] ? _copy_to_user+0x118/0x160 [ 353.057712][T25929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.063935][T25929] ? put_timespec64+0xda/0x140 [ 353.068707][T25929] __x64_sys_clone+0x18d/0x250 [ 353.073464][T25929] ? __ia32_sys_vfork+0xc0/0xc0 [ 353.078301][T25929] ? trace_hardirqs_off_caller+0x65/0x230 [ 353.084013][T25929] ? trace_hardirqs_on+0x67/0x240 [ 353.089020][T25929] do_syscall_64+0xfd/0x6a0 [ 353.093509][T25929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.099395][T25929] RIP: 0033:0x459879 [ 353.103301][T25929] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.122885][T25929] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 353.131277][T25929] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 08:42:46 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r2 = shmget(0x3, 0x3000, 0x800, &(0x7f0000114000/0x3000)=nil) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000100), 0x4) r5 = getpgrp(0xffffffffffffffff) r6 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0, 0x3d6}, {0x0}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r4, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r9, 0x116, 0x7f, &(0x7f0000000100), 0x4) r10 = getpgrp(0xffffffffffffffff) r11 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=ANY=[@ANYBLOB="1c0200"/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000010000000000000000100000001000000"], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="000000008f2c350d7adc48637f2eac88a1882a3150801fae04ec0c16f5359ab9c4e20591f114305363a91716d38a289edab3454f64a7682e65dbdda3d841aa95c049daaf0000000000a76cda97a3e4766d0fc998adbe7e3d7e0667744f2e15865031ba6f25587572b5eb462ca7d1c1839311540725d2a9a5b6e825e8312e6456df63258caa4936f214b644fdb9afe103e5a5f4a27ccb69ed281becd8c1cd9baf42dfd74536dec274cfc3a92db2e70faeff21131039af667df28016a62085f4bb8e7d7a41aac58f3800b4cd307443f2"], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r12) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x3c) ptrace$cont(0x18, r13, 0x0, 0x0) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r13, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0xc00000000000, r6, r7, r11, r12, 0x8, 0x81}, 0x4f, 0x9, 0x5f, 0x7fff, r13, r14, 0x5}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x610000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r15, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000081}, 0x10) 08:42:46 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000003f0100000000000000e3ff040000008b0e728306"], &(0x7f0000000080)=0x29) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xc95b, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x10001, 0x4}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3000008912, &(0x7f00000017c0)="7f000000000000007bf070") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000007126000000000000bf67000000000000150600000fff07006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000400f9ffbd43010000000000950000000000000005000000000000009500000000000000ad4a3ee1ff76c726cf0c4a9a5be3fd8cf8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffc98}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040), 0x4) 08:42:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/230, 0xe6}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f81008e27f26fad5f5225"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='qnx4\x00', 0x2000, &(0x7f0000000380)='bdevsecurityppp0+:selinux,$security&\\\x00') write$nbd(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="674466980000000000000000000000006517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d06589e03469637a7267592938766000035efd2000000009efdc31a381587a5960ac2022d45136803a9e841e84f03d05ebc7e87c10dfc8b2cf1fd84d6cd3e51a59d141efcce5fb6c010a28122ef7fb64c495acf9fc716592e0d3651c0d2b3820209af730cb3b2571be3d98be7f29c1129e03f80c27a83d91ffa3f2ad47dfcab"], 0x6e) sendfile(r1, r1, &(0x7f0000000200), 0xa198) [ 353.139319][T25929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.147275][T25929] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 353.155233][T25929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 353.163201][T25929] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 353.173617][T25929] memory: usage 307200kB, limit 307200kB, failcnt 3336 [ 353.200274][T25929] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.238497][T25929] Memory cgroup stats for /syz4: [ 353.239149][T25929] anon 288124928 [ 353.239149][T25929] file 184320 [ 353.239149][T25929] kernel_stack 3538944 [ 353.239149][T25929] slab 7438336 [ 353.239149][T25929] sock 0 [ 353.239149][T25929] shmem 0 [ 353.239149][T25929] file_mapped 0 [ 353.239149][T25929] file_dirty 0 [ 353.239149][T25929] file_writeback 0 [ 353.239149][T25929] anon_thp 243269632 [ 353.239149][T25929] inactive_anon 0 [ 353.239149][T25929] active_anon 288129024 [ 353.239149][T25929] inactive_file 0 [ 353.239149][T25929] active_file 0 [ 353.239149][T25929] unevictable 0 [ 353.239149][T25929] slab_reclaimable 1486848 08:42:47 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={r4, 0xa, 0x5, [0x6, 0x100, 0x0, 0x7fffffff, 0x200]}, 0x12) [ 353.239149][T25929] slab_unreclaimable 5951488 [ 353.239149][T25929] pgfault 18315 [ 353.239149][T25929] pgmajfault 0 [ 353.239149][T25929] workingset_refault 33 [ 353.239149][T25929] workingset_activate 0 [ 353.239149][T25929] workingset_nodereclaim 0 [ 353.239149][T25929] pgrefill 442 [ 353.239149][T25929] pgscan 540 [ 353.239149][T25929] pgsteal 70 [ 353.239149][T25929] pgactivate 363 [ 353.553397][T25929] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13754,uid=0 [ 353.593812][T25929] Memory cgroup out of memory: Killed process 13754 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) r1 = syz_open_dev$video(0x0, 0x401, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000200)={0x2, 0x5, [0x3f, 0xee, 0x5, 0x5], 0x7}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') r5 = dup(r1) r6 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x3f, 0x4000) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-control\x00', 0x232000, 0x0) r8 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x6d, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x8000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000fddbdf25020000000c00070008000100", @ANYRES32=r5, @ANYBLOB="2400070008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="000000000000000000000000917efa30982322439377cabc587150f4e1feddfa8a1569"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000fbdbdf25050000000800010000000000"], 0x1c}}, 0xc014) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) close(r2) r10 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = getpgrp(0xffffffffffffffff) fcntl$lock(r10, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r11}) 08:42:47 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0x94410f9246eb2492, r0, 0x80, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) setpgid(r0, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) sendmmsg$alg(r4, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="41c10ac273d0a64c780149d346105b412c1e2ec39802405eb2cfd2022a67e1d85df81b6a1799a35a9179f659ef5cc1c91278c53510872174462af74d720e8445a844b5f9821c8cec516b8aee673fa72bea9b947a3afbdc28f8d29fc8562c5ea3a24153f41818601db5245bdcac5dbcf8acf5aeb1748e2f29c09b527e922fb061a37705", 0x83}, {&(0x7f00000002c0)="79d0f36f2e2eb149c554a933ad85149e00b35b0e9a", 0x15}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x10}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="fcedf2", 0x3}], 0x1, &(0x7f0000000400)=[@op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc2, "8be13e2bd9b29e050a03a1233876353084188120a96582ceadb84b004b02452f157470cb1fab21717d87031327f19973f05008ff227a6796d455b364f35f202a91bce55a822767f128de15f1d9f61834a32130837518e90679032e4237116a38e51b0d91e2d151e0eb6f1a4109548ca8b043bfa72c102fbb1f75dd5bea42bcb216bec21b53a2afe77809e141ce3b5319c091057f0afaf1e550f2a28308572b9090b452d5db06b5f092b59e7ac7c984f93fb9f240a6a5230fd46d9726bf49b98013fa"}, @op={0x18, 0x117, 0x3, 0x9f5662c2f64ec367}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xa0, 0x117, 0x2, 0x88, "1872529143dc2e02b78bb6d02ffb34a18db45a6b65c20807bfdf53436c0b9fd6362da6f15cd72730550171cda45ada443d6752e6db8fb6e085fdf7b0f0d0a6b062aab8eb316a6573bccdce5b84cc13e36f0fcbadfcf625c6644111e721aa73a9f35203821ac6a73e7c33f015ab4da508b7236af0046b2fd7e4def2ed7ede8d4b06b0bc8fcd93f2b5"}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x3c, "da147d99bbb51def93d8b6bf85dcf59ec45aa02782cc05675d81d1d1b5df891c817084fb3a399622a9d350e9fe98c2a6e41d46e92f42c0915dd6517d"}, @op={0x18}], 0x240, 0x801}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="055ba0267d14a9d08ce401379c062e5cf3e8885c3146480a358d9540d6ba1d068994eef178b2819b8ede7e9548b8f11ecb5efb1a97c81cc7b036935d95a8d0160bb2e70e4cf2cb4e45060e12fb830c025e2dc6504f88f5b2f5820f9b2a085f172da8119447abc540c031bb24d994a16d1694b02effc06884aecc605704c092c867b0b1fb8fa9c0e22eb8651c3c052373e54bc39d35a904a415b2ea55d718eb7fa3ab5f406a6e8a31896e2ed39ef657abf5207e36fd049070e640964c4774011e3a961ee5d5fa4cc1bd707c12a509d0188e4e1a44c206e7883efcd71ad08fedfa", 0xe0}, {&(0x7f0000000740)="7a7aba7d1d280b8538120e58b26a53ee86203654067aed0f5decf65d6670c448826965cbe53026671aa4f5ddd6e95ae748d7c0d451fd9c14bc5612e3894636a43a72f008645ed73d7cb8df9b5fd5c5e707b109b701a588d064e63a5b7426238a8baa4c1af1a3b6ec84f04a464aded436e04e05e40cf4eb2a1ee7691b33c1a8e64663493661d3f02dd26cbf836fc075db0e1c601d17d2040ee926911f583d4590e4cf8d75c2ef138f695ec39fe50bd4bc50d2c5d667d38a908d4d920795418aa59de17310568af141a0365d15e32f947b05f0cc19421dbad894475ac326077aed91196d145b1de236bc12acb512065c40918fc8", 0xf3}, {&(0x7f0000000840)="d7362450213dc12e399bc04d79295279436706f1b56edfe794e680c6806a39acf69f77ee9acc02fa70cdda956f732e1af887ca130ae6f13f2783cd5e5e049040d04ee9e6", 0x44}, {&(0x7f00000008c0)="57ba2c9d2760dd55c181984ef6ec348d5c961fa2d23596ed81a5c16dbf7970f9352742fc2b340f8d27fcfbc39309740d5370a7d54afe996f07dd", 0x3a}, {&(0x7f0000000900)="852a4ca57efbb4f4f7d670f0f623c72415c50f1b4a04188cac546bef6830038d8ac50c03ae6653c19efbacf6509957a118afebb7395f27adec5525f9837024122fdaab98f2e308", 0x47}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/368], 0x170, 0x4000}], 0x3, 0x20000807) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x372c, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000100)=""/85) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:47 executing program 1: r0 = gettid() perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:47 executing program 5: rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x8) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000000)={0x1, {0x77359400}, 0x6, 0xffffffff}) 08:42:47 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180), 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) r1 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000448a6a88f6946e85604000000020080000800080002006dd259e3c36ef1b21c77d09ec48dda76e83ac24ecbc79bc56518a3fedbee99cefaac1f0b"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40045) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000600)={0x8000, 0x3, 0xff}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 08:42:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x2}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000240)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x210000, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) 08:42:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0xffffffda) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000140)=0xfe, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfe4e) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:42:47 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x30001) sendmsg$rds(r1, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)=""/213, 0xd5}], 0x1, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x40}, &(0x7f0000000140)=0xa4, &(0x7f0000000300)=0x8, 0x4, 0x8, 0x4, 0xfffffffffffffffe, 0x8, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x2a, 0x81}, &(0x7f0000000340)=0x50250dfe, &(0x7f0000000380)=0x737, 0x2, 0x200, 0x513571b9, 0xffffffffffffffff, 0x4, 0xc15e}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f00000013c0), 0x20}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x5a}, {&(0x7f0000001400)=""/88, 0x58}, &(0x7f0000001680)=[{&(0x7f0000001480)=""/179, 0xb3}, {&(0x7f0000001540)=""/42, 0x2a}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/85, 0x55}], 0x4, 0x40, 0x8000}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x600000000000000}, &(0x7f00000016c0)=0x7fff, &(0x7f0000001700)=0x1, 0x97, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x81, 0x4, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x198, 0x20000000}, 0x440c0) 08:42:47 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x800) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1108) 08:42:47 executing program 0: alarm(0x40) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe172, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000005c0), &(0x7f00000000c0)=0x4) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000001200)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="24000000000000000000000007000000070239ac1e010100000000440809f3000000030000000000140000000000000000000000010000000900000000000000a80000000000000000005d8e27f4fea334fefcac14141eac1414bb862300000000010f6e8634ee30cba045a716e5bf150105586e8d06020003f70604153a830f07ac1414aaac1e010100010000831307ac1414bbac1414aaac1414aaac1414aa00831bffac1414bbe0000002ac1414aae0000002ac1414bbffffffff831300ffffffffac1e0001e0000002ac1414aa83179fac1e0001ac1414bbac1e0101ffffffff7f0000010000"], 0xe8}}], 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xe54, 0x80) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000006c0)=ANY=[]) r4 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x7, 0x10182) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f00000001c0)={"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"}) [ 354.037934][T26213] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 08:42:47 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2040, 0x1e5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="b9000000c156ccb3521a68f4c417151d96f34308795c7b930575ec8479c0039d5989e27c27973837b31d0b37b257be3f6836f2de5e04528f034a861a2086d9fcc6b87c784c51256b3f909e85960f2a984bbd50b8ef489395a9d62422260ac6686ae38133f999baa8db457ab02ef8d713c1997b27d209e2181285921d9d90878cc98f8f7a37eb37ac0be62700020000ddc7b2c175e35e01a128ff4a1fa14687587da3070609eb1d133eefb411a8b9e7b17785583cf4681f9f8177bbd33d"], &(0x7f0000000140)=0xc1) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 354.158915][T26300] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 354.183527][T26300] CPU: 1 PID: 26300 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 354.191460][T26300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.201530][T26300] Call Trace: [ 354.204825][T26300] dump_stack+0x172/0x1f0 08:42:47 executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) fallocate(r1, 0x0, 0x0, 0x7fffffff) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x5a29, 0x1, [@null, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x80c1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000}}, 0x0, 0x9, 0x0, "11375b12573ac7bee3266deab2985daef9fb8527c278c6d63f72cc1628de8810faa421ab46e0bd38c3481eefd0a37611ac9c22a510e6985f59bbd2e3466e10ba85f5b8df2ddb66d94b6e6c7797f01e34"}, 0xd8) [ 354.209161][T26300] dump_header+0x10b/0x82d [ 354.213590][T26300] oom_kill_process.cold+0x10/0x15 [ 354.218709][T26300] out_of_memory+0x79a/0x12c0 [ 354.223482][T26300] ? lock_downgrade+0x920/0x920 [ 354.228341][T26300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.234584][T26300] ? oom_killer_disable+0x280/0x280 [ 354.239781][T26300] ? __kasan_check_read+0x11/0x20 [ 354.239806][T26300] mem_cgroup_out_of_memory+0x1d8/0x240 [ 354.250719][T26300] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 08:42:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001f000800080000000000"], 0x4}}, 0x0) [ 354.256359][T26300] ? do_raw_spin_unlock+0x57/0x270 [ 354.261568][T26300] ? _raw_spin_unlock+0x2d/0x50 [ 354.266423][T26300] try_charge+0xf4b/0x1440 [ 354.270854][T26300] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 354.276411][T26300] ? get_mem_cgroup_from_mm+0x139/0x320 [ 354.281968][T26300] ? __kasan_check_read+0x11/0x20 [ 354.287004][T26300] ? lock_downgrade+0x920/0x920 [ 354.291859][T26300] ? percpu_ref_tryget_live+0x111/0x290 [ 354.297412][T26300] __memcg_kmem_charge_memcg+0x71/0xf0 [ 354.302899][T26300] ? memcg_kmem_put_cache+0x50/0x50 [ 354.308228][T26300] ? get_mem_cgroup_from_mm+0x156/0x320 [ 354.313789][T26300] __memcg_kmem_charge+0x13a/0x3a0 [ 354.318914][T26300] __alloc_pages_nodemask+0x4f4/0x900 [ 354.324300][T26300] ? __this_cpu_preempt_check+0x3a/0x210 [ 354.329928][T26300] ? __alloc_pages_slowpath+0x2520/0x2520 [ 354.335634][T26300] ? get_task_policy.part.0+0x9c/0xb0 [ 354.340995][T26300] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 354.346527][T26300] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 354.352858][T26300] alloc_pages_current+0x107/0x210 [ 354.357953][T26300] pte_alloc_one+0x1b/0x1a0 [ 354.362448][T26300] __pte_alloc+0x20/0x310 [ 354.366773][T26300] copy_page_range+0x1520/0x1ee0 [ 354.371696][T26300] ? trace_hardirqs_on_caller+0x6a/0x240 [ 354.377321][T26300] ? pmd_alloc+0x180/0x180 [ 354.381720][T26300] ? vma_gap_callbacks_rotate+0x62/0x80 [ 354.387252][T26300] ? __rb_insert_augmented+0x20c/0xd90 [ 354.392698][T26300] ? validate_mm_rb+0xa3/0xc0 [ 354.397358][T26300] ? __vma_link_rb+0x275/0x370 [ 354.402106][T26300] ? __kasan_check_write+0x14/0x20 [ 354.407203][T26300] dup_mm+0xa67/0x1430 [ 354.411271][T26300] ? vm_area_dup+0x170/0x170 [ 354.415845][T26300] copy_process+0x28b7/0x6b00 [ 354.420513][T26300] ? __cleanup_sighand+0x60/0x60 [ 354.425448][T26300] _do_fork+0x146/0xfa0 [ 354.429606][T26300] ? copy_init_mm+0x20/0x20 [ 354.434094][T26300] ? __kasan_check_read+0x11/0x20 [ 354.439104][T26300] ? _copy_to_user+0x118/0x160 [ 354.443860][T26300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.450085][T26300] ? put_timespec64+0xda/0x140 [ 354.454830][T26300] __x64_sys_clone+0x18d/0x250 [ 354.459579][T26300] ? __ia32_sys_vfork+0xc0/0xc0 [ 354.464430][T26300] ? trace_hardirqs_off_caller+0x65/0x230 [ 354.470143][T26300] ? trace_hardirqs_on+0x67/0x240 [ 354.475192][T26300] do_syscall_64+0xfd/0x6a0 [ 354.479698][T26300] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.485580][T26300] RIP: 0033:0x459879 [ 354.489462][T26300] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.509136][T26300] RSP: 002b:00007efc99660c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 354.517544][T26300] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 354.525495][T26300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.533465][T26300] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.541421][T26300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 354.549479][T26300] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff 08:42:48 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x4000) socket(0x10, 0x80002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000240)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)={0x67, 0x100000001, 0x6, "656be5a6db4e876713ac1b1c4c1d92600059f3c0685b3acf7dec1c22c04eb759468a5b1119458426402f66e55609ea4f3696977cb9e70c60afd5c88d6588cada3b9b5f8df409ba81e08013186a24c95b1e6a3a24b980e1eb38287e9b5541e450d4485ea46d17b5"}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 354.612244][T26300] memory: usage 307200kB, limit 307200kB, failcnt 3364 [ 354.620321][T26300] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 354.646205][T26300] Memory cgroup stats for /syz4: [ 354.648125][T26300] anon 288129024 [ 354.648125][T26300] file 184320 08:42:48 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x0, 0x0, 0x8}, 0xbd7}}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x10002, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) [ 354.648125][T26300] kernel_stack 3538944 [ 354.648125][T26300] slab 7438336 [ 354.648125][T26300] sock 0 [ 354.648125][T26300] shmem 0 [ 354.648125][T26300] file_mapped 0 [ 354.648125][T26300] file_dirty 0 [ 354.648125][T26300] file_writeback 0 [ 354.648125][T26300] anon_thp 243269632 [ 354.648125][T26300] inactive_anon 0 [ 354.648125][T26300] active_anon 288133120 [ 354.648125][T26300] inactive_file 0 [ 354.648125][T26300] active_file 0 [ 354.648125][T26300] unevictable 0 [ 354.648125][T26300] slab_reclaimable 1486848 [ 354.648125][T26300] slab_unreclaimable 5951488 [ 354.648125][T26300] pgfault 18480 [ 354.648125][T26300] pgmajfault 0 [ 354.648125][T26300] workingset_refault 33 [ 354.648125][T26300] workingset_activate 0 [ 354.648125][T26300] workingset_nodereclaim 0 [ 354.648125][T26300] pgrefill 442 [ 354.648125][T26300] pgscan 540 [ 354.648125][T26300] pgsteal 70 [ 354.648125][T26300] pgactivate 363 08:42:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0xf0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x10, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r3, 0x73, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x5, 0x1}) [ 354.776019][T26418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:42:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x29, 0x3, 0x0, {0x6, 0x8, 0x0, 'vboxnet0'}}, 0x29) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:48 executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180), 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000}) r1 = syz_open_dev$loop(&(0x7f0000000740)='/dev/loop#\x00', 0x0, 0x0) getresgid(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0d242263a88be6f68c9350a37f03b53b034ff9a16a825dd83edff7c5f135e900ff43f5ba9b1a710266858d7d4faeb92444329fdcfdf13b87a1537fb8ef5ff0dc2fca043b877a62a52e06feeb99f62b1ee4b12b3feb640458ca686e17d0650b600026eef8da8ebf742159e323feb4d4a88a4ffaaa712eede8407682683d6af834aabfd622804d0f2a3b4bef06c77dbfba82043b57b21ed549eb4a30beccd1420306128f4b8a1d696d578f10bffc84e73e42cf93747a40f571d96d0b133ed9f97b837853384c8e7f6b62ac9206034e1fb4ff7a7b25e75f5a668430e9cf68b19f03ac39438dfed64cbf3df7f80fccfc96297471712cd66f5ee6221e7c64d5376e55c22e4284eac1e959580374a71a9bfa5c353e3991779486d543c20b3efe318b0efcf16d565ab1275a008117581959096a1c3acab57c1d879d504e3e9ff8e21f4c770c1391f0de9345896bb98c66042c732ea11284646e8be3a1467c190c1cb5d3da7ce80a842e71a9e2b8b87127049976aaf4d436b780db91070d7643e34893a44c4299b797371f50575e03e37b557", @ANYRES16=r2, @ANYBLOB="000448a6a88f6946e85604000000020080000800080002006dd259e3c36ef1b21c77d09ec48dda76e83ac24ecbc79bc56518a3fedbee99cefaac1f0b"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40045) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000600)={0x8000, 0x3, 0xff}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 08:42:48 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x91, 0x0) pread64(r1, &(0x7f00000000c0)=""/96, 0x60, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100, 0x40500) r2 = syz_open_dev$video(0x0, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xc}, @local, 0x0, 0x4, [@rand_addr=0xadd6, @rand_addr=0xfffffffffffffffa, @multicast2, @loopback]}, 0x20) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0xc0285629, 0x0) [ 354.813538][T26300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26200,uid=0 [ 354.968962][T26300] Memory cgroup out of memory: Killed process 26200 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 355.040149][T26507] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 355.095927][ T1057] oom_reaper: reaped process 26200 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 355.319202][T26585] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 355.353454][T26585] CPU: 1 PID: 26585 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 355.361408][T26585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.371881][T26585] Call Trace: [ 355.375368][T26585] dump_stack+0x172/0x1f0 [ 355.379975][T26585] dump_header+0x10b/0x82d [ 355.384403][T26585] oom_kill_process.cold+0x10/0x15 [ 355.389511][T26585] out_of_memory+0x79a/0x12c0 [ 355.394201][T26585] ? lock_downgrade+0x920/0x920 [ 355.399245][T26585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.405510][T26585] ? oom_killer_disable+0x280/0x280 [ 355.410717][T26585] mem_cgroup_out_of_memory+0x1d8/0x240 [ 355.416265][T26585] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 355.421907][T26585] ? do_raw_spin_unlock+0x57/0x270 [ 355.427017][T26585] ? _raw_spin_unlock+0x2d/0x50 [ 355.431866][T26585] try_charge+0xf4b/0x1440 [ 355.436287][T26585] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 355.441838][T26585] ? get_mem_cgroup_from_mm+0x139/0x320 [ 355.447381][T26585] ? __kasan_check_read+0x11/0x20 [ 355.452408][T26585] ? lock_downgrade+0x920/0x920 [ 355.457276][T26585] ? percpu_ref_tryget_live+0x111/0x290 [ 355.462819][T26585] __memcg_kmem_charge_memcg+0x71/0xf0 [ 355.468328][T26585] ? memcg_kmem_put_cache+0x50/0x50 [ 355.473542][T26585] ? get_mem_cgroup_from_mm+0x156/0x320 [ 355.479206][T26585] __memcg_kmem_charge+0x13a/0x3a0 [ 355.484329][T26585] __alloc_pages_nodemask+0x4f4/0x900 [ 355.489696][T26585] ? __alloc_pages_slowpath+0x2520/0x2520 [ 355.495414][T26585] ? percpu_ref_put_many+0xb6/0x190 [ 355.500614][T26585] ? trace_hardirqs_on+0x67/0x240 [ 355.505619][T26585] ? __kasan_check_read+0x11/0x20 [ 355.510718][T26585] copy_process+0x3f8/0x6b00 [ 355.515308][T26585] ? perf_trace_lock+0xeb/0x4c0 [ 355.520157][T26585] ? __cleanup_sighand+0x60/0x60 [ 355.525101][T26585] ? __kasan_check_read+0x11/0x20 [ 355.530128][T26585] ? do_raw_spin_unlock+0x57/0x270 [ 355.535241][T26585] _do_fork+0x146/0xfa0 [ 355.539394][T26585] ? copy_init_mm+0x20/0x20 [ 355.543882][T26585] ? __kasan_check_read+0x11/0x20 [ 355.548891][T26585] ? _copy_to_user+0x118/0x160 [ 355.553657][T26585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.559886][T26585] ? put_timespec64+0xda/0x140 [ 355.564646][T26585] __x64_sys_clone+0x18d/0x250 [ 355.569401][T26585] ? __ia32_sys_vfork+0xc0/0xc0 [ 355.574256][T26585] ? trace_hardirqs_off_caller+0x65/0x230 [ 355.579959][T26585] ? trace_hardirqs_on+0x67/0x240 [ 355.586462][T26585] do_syscall_64+0xfd/0x6a0 [ 355.591041][T26585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.596913][T26585] RIP: 0033:0x459879 [ 355.600796][T26585] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.620597][T26585] RSP: 002b:00007efc9961ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 355.629023][T26585] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459879 [ 355.636991][T26585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.645033][T26585] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 355.653095][T26585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc9961f6d4 [ 355.661069][T26585] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff [ 355.669774][T26585] memory: usage 307180kB, limit 307200kB, failcnt 3377 [ 355.682823][T26585] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 355.689918][T26585] Memory cgroup stats for /syz4: [ 355.689987][T26585] anon 288051200 [ 355.689987][T26585] file 184320 [ 355.689987][T26585] kernel_stack 3473408 [ 355.689987][T26585] slab 7438336 [ 355.689987][T26585] sock 0 [ 355.689987][T26585] shmem 0 [ 355.689987][T26585] file_mapped 0 [ 355.689987][T26585] file_dirty 0 [ 355.689987][T26585] file_writeback 0 [ 355.689987][T26585] anon_thp 239075328 [ 355.689987][T26585] inactive_anon 0 [ 355.689987][T26585] active_anon 288055296 [ 355.689987][T26585] inactive_file 0 [ 355.689987][T26585] active_file 0 [ 355.689987][T26585] unevictable 0 [ 355.689987][T26585] slab_reclaimable 1486848 [ 355.689987][T26585] slab_unreclaimable 5951488 [ 355.689987][T26585] pgfault 18513 [ 355.689987][T26585] pgmajfault 0 [ 355.689987][T26585] workingset_refault 33 [ 355.689987][T26585] workingset_activate 0 [ 355.689987][T26585] workingset_nodereclaim 0 [ 355.689987][T26585] pgrefill 442 [ 355.689987][T26585] pgscan 540 [ 355.689987][T26585] pgsteal 70 [ 355.689987][T26585] pgactivate 363 [ 355.787788][T26585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26269,uid=0 [ 355.803276][T26585] Memory cgroup out of memory: Killed process 26585 (syz-executor.4) total-vm:72840kB, anon-rss:4260kB, file-rss:35800kB, shmem-rss:0kB 08:42:49 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000080)=""/150) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$sock_ifreq(r2, 0x8918, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_hwaddr=@random="0a643924900d"}) 08:42:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), 0xc) 08:42:49 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "e5334cef5f60223c19572fa3dad6d7f589aae819"}, 0x15, 0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) splice(r3, 0x0, r0, 0x0, 0x2, 0x0) 08:42:49 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(r0) rt_sigtimedwait(&(0x7f0000000040)={0x10000}, &(0x7f0000000100), &(0x7f0000000080)={0x77359400}, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) [ 355.821606][ T1057] oom_reaper: reaped process 26585 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 08:42:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) migrate_pages(r2, 0x7, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0xff) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="26f29552fa3564057efa8b07644c60db044614644e674deb2698858ac5c719785ee1"], 0x8, 0x0) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000040)=""/112) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 08:42:49 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), 0xc) 08:42:49 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x30001) sendmsg$rds(r1, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)=""/213, 0xd5}], 0x1, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x40}, &(0x7f0000000140)=0xa4, &(0x7f0000000300)=0x8, 0x4, 0x8, 0x4, 0xfffffffffffffffe, 0x8, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x2a, 0x81}, &(0x7f0000000340)=0x50250dfe, &(0x7f0000000380)=0x737, 0x2, 0x200, 0x513571b9, 0xffffffffffffffff, 0x4, 0xc15e}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000003c0)=""/4096, 0x1000}, &(0x7f00000013c0), 0x20}}, @rdma_args={0x48, 0x114, 0x1, {{0x1, 0x5a}, {&(0x7f0000001400)=""/88, 0x58}, &(0x7f0000001680)=[{&(0x7f0000001480)=""/179, 0xb3}, {&(0x7f0000001540)=""/42, 0x2a}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/85, 0x55}], 0x4, 0x40, 0x8000}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x600000000000000}, &(0x7f00000016c0)=0x7fff, &(0x7f0000001700)=0x1, 0x97, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x81, 0x4, 0x9}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x198, 0x20000000}, 0x440c0) 08:42:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = socket$caif_stream(0x25, 0x1, 0x3) sync_file_range(r1, 0x7, 0xe5b, 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000000)={0xd12b65bf46dba350, 0x0, [], @bt={0x4, 0x401, 0x5, 0x5, 0x7fffffff, 0x6, 0x0, 0x2}}) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x95c8}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x2c0}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 08:42:49 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r3) gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:50 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xfed4, 0x0, 0x0, 0x0, 0x0, 0x40850}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000007c0)={[0x7, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x1000000000, 0x0, 0xcd], 0x0, 0x4}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfffffffffffffee1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000ac1414aa00000000070000000100000000ac1414aaac1414aa000000007f000001b6000008f67125af4d9cd9891367354c34d046378007c95aac7fc89f190c484340c3cce48c83d15a20c6c803b1d065c8416ace33db58ccfab4eb05cea9086d3e948c76208af0b5e1fe89bcd692bab088511e1224bc649c05c669bf1f4d51cdbe444fadfaf0e8c732df3c8d075047cc103562113dc9c6ab993047a47c1944f5cd80f07fb7abefb25122ddd57ec0459ec9333c2d6f845c87b4d0f0bc98e700b2a5f5eeb140c3e2"], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000440)=0x2, &(0x7f0000000480)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000980)={r6, 0x1000, "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"}, &(0x7f0000000180)=0x1008) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 08:42:50 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffff138, 0x400) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) [ 356.794994][T26798] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:42:50 executing program 2: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000180)=@bpq0='bpq0\x00', 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x4000, 0x99, &(0x7f0000000000)=""/153}, {0x0, 0xe9, &(0x7f00000001c0)=""/233}, {0x0, 0x6d, &(0x7f00000000c0)=""/109}, {0x100000, 0x59, &(0x7f00000002c0)=""/89}]}) get_thread_area(&(0x7f0000000340)={0x7, 0x20000000, 0x2000, 0x6, 0x6, 0x1, 0x2, 0xa51, 0xffffffff80000001, 0x6d2f}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x100480, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xffcf) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000940)='/dev/sequencer\x00', 0x4ec000, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000980)=""/98) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000100), 0x4) r6 = getpgrp(0xffffffffffffffff) syz_mount_image$bfs(&(0x7f0000000440)='bfs\x00', &(0x7f0000000740)='./file1\x00', 0x0, 0x2, &(0x7f0000000900)=[{&(0x7f0000000780)="03aeb580e2c11e74da543065e52676ed18d14f4f8c5f75812cec7421e6a7f79c20c367f61c0b6bc732718a877feeebce72960070e4337aa761397ea21b529e6c64b2aa54ca6b5a38ce9eb216ee401cbf6d668537f3d2e8599adc2b6d7ba7a589cd740152abb9592979732afb4eee5b641696d1f89e83970458dce9f386b94fb3b19853f44d49c5e0e8fa9939f167f759a601441c3434c9d5b7c7d84a2e46178a1dbb748982b583108c2b4fbc6cca76", 0xaf, 0x9}, {&(0x7f0000000840)="737e54f1142f7242b2f5c456cd9b1a9cf13405a0b61465931021362e711a1f88ff462e6ec425f694142fcac14689ea4ecd25638c1d46562f1775093a37d8258d8b0cc44445a66bd77063a95f25c35f13226ca6e21fd10de2013ff487b607013f2db91dadbf79481bae4dcedb52f5a8905ad9961996494fc220e1b5514a7cac5af31cc5eb1ec1b41f21c59e30b14a3ecc11c67b88ab70733515ed7c", 0x9b, 0x6}], 0xac1c45d43cf256d3, 0x0) r7 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c7d0b7f940000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, [], 0x15}, 0x4e24, 0x10000, 0x4e23, 0x40, 0x0, 0x0, 0x80, 0x33, r2, r7}, {0x9, 0x4, 0x9, 0x5, 0x5, 0x71, 0x1, 0xfffffffffffffffb}, {0x8, 0x80000001, 0x4, 0x10001}, 0x5, 0x6e6bb2, 0x1, 0x1, 0x3, 0x3}, {{@in6=@empty, 0x4d4, 0x33}, 0xa, @in6=@rand_addr="d4565162380350312797c9d9e219b817", 0x0, 0x2, 0xf43e27c73a6f1a74, 0x7, 0x100, 0x6efc, 0x6}}, 0xe8) [ 356.849903][T26798] CPU: 1 PID: 26798 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 356.857838][T26798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.867917][T26798] Call Trace: [ 356.871224][T26798] dump_stack+0x172/0x1f0 [ 356.875568][T26798] dump_header+0x10b/0x82d [ 356.879996][T26798] ? oom_kill_process+0x94/0x3f0 [ 356.884939][T26798] oom_kill_process.cold+0x10/0x15 [ 356.890320][T26798] out_of_memory+0x79a/0x12c0 [ 356.895005][T26798] ? lock_downgrade+0x920/0x920 [ 356.899867][T26798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.906118][T26798] ? oom_killer_disable+0x280/0x280 [ 356.911409][T26798] ? __kasan_check_read+0x11/0x20 [ 356.916444][T26798] mem_cgroup_out_of_memory+0x1d8/0x240 [ 356.922188][T26798] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 356.927830][T26798] ? do_raw_spin_unlock+0x57/0x270 [ 356.932945][T26798] ? _raw_spin_unlock+0x2d/0x50 [ 356.937900][T26798] try_charge+0xf4b/0x1440 [ 356.942335][T26798] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 356.947907][T26798] ? percpu_ref_tryget_live+0x111/0x290 [ 356.953455][T26798] ? get_mem_cgroup_from_mm+0x16/0x320 [ 356.958937][T26798] ? get_mem_cgroup_from_mm+0x156/0x320 [ 356.964486][T26798] mem_cgroup_try_charge+0x136/0x590 [ 356.969867][T26798] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 356.976109][T26798] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 356.981753][T26798] do_huge_pmd_wp_page_fallback+0x24c/0x16d0 [ 356.987737][T26798] ? lock_downgrade+0x920/0x920 [ 356.992592][T26798] ? defrag_store+0x360/0x360 08:42:50 executing program 5: seccomp(0x3, 0x652d888c478a3837, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0x80000000) [ 356.997278][T26798] ? lock_downgrade+0x920/0x920 [ 357.002131][T26798] ? swp_swapcount+0x540/0x540 [ 357.006897][T26798] ? shrink_huge_zero_page_scan+0x1a0/0x1a0 [ 357.012790][T26798] ? __kasan_check_read+0x11/0x20 [ 357.017833][T26798] ? do_raw_spin_unlock+0x57/0x270 [ 357.022940][T26798] do_huge_pmd_wp_page+0x806/0x2270 [ 357.028140][T26798] ? __split_huge_pmd+0x27e0/0x27e0 [ 357.033336][T26798] ? balance_dirty_pages+0x2b80/0x2b80 [ 357.038794][T26798] ? ext4_set_page_dirty+0x2b7/0x480 [ 357.044094][T26798] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 08:42:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = shmget$private(0x0, 0x1000, 0x1f91, &(0x7f0000ffc000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0xd48a5a656600d03e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2201, 0x0) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000100), 0x4) r7 = getpgrp(0xffffffffffffffff) r8 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000008200)={{{@in6, @in=@local}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000008300)=0xe8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008cc0)=[{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x58}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, {&(0x7f00000023c0)=@abs={0x981b062a71330b8b, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002440)}, {&(0x7f00000025c0)="20ecc0df157c643265dee25ea1caff9c882d2746ebd49d057b09836bbda0d2d7708ce6c2d65b429bc20e0b4c5318bf4ff483b9d685b264ce8b8d361b57d7364395c95d78745407f5991a9a6f1cbacb4798de51a8e84367d25a8068c992aa20f6e12df2dccb14c1ae8309a7dc57cb19aaa53a39ceda6fa1b277bccee65c28c97c622a6f1d186f1912b048acc25dff98ecba4a6104aeae6f3db4a54718bbace0558fe14b879ae944c30d18f439047016ee01d91f0dab7f127e29c08761787e169f1bfc2b8ac0028619b679540531884cc6a0a42a7c28f9cf96956e2febfd73fa68a23dda7d6592", 0xe6}, {0x0}, {0x0}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40, 0x40000}, {&(0x7f0000003b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, {0x0, 0xfffffffffffffee1, &(0x7f00000055c0)=[{&(0x7f0000005540)="9586c5a4b3603f024947c1cd502f", 0xe}, {&(0x7f0000005580)="25fa5a82d9", 0x5}], 0x2, &(0x7f0000005a40)=[@rights={{0x1c, 0x1, 0x1, [r6, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x4004}, {&(0x7f0000005b40)=@abs, 0x6e, &(0x7f0000006bc0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000007f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{0x0}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000008500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x8, 0x0) r9 = gettid() r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x3c) ptrace$cont(0x18, r10, 0x0, 0x0) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r10, 0x0, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0xfff, r3, r4, r8, 0xee00}, 0x3, 0x0, 0x1, 0x3, r9, r10, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r11, 0x4070aea0, 0x0) ioctl$LOOP_CTL_ADD(r11, 0x4c80, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000180)=[@clear_death={0x40046305, 0x0, 0x40106308}], 0xffffffffffffffae, 0x0, 0x0}) [ 357.050335][T26798] ? pmd_val+0x85/0x100 [ 357.054504][T26798] ? add_mm_counter_fast.part.0+0x40/0x40 [ 357.060226][T26798] ? fault_dirty_shared_page.isra.0+0x18c/0x200 [ 357.066473][T26798] __handle_mm_fault+0x14cf/0x3f20 [ 357.071605][T26798] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 357.077151][T26798] ? __kasan_check_read+0x11/0x20 [ 357.082186][T26798] ? trace_hardirqs_on+0x67/0x240 [ 357.087219][T26798] handle_mm_fault+0x1b5/0x6b0 [ 357.092079][T26798] __do_page_fault+0x536/0xdd0 [ 357.096854][T26798] do_page_fault+0x38/0x590 [ 357.101449][T26798] page_fault+0x39/0x40 [ 357.105600][T26798] RIP: 0033:0x4006c4 [ 357.109567][T26798] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 41 54 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 27 54 00 00 8a [ 357.129201][T26798] RSP: 002b:00007ffd980dfd50 EFLAGS: 00010206 [ 357.135263][T26798] RAX: 00000000208f9f09 RBX: 0000000000000000 RCX: 0000000020000000 [ 357.135271][T26798] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000208f9f09 08:42:50 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 357.135278][T26798] RBP: 00000000007612c0 R08: 0000000000000000 R09: 0000000000000000 [ 357.135291][T26798] R10: 00000000004395d0 R11: 0000000000000012 R12: 00000000004c5e06 [ 357.159261][T26798] R13: 000000000000012c R14: 00000000007612c8 R15: fffffffffffffffe [ 357.163184][ T26] audit: type=1800 audit(1567759370.876:60): pid=26844 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 08:42:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000000)='GPL\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0xfffffffffffffffd, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffe00}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r5, 0x103, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x908}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8868fe78959d2204}, 0xc, &(0x7f0000000840)={&(0x7f0000000180)={0x30, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/\x02etstat\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') statx(r0, &(0x7f0000000080)='./file0\x00', 0x1e00, 0x10, &(0x7f0000000740)) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r8, 0x4070aea0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r9, 0x5}, 0x180}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) preadv(r8, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/132, 0x84}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1532, 0x1, [0x0]}, 0xa) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000240)={{0x1, 0x6, 0x10000, 0x3, 'syz0\x00', 0x3}, 0x0, [0x1, 0xbf, 0x3ff, 0x100000000, 0x401, 0xffffffff, 0x3, 0x5, 0x2, 0x1, 0x9, 0x100000000, 0x2, 0x3, 0x5, 0xb9, 0x0, 0x1, 0xffffffffffffff00, 0x0, 0x2, 0x798, 0x100, 0x4, 0x7ff, 0x78, 0x7, 0x8, 0x1, 0xfff, 0x1, 0x3fad, 0x0, 0x6, 0x6, 0x0, 0x1, 0x2, 0x9, 0xfffffffffffffffa, 0x7d, 0x8, 0x1, 0x7, 0x6, 0x400, 0xa7b6, 0x5, 0x37fe, 0x1f, 0x6, 0x6, 0x3, 0x7, 0x80000001, 0x7, 0x3, 0x7fffffff, 0x7, 0x0, 0x5, 0xa1dd, 0x8, 0x5, 0x400, 0x9, 0x800, 0x8, 0x101, 0xff, 0x7, 0x8, 0x68, 0x8, 0xffffffffffffff40, 0x3d72, 0x0, 0x2b1c, 0x1a2, 0x7ff, 0x7, 0x3000000, 0x47a, 0x8, 0xffffffff00000000, 0x0, 0x8, 0x2e, 0x7, 0x80000000, 0x9, 0x6, 0x200, 0x401, 0x1000, 0x0, 0x7, 0x3f, 0x3, 0x7, 0x9, 0x4, 0x0, 0x7, 0x2, 0xffffffffffffffa5, 0x8, 0x3, 0x539, 0x1137, 0x5, 0xffff, 0x8000, 0x7f, 0x7f, 0x9, 0x3, 0x339, 0x2d, 0x7fffffff, 0x4, 0x100000001, 0x5, 0x7, 0x401, 0x7, 0x7, 0x8], {0x0, 0x1c9c380}}) 08:42:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, {0x2, 0x2, 0xe83d, 0x3a88, 0x675, 0x3efd}, 0xf85, 0x1f}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x100}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 08:42:51 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) [ 357.193310][T26798] memory: usage 307200kB, limit 307200kB, failcnt 3420 [ 357.203388][T26798] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.226021][T26798] Memory cgroup stats for /syz4: [ 357.226108][T26798] anon 286126080 [ 357.226108][T26798] file 184320 [ 357.226108][T26798] kernel_stack 3538944 [ 357.226108][T26798] slab 7438336 [ 357.226108][T26798] sock 0 [ 357.226108][T26798] shmem 0 [ 357.226108][T26798] file_mapped 0 [ 357.226108][T26798] file_dirty 0 [ 357.226108][T26798] file_writeback 0 [ 357.226108][T26798] anon_thp 241172480 [ 357.226108][T26798] inactive_anon 0 [ 357.226108][T26798] active_anon 286060544 [ 357.226108][T26798] inactive_file 0 [ 357.226108][T26798] active_file 0 [ 357.226108][T26798] unevictable 0 [ 357.226108][T26798] slab_reclaimable 1486848 [ 357.226108][T26798] slab_unreclaimable 5951488 [ 357.226108][T26798] pgfault 18678 [ 357.226108][T26798] pgmajfault 0 [ 357.226108][T26798] workingset_refault 33 [ 357.226108][T26798] workingset_activate 0 [ 357.226108][T26798] workingset_nodereclaim 0 [ 357.226108][T26798] pgrefill 442 [ 357.226108][T26798] pgscan 540 [ 357.226108][T26798] pgsteal 70 [ 357.226108][T26798] pgactivate 363 08:42:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0xf) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x6, 0x1, 0x7}) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000d80)="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", 0x1a000, 0x0, 0x0, 0x0) [ 357.356863][T26798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=26583,uid=0 08:42:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x25400, 0x0) [ 357.453291][T26798] Memory cgroup out of memory: Killed process 26583 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 08:42:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x1a7f322b7de0200) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000400500ef000000e7fc4b0900980000000000b787100100000000000000256013a4ea8aaa"]) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000001c0)=[0x1, 0x9]) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000080)={0x8, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0x1000, 0x0, 0x3f, 0x2831, "eb4788be"}, 0x696, 0x3, @userptr=0x15, 0x4}) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000280)={0x7fff, "4f0e28c2aec17097967ae066907ec61fb5c6b6c3d9ba78a9e1bc660dd5732946", 0xc617caf74244d087, 0x1c4, 0x3, 0x7f, 0x2, 0x2, 0xffffffff80000001, 0x8}) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x100000001, 0x4, 0x60}}, 0x28) [ 357.547240][T26832] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 08:42:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000280)={0xa0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r2) write$P9_RGETATTR(r0, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x4, {0x51, 0x0, 0x1}, 0x8a05927ee6c008fb, r1, r2, 0x8, 0x20, 0x437, 0x1, 0x100000000, 0xe8c, 0x3, 0x0, 0x0, 0x400, 0x852, 0x1, 0x6, 0xffffffffabd3a57b, 0x100000000}}, 0xa0) [ 357.784187][T26832] CPU: 0 PID: 26832 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 357.792125][T26832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.802186][T26832] Call Trace: [ 357.805486][T26832] dump_stack+0x172/0x1f0 [ 357.809828][T26832] dump_header+0x10b/0x82d [ 357.814310][T26832] ? oom_kill_process+0x94/0x3f0 [ 357.819227][T26832] oom_kill_process.cold+0x10/0x15 [ 357.824317][T26832] out_of_memory+0x79a/0x12c0 [ 357.828976][T26832] ? lock_downgrade+0x920/0x920 [ 357.833808][T26832] ? oom_killer_disable+0x280/0x280 [ 357.838987][T26832] ? __kasan_check_read+0x11/0x20 [ 357.843993][T26832] mem_cgroup_out_of_memory+0x1d8/0x240 [ 357.849613][T26832] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 357.855285][T26832] ? do_raw_spin_unlock+0x57/0x270 [ 357.860723][T26832] ? _raw_spin_unlock+0x2d/0x50 [ 357.865554][T26832] try_charge+0xa2d/0x1440 [ 357.869954][T26832] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 357.875482][T26832] ? get_mem_cgroup_from_mm+0x139/0x320 [ 357.881007][T26832] ? __kasan_check_read+0x11/0x20 [ 357.886033][T26832] ? lock_downgrade+0x920/0x920 [ 357.890874][T26832] ? percpu_ref_tryget_live+0x111/0x290 [ 357.896399][T26832] __memcg_kmem_charge_memcg+0x71/0xf0 [ 357.901836][T26832] ? memcg_kmem_put_cache+0x50/0x50 [ 357.907023][T26832] ? get_mem_cgroup_from_mm+0x156/0x320 [ 357.912550][T26832] __memcg_kmem_charge+0x13a/0x3a0 [ 357.917646][T26832] __alloc_pages_nodemask+0x4f4/0x900 [ 357.923018][T26832] ? __alloc_pages_slowpath+0x2520/0x2520 [ 357.928721][T26832] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 357.934941][T26832] alloc_pages_current+0x107/0x210 [ 357.940045][T26832] pte_alloc_one+0x1b/0x1a0 [ 357.944533][T26832] __handle_mm_fault+0x34d7/0x3f20 [ 357.949635][T26832] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 357.955159][T26832] ? __kasan_check_read+0x11/0x20 [ 357.960166][T26832] ? trace_hardirqs_on+0x67/0x240 [ 357.965172][T26832] handle_mm_fault+0x1b5/0x6b0 [ 357.969928][T26832] __do_page_fault+0x536/0xdd0 [ 357.974670][T26832] ? page_fault+0x16/0x40 [ 357.978983][T26832] do_page_fault+0x38/0x590 [ 357.983467][T26832] page_fault+0x39/0x40 [ 357.987597][T26832] RIP: 0033:0x459879 [ 357.991482][T26832] Code: Bad RIP value. [ 357.995525][T26832] RSP: 002b:00007efc99660c78 EFLAGS: 00010246 [ 358.001569][T26832] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000459879 [ 358.009518][T26832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.017476][T26832] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.025513][T26832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc996616d4 [ 358.033472][T26832] R13: 00000000004bfd46 R14: 00000000004d1af8 R15: 00000000ffffffff 08:42:51 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x91, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007f6000fe01b2403b7bbb0a60000004a84302910000003900050035000c00020000000d0005000000f2ffffffc68b800823090000008d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1000000000000081}, 0x0) r0 = socket(0x40000000010, 0x10000000803, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x3ff, 0x133941) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000780)={0x4, 0xfffffffffffffffc, 0x33, 0xfffffffffffff001}, 0x8) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x1a, 0x2, @tid=r1}, &(0x7f00000000c0)=0x0) timer_delete(r3) 08:42:51 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40)="45a0a4427587107928c1c383143837bb29eeae412e39e7c3cd8cfc4f77059c58cc3ff5d5a09843981a2e16c72d54a26245b03414738163340e22d9afa8082de1c1933125a2a41e3efdb407b9915a98dae85ce4392bfecb1e3f4e7a4c053f2b6b56e28447cbc744701ad1f6703c4df8aebf4018a1733b2e3c9bf13e9b7ee39d30e2539907e5836192e23426c01ebda14e150d6f86f5959e5fd1635fa21ac5ba0e49c73d936baeedbaf0e0572b4010de35c873d6d64ca4528e2bc5506dc5632a68ec0c93915e1a54e16b1ecefd836ff18b5a26af53d0dbc23e3b436e22dd89d4c3f7f2872779d1ddf0ad2f11899a663b479837006e145a588e274ed02faf97429fe17522fd37227377741784260bdd36d3c8326b68825385f169a770286fa758be893254c26220a82cd88b0d5aa4e865a9ede97d97feb7138db444db10a25368e786876666b318747514edf88219ac1adb51a0e174e9a0da712ed46017c9ddff492e8e67289ff7b8398b332180e1a41531012a09e6ac18f9daca104963a8839b805fcee41bf77e47fd2122fa1190c5aa4f3d54dc141ddefdf9b3fc9bc5948065c4ef08032b306058d5d24a1403866c3e09b54c37415b61df9af254de9f64b58893ea182b9f861ee79ee23f8c2975de6304c4beb37d4a6435eef87c859344fe1e3b4759d868f0f2f3c2774989853271645665a44eec5aa3617872378231d88685f3d06de8b84bb17d14386d989ec8d7e9034037fc61737c1b92a524218209f4f0fbe16f7c5b660f66823c6e43a5267aac0dae5c603253ac01cde62ebd5d0d2b627778868701b7b9a280ca8a6ec45113a83d56a604f3cf423fb8686e0a26b6f4065f7cf6e257fbf9190332f158755000992938ddd0966287ba86c6888298857efde271f700a97ff0b11409e0d876b84be5e03194e2589d5ab3561ffad1a31abda66ce26e7a7eb83c1dfaaebab62d202d5a4d20d4422f29fc7e97234c971a42b2d894ec399402089fd2fa6ce8c51aec5d6348d402ba9fdbb45a839020db0a0c130f46575dc69801abf617221e3ca350e64d3448b6dfcefe8e51c425d6eba44aec80ad1ea237ba9b475d5158ca63c341b6bb4e67a643355d9d3fa9da89db5e01f240d60fd3c95b7bc75d87b17422a4f2fa7f4a2291c24d36294ea2c6ab90202efb3ea4ff3584d904319daefdf8b858c44872faae79f49b5b1048c9ce9bb91d5b94b28ab378a33b1643b9b4d0ed941604edc7ce91e85e64aa81ea83aba21ac81ca8be235b8c9f32b70ab39311d4e22681eb27eacbef8ffe61927e6658e4f07bc920326c6897fb967011d0c743187ceb4f3499f80cc4e3641f93ae4ccf0fd2800b207689dc88fce126e2369a7f8bd578bf57e4d9bff520401b017a9c0ab54c6e9d87ddc316b91db11d23b27ba58b316bcfb7624d9b3372e477fea5aa14bee4d124b6ab3c3d4be2102e5663230f3ad9721188f535fa56e3921c7be250a63669c878ca4aa5669346c953453c22e866b2513d65f70494c25013c0b0b55603360767a31035c6a4fbf9b23f29ebc5eb4f30c2929352a3484e21de7c65a90fe67f2a91de4a3c426796323f4cd9248037673981f54597f3c2b0d916b831d65fd9f1709d0af4e8a93d0d43c574110427f1ee484142c9b56c80bbbff3dfb8d79ac1ce31ef51e362a07153f046b8031348f0c7a8428e725e89126c8acbd8b0ca39354d3e32e0569315eeee1bdf5d3896e03e27842280a449ae66ac1e5f68e068fc924dde52f7bc3a55d1bf9f9f31cd16837ce32c04b983680f58f811bb0cd079d175772e4b28762345bc16b22a2094f85364cbeb04fe7e04cb117f7a0b0cadee8770a6541c24e91ce16f8e58ec32ee754e386b515625db121fa82132217eadc8cc43c371bf644dac4e625a5b51bfb6c8d87540da584df0457e7d83c9f74090ee119cd7f47aaf124071457f08bd25dab702d94a436c479a98a3e9abcc8fdd8c82ff0912c63b74361ba6c68b0c55de15b887d4fb966298893f0a3aff5a7aeec2b3cad3820e773d806db4a20494c3247c67d5927a26f538c4de111965ef4c5600cce2e4aae404d741fd1101b6a8a00f92649a26ca634220a72525fe4d53c56148bc418358efa1ca3fc7a43b06dfd5691b7379d074735f3e1ea7064460be0032af336e686d5ef625ebefd1a6538e82ccdc98bdeaf2637e80c26e2f099f7ad1becee0c863364bf6257507e0530e61a1ed43b7b9cd3d1e137409c3dcd790cf74eeac8a800485daefde039f28d8c6d3504430296e57742f4076c79a4882d43ed2506461dd96c95f93f84da4b4fd4b764a0503a4483bc729122438082a5d394312bb369240fe372f741fd419ae6b66bc6404a16b3bb069179ecc06946cbcbedc633973ce50e30534b29aa3da889f1a0445a10a8f23b602c3e31129ce8b4d55bc0b053f750746a84ca53c267b81034a1d2bda4a6f34c0c2dbcd60d2e5f23e8b96676d37095163334112c8d7656fae2fcb9a316a80ac4760fbf9be8e41b635480264c543a1bf195935a6760445f8233511afec688475023d311e67329615cd0a282543d413d85d1e247fd80a55af1fefe859cc9b6e236e8d726dc981553f4906ac9016d0ae5e949b762f004104300763308a93724612f721e981df21be029fe686c057b6990c565e34ff5f6749b8c6a8815e117c13c43f02446ba0a53c2c24a3a0926fef1f86b8ca20154513ad5663c98a99389748b1e8206a50f2cd9de6f12fd77bc8514eba9d0bc4695e83cf6ce1fc9835b12ab84cce67cf2bf32a91eb24760e7ef5b44b0069360b8009ebe0d06597982853a0d719f0f174db82c8a87b8b161059a0116516fb4bce31ab768b6cc63a21f800f777148c638ebc018a8a3043313e43d7b2d8354e4cf5be1e3af51648b06ff79d8a22b2d97e4981fd77d027dccd1a15872e669577b8e6d22ef997303b976e6b45ebf938d6aa72eae020c7973377df89230c63135f746d47d6e5f5cf10be7a0cce3478b4a2f45a7761b074729874c127af7e6218b94bb06c4ebbb97bec914904411a25c815f6d906bd2e48111bfcf478838684f4184d63e559e35cf5fa61c2b40678b2fc5d48999403f19d2d5be8a37a773c367189aff3ba9523f70b3e665e18f18fec963d714a96b9c3e4ac033a0e9744a9583b162efac87997de8f369bc0138299fc87c7934830b911163e09a8aa535fe5e0d6501f6693b09c7714e1477a15fa0c4c167f12ea9a3740e2472aa39d5b6bcf475a1ac1152860db122a4a4776e04d66d58e38123006e8ecc6426b05bb75371291695a252485a779f9d472faf9f55ff6632658528547a513ebd5bcd2ffdca34e3c5c6c18bd3ac1469075c7ff1110f4a4b9ab735a6e2bd5179b2a181223404f70f4910dd79bd17ba7a898a7a924ae8f33f36456eb6a179ee4d1878515b78cd854f282e73a75b11112dd67000456c113f2aaf2818abb2c67ae23a6fca6f2d885b5d64797d4779ad60822a4908c7237ecbe4e2e937331d2dc532596f1c427b6ce8a9c43f57270a9fd027baa5584991f14576e973d5b999b6db6c40332d72e2f02a120b451e8a98d43666879089442e3eba896c9f7ba7059614d826943b9c2436748c7e921437b481d06acc443c3d84e86241b15c2e9ec0852f2c637a059c66b9499673fc443933af2c9bd2cda042e0f150e2b815bce00a74e50f484eb83539a06c50c5e71268331be307fb10fddca00d31a62c9c0fad4bec44c77d3a60642e9c3ccd908f868198c66ca2ee4da870ac0ca7222cd10575999484ccf8566c2bfabdcf6c96b1d3cbd981036150c1ff481fc77d28dc82d592556d2d8a911dfdf8d", 0xa93, 0x8000, 0x0, 0xfffffffffffffdfd) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) semget$private(0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000007c0)={0x800000000000, 0x20, 0xfffffffffffffffb, 'queue0\x00', 0x9}) fallocate(r1, 0x10, 0x0, 0x10000101) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) mount$fuseblk(0x0, 0x0, &(0x7f0000000280)='fuseblk\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYBLOB]) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000007c0)={0x800000000000, 0x20, 0xfffffffffffffffb, 'queue0\x00', 0x9}) fallocate(r2, 0x10, 0x0, 0x10000101) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) fcntl$getown(r3, 0x9) accept$packet(r3, 0x0, &(0x7f0000000880)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) poll(&(0x7f0000000080)=[{r4, 0x10}, {r4, 0x8}, {r5, 0x7a900790b78736fd}, {r0, 0x100}], 0x4, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4d964f941bc834d0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x75) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 08:42:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x9, 0x832, 0x3, 'queue0\x00', 0x200}) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) [ 358.178844][T26832] memory: usage 303016kB, limit 307200kB, failcnt 3420 [ 358.194317][T26832] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:42:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x258000, 0x0) write$P9_RRENAME(r2, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000480), 0x7564c14c40b01eec, 0xe0, 0x0, 0x150) 08:42:52 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x2f, 0xffffffffffff14b7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:52 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x1000, 0x89e1, 0x7, 0xc3, &(0x7f0000000200)=""/195, 0x22, &(0x7f0000000040)=""/34, 0x4b, &(0x7f0000000100)=""/75}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6901, 0x0) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @local}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r5, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x3, 0x81, {"89fa980018577b1316c7c2e6d87bce80"}, 0x3b0, 0x7, 0x2}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x2}}}, 0x118) [ 358.225052][T26993] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.263595][T26832] Memory cgroup stats for /syz4: [ 358.263701][T26832] anon 283828224 [ 358.263701][T26832] file 184320 [ 358.263701][T26832] kernel_stack 3473408 [ 358.263701][T26832] slab 7438336 [ 358.263701][T26832] sock 0 [ 358.263701][T26832] shmem 0 [ 358.263701][T26832] file_mapped 0 [ 358.263701][T26832] file_dirty 0 [ 358.263701][T26832] file_writeback 0 [ 358.263701][T26832] anon_thp 236978176 [ 358.263701][T26832] inactive_anon 0 [ 358.263701][T26832] active_anon 283832320 [ 358.263701][T26832] inactive_file 0 [ 358.263701][T26832] active_file 0 [ 358.263701][T26832] unevictable 0 [ 358.263701][T26832] slab_reclaimable 1486848 08:42:52 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f00000006c0)=""/60) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000005cea735cad930fb5d3ab46bbf8dabc343e1b3797618932be9c7c6af731523410d8e0dae497dcfae37bc5023ee6c13d6a7b426eb8d5e0cfb391fbbba3b0b89e4bbf75699c0e023f11e79592f19e6d5cef2502065c49dbdee86aae8a8aa78bfffb7a7c8f3b64e14974fa01e68dc2958ed9cc4ab716d2462ce637850c432fc7d4adf28e8d3d5b19fbff612c18023aadd0652d8853b7317971b152d2758c6d331aee369d211296", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fddbdf250e00000040000700080002000000000008000200000000000c000400000000000000000008000100000000000c00040000000000000000000c000300000000000000000004000400"], 0x58}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = getpgid(0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x1, 0x7, @tid=r3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r5, 0x4070aea0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x0, 0x101000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) pipe(&(0x7f0000000480)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)=""/59, &(0x7f0000000540)=0x3b) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 358.263701][T26832] slab_unreclaimable 5951488 [ 358.263701][T26832] pgfault 18711 [ 358.263701][T26832] pgmajfault 0 [ 358.263701][T26832] workingset_refault 33 [ 358.263701][T26832] workingset_activate 0 [ 358.263701][T26832] workingset_nodereclaim 0 [ 358.263701][T26832] pgrefill 442 [ 358.263701][T26832] pgscan 540 [ 358.263701][T26832] pgsteal 70 [ 358.263701][T26832] pgactivate 363 08:42:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x3, 0x4}) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000240)=0x5, 0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x9374b0adfe454561, 0x1, {0x2, 0x4, 0x9c96, 0x8}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 08:42:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_PIT2(r3, 0x4070aea0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7b000000d991ae4f51ac646549ee9a4d4f67c1dc045341567927235950234c3504ddbd2d6c378c8e81b28252e9d3cd1c6ba5ce3b2b4cf7a2651c3f6d98c85512c6277ccbd8ee68a863e10600000000000000b3e4ce125a0e5502912eabc30c4bff1c27b6184f4a1634aa6e211589929ba32057ffa8352a8c2c9bcf162e90e6"], &(0x7f0000000200)=0x83) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x48, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063b28266990000"], 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x3, &(0x7f0000000300)) 08:42:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x9, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000180), &(0x7f0000000000), 0x1}, 0x20) [ 358.812409][T27126] binder: 27118:27126 unknown command -2102238448 [ 358.865312][T27126] binder: 27118:27126 ioctl c0306201 20000000 returned -22 [ 358.951169][T26832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13636,uid=0 [ 359.318208][T26832] Memory cgroup out of memory: Killed process 13636 (syz-executor.4) total-vm:72576kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 463.563149][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 463.572161][ C0] rcu: 0-....: (10499 ticks this GP) idle=00e/1/0x4000000000000002 softirq=26917/26926 fqs=5235 [ 463.583317][ C0] (t=10500 jiffies g=36945 q=49296) [ 463.588589][ C0] NMI backtrace for cpu 0 [ 463.592897][ C0] CPU: 0 PID: 26996 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 463.600781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.610831][ C0] Call Trace: [ 463.614095][ C0] [ 463.616938][ C0] dump_stack+0x172/0x1f0 [ 463.621281][ C0] nmi_cpu_backtrace.cold+0x70/0xb2 [ 463.626463][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.632681][ C0] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 463.638301][ C0] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 463.644290][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 463.650175][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 463.655273][ C0] ? find_next_bit+0x107/0x130 [ 463.660043][ C0] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 463.665603][ C0] ? raise_softirq+0x138/0x340 [ 463.670366][ C0] update_process_times+0x32/0x80 [ 463.675462][ C0] tick_sched_handle+0xa2/0x190 [ 463.680301][ C0] tick_sched_timer+0x53/0x140 [ 463.685050][ C0] __hrtimer_run_queues+0x364/0xe40 [ 463.690313][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 463.695585][ C0] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 463.701133][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 463.706856][ C0] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 463.712923][ C0] hrtimer_interrupt+0x314/0x770 [ 463.717866][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 463.723415][ C0] apic_timer_interrupt+0xf/0x20 [ 463.728457][ C0] [ 463.731397][ C0] RIP: 0010:_raw_spin_unlock_irq+0x54/0x90 [ 463.737291][ C0] Code: c0 60 f4 d2 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 75 de 94 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 b2 ab 10 fa 65 8b 05 03 e8 c3 78 85 c0 74 06 41 [ 463.756878][ C0] RSP: 0018:ffff88804f526028 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 463.765266][ C0] RAX: 1ffffffff11a5e8c RBX: ffff88804f5266c0 RCX: 1ffffffff134b5ce [ 463.773229][ C0] RDX: dffffc0000000000 RSI: ffffffff8177f1ae RDI: ffffffff873e15c8 [ 463.781187][ C0] RBP: ffff88804f526030 R08: ffff88808f6f4600 R09: ffffed1025ffff71 [ 463.789149][ C0] R10: ffffed1025ffff70 R11: ffff88812ffffb83 R12: ffff88812ffffb80 [ 463.797098][ C0] R13: 000000000000001d R14: 000000000000001b R15: ffff88812ffffb80 [ 463.805077][ C0] ? trace_hardirqs_on+0x5e/0x240 [ 463.810132][ C0] ? _raw_spin_unlock_irq+0x28/0x90 [ 463.815360][ C0] ? _raw_spin_unlock_irq+0x28/0x90 [ 463.820542][ C0] shrink_inactive_list+0x452/0xe30 [ 463.825721][ C0] ? move_pages_to_lru+0x1840/0x1840 [ 463.831001][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 463.836708][ C0] ? cpumask_next+0x41/0x50 [ 463.841188][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 463.847415][ C0] ? lruvec_lru_size+0x2b6/0x3d0 [ 463.852330][ C0] shrink_node_memcg+0x621/0x1430 [ 463.857475][ C0] ? shrink_active_list+0x13a0/0x13a0 [ 463.862835][ C0] ? mem_cgroup_iter+0x470/0xaf0 [ 463.867755][ C0] ? mem_cgroup_iter+0x470/0xaf0 [ 463.872679][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 463.878901][ C0] shrink_node+0x294/0x16b0 [ 463.883387][ C0] ? shrink_node_memcg+0x1430/0x1430 [ 463.888676][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 463.894384][ C0] ? ktime_get+0x202/0x2f0 [ 463.898803][ C0] do_try_to_free_pages+0x3cb/0x11f0 [ 463.904066][ C0] ? shrink_node+0x16b0/0x16b0 [ 463.908826][ C0] ? _raw_spin_unlock_irq+0x5e/0x90 [ 463.914014][ C0] try_to_free_mem_cgroup_pages+0x314/0xa80 [ 463.919892][ C0] ? try_to_free_pages+0x980/0x980 [ 463.924997][ C0] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 463.930798][ C0] ? cgroup_file_notify+0x140/0x1b0 [ 463.935988][ C0] try_charge+0x602/0x1440 [ 463.940396][ C0] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 463.945922][ C0] ? percpu_ref_tryget_live+0x111/0x290 [ 463.951447][ C0] ? get_mem_cgroup_from_mm+0x16/0x320 [ 463.956898][ C0] ? get_mem_cgroup_from_mm+0x156/0x320 [ 463.962566][ C0] mem_cgroup_try_charge+0x136/0x590 [ 463.968109][ C0] __add_to_page_cache_locked+0x43f/0xec0 [ 463.973810][ C0] ? __page_cache_alloc+0x480/0x480 [ 463.978988][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 463.985217][ C0] ? ext4_es_lookup_extent+0x3fd/0xbf0 [ 463.990663][ C0] ? shadow_lru_isolate+0x430/0x430 [ 463.995837][ C0] ? ext4_map_blocks+0xaa6/0x17f0 [ 464.000909][ C0] add_to_page_cache_lru+0x1d8/0x790 [ 464.006189][ C0] ? add_to_page_cache_locked+0x40/0x40 [ 464.011734][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 464.017973][ C0] ext4_mpage_readpages+0x40b/0x1c70 [ 464.023243][ C0] ? mpage_end_io+0x6b0/0x6b0 [ 464.027902][ C0] ? __isolate_free_page+0x4c0/0x4c0 [ 464.033176][ C0] ? ___might_sleep+0x163/0x280 [ 464.038021][ C0] ? __kasan_check_read+0x11/0x20 [ 464.043049][ C0] ext4_readpages+0xe7/0x130 [ 464.047625][ C0] ? ext4_bh_unmapped+0x50/0x50 [ 464.052470][ C0] read_pages+0x108/0x540 [ 464.056784][ C0] ? read_cache_pages+0x670/0x670 [ 464.061793][ C0] ? __page_cache_alloc+0x116/0x480 [ 464.067057][ C0] ? lock_downgrade+0x920/0x920 [ 464.071888][ C0] __do_page_cache_readahead+0x4e0/0x5d0 [ 464.077501][ C0] ? read_pages+0x540/0x540 [ 464.081983][ C0] ondemand_readahead+0x561/0xd40 [ 464.086997][ C0] page_cache_async_readahead+0x43c/0x7c0 [ 464.092726][ C0] generic_file_read_iter+0x1239/0x1ce0 [ 464.098272][ C0] ext4_file_read_iter+0x1d6/0x420 [ 464.103365][ C0] new_sync_read+0x4d7/0x800 [ 464.107934][ C0] ? vfs_dedupe_file_range+0x780/0x780 [ 464.113379][ C0] __vfs_read+0xe1/0x110 [ 464.117601][ C0] integrity_kernel_read+0x157/0x210 [ 464.122861][ C0] ? integrity_inode_free+0x330/0x330 [ 464.128209][ C0] ? sha256_avx2_update+0x2d/0x40 [ 464.133226][ C0] ima_calc_file_hash_tfm+0x2e3/0x3e0 [ 464.138580][ C0] ? ima_calc_field_array_hash_tfm.isra.0+0x540/0x540 [ 464.145318][ C0] ? __kasan_check_read+0x11/0x20 [ 464.150329][ C0] ? lock_downgrade+0x920/0x920 [ 464.155160][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 464.161393][ C0] ? ext4_xattr_ibody_get+0x110/0x550 [ 464.166833][ C0] ? __kasan_check_write+0x14/0x20 [ 464.171920][ C0] ? up_read+0x159/0x570 [ 464.176141][ C0] ? down_read_non_owner+0x450/0x450 [ 464.181492][ C0] ? ext4_xattr_get+0x19e/0xab0 [ 464.186369][ C0] ima_calc_file_hash+0x1aa/0x570 [ 464.191372][ C0] ima_collect_measurement+0x50f/0x5c0 [ 464.196807][ C0] ? ima_get_action+0xa0/0xa0 [ 464.201479][ C0] process_measurement+0xcc9/0x16a0 [ 464.206669][ C0] ? process_buffer_measurement.constprop.0+0x2f0/0x2f0 [ 464.213593][ C0] ? dput+0x1f2/0xde0 [ 464.217554][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.223773][ C0] ? aa_get_task_label+0x3a6/0x720 [ 464.228872][ C0] ? __kasan_check_read+0x11/0x20 [ 464.233873][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.240108][ C0] ? refcount_inc_not_zero_checked+0x144/0x200 [ 464.246253][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.253256][ C0] ? refcount_sub_and_test_checked+0x154/0x200 [ 464.259388][ C0] ? refcount_dec_not_one+0x1f0/0x1f0 [ 464.264739][ C0] ? refcount_dec_and_test_checked+0x1b/0x20 [ 464.270704][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 464.276921][ C0] ? apparmor_task_getsecid+0x94/0xd0 [ 464.282266][ C0] ima_file_check+0xc5/0x110 [ 464.286846][ C0] ? process_measurement+0x16a0/0x16a0 [ 464.292284][ C0] path_openat+0x1142/0x4630 [ 464.296871][ C0] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 464.302826][ C0] ? kasan_slab_alloc+0xf/0x20 [ 464.308093][ C0] ? kmem_cache_alloc+0x121/0x710 [ 464.313108][ C0] ? getname_flags+0xd6/0x5b0 [ 464.317767][ C0] ? getname+0x1a/0x20 [ 464.321825][ C0] ? do_sys_open+0x2c9/0x5d0 [ 464.326409][ C0] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 464.331759][ C0] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 464.337372][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 464.343068][ C0] do_filp_open+0x1a1/0x280 [ 464.347548][ C0] ? may_open_dev+0x100/0x100 [ 464.352210][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 464.357124][ C0] ? __kasan_check_read+0x11/0x20 [ 464.362135][ C0] ? do_raw_spin_unlock+0x57/0x270 [ 464.367231][ C0] ? _raw_spin_unlock+0x2d/0x50 [ 464.372056][ C0] ? __alloc_fd+0x487/0x620 [ 464.376536][ C0] do_sys_open+0x3fe/0x5d0 [ 464.380936][ C0] ? filp_open+0x80/0x80 [ 464.385158][ C0] ? __x64_sys_clock_gettime+0x16d/0x240 [ 464.390766][ C0] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 464.397763][ C0] __x64_sys_open+0x7e/0xc0 [ 464.402245][ C0] do_syscall_64+0xfd/0x6a0 [ 464.406725][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.412596][ C0] RIP: 0033:0x459879 [ 464.416485][ C0] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.436115][ C0] RSP: 002b:00007fc085152c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 464.444518][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 464.452490][ C0] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 0000000020000000 [ 464.460467][ C0] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 464.468419][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc0851536d4 [ 464.476395][ C0] R13: 00000000004f907f R14: 00000000004dac90 R15: 00000000ffffffff