080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xa00) [ 2399.252631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:10 executing program 0: socket$bt_rfcomm(0x1f, 0x0, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200001250006fc7f2b86847f2da9b5837b286380aba636f1dc0ffe906c4f9e25a5d99ba5e92ca1ca9c2d44d25c493c172f58190bacc2f88d4d45ab5b893536d230363beff844586f48a8b9a8a4778bd"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000ed020000000001007463696e656578000c00f6a36c84020000000000c3e64b35416e2dd91515d32ff931bb742d1672de457edb2f8877f330aceac16db4d3f06d96c68022dea4b17197008fa08e04ee60b217a565a9a557f7a956192ac34b38cd607f0052bb6756364cc99be23cab847ce476e9d23b10269fadba2032383bb9021a1e6a637078b8d17d12664a72843c1042ac458c85184d05773a3d577c229d11e4489a52da4ba23eaa11d49cbd3d2845ca0394eca052b10be6edc0dcb4b6d1553e5b0e032d1ab5136e3c7cfc4269ab08101c99cf05e7eb3041c238db7313f189df2816b2c3524b678eb3d9e7527000"/259], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000002c00270d00000000000000000000f000", @ANYRES32=r5, @ANYBLOB="6000ff23d9626a7d42a81804cd0f8a50e85500000000080000000000000001007423696e5765780004000200"], 0x34}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)=r5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 2399.357823] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2399.363559] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2399.400677] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2399.413109] CPU: 0 PID: 21494 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2399.421043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2399.430757] Call Trace: [ 2399.433362] dump_stack+0x188/0x20d [ 2399.437008] dump_header+0x159/0xa5e [ 2399.440831] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2399.445954] ? ___ratelimit+0x59/0x573 [ 2399.449862] oom_kill_process.cold+0x10/0x6dc [ 2399.451251] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2399.454570] ? task_will_free_mem+0x134/0x6d0 [ 2399.454590] out_of_memory+0x349/0x1250 [ 2399.454607] ? oom_killer_disable+0x270/0x270 [ 2399.454630] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2399.454643] ? memcg_event_wake+0x210/0x210 [ 2399.454663] ? do_raw_spin_unlock+0x171/0x260 [ 2399.454676] try_charge+0xe22/0x1300 [ 2399.454695] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2399.454711] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2399.454728] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2399.454747] ? __lock_acquire+0x6ee/0x49c0 [ 2399.513269] mem_cgroup_try_charge+0x249/0x5c0 [ 2399.517867] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2399.522808] wp_page_copy+0x3fe/0x1530 [ 2399.527731] ? follow_pfn+0x260/0x260 [ 2399.531539] ? __lock_acquire+0x6ee/0x49c0 [ 2399.535804] do_wp_page+0x518/0xfa0 [ 2399.539440] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2399.544124] __handle_mm_fault+0x21a4/0x3b60 [ 2399.548552] ? copy_page_range+0x1e70/0x1e70 [ 2399.552968] ? count_memcg_event_mm+0x279/0x4c0 [ 2399.557668] handle_mm_fault+0x1a5/0x670 [ 2399.561743] __do_page_fault+0x5ed/0xdd0 [ 2399.565814] ? trace_hardirqs_off_caller+0x55/0x210 [ 2399.570843] ? vmalloc_fault+0x730/0x730 [ 2399.574911] ? page_fault+0x8/0x30 [ 2399.578460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2399.583307] ? page_fault+0x8/0x30 [ 2399.586940] page_fault+0x1e/0x30 [ 2399.590394] RIP: 0033:0x40f098 [ 2399.593591] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 5e 01 00 00 48 c1 e6 04 86 60 80 76 00 01 48 89 86 68 80 76 00 66 2e 0f 1f 84 00 00 00 [ 2399.612517] RSP: 002b:00007ffd584c53a0 EFLAGS: 00010246 [ 2399.617926] RAX: 0000000000000003 RBX: 000000000076bf00 RCX: 0000000000000001 [ 2399.625199] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000076bf00 [ 2399.632469] RBP: 000000000000002d R08: 00ffffffffffffff R09: 00ffffffffffffff [ 2399.639755] R10: 00007ffd584c54a0 R11: 0000000000000246 R12: 000000000076bf00 03:49:10 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xe7ff]}) 03:49:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x48, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2399.647032] R13: 00000000002457ec R14: 0000000000245819 R15: 000000000076bf0c [ 2399.671482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 03:49:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000004c0100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xc00) [ 2399.711415] serio: Serial port pts1 [ 2399.715351] Task in /syz2 killed as a result of limit of /syz2 [ 2399.730990] memory: usage 307200kB, limit 307200kB, failcnt 348 [ 2399.747781] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:11 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xfdfd]}) [ 2399.767505] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2399.784381] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:108KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2399.840220] Memory cgroup out of memory: Kill process 21494 (syz-executor.2) score 1103 or sacrifice child [ 2399.863062] Killed process 21494 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2399.884993] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2399.888332] oom_reaper: reaped process 21494 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB 03:49:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe000, {0x4}}, 0x14}}, 0x0) [ 2399.933753] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xe00) 03:49:11 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xffe7]}) [ 2399.974399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2400.053107] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2400.076417] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2400.085249] CPU: 0 PID: 21827 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2400.093184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2400.102543] Call Trace: [ 2400.105164] dump_stack+0x188/0x20d [ 2400.108822] dump_header+0x159/0xa5e [ 2400.112559] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2400.117829] ? ___ratelimit+0x59/0x573 [ 2400.121749] oom_kill_process.cold+0x10/0x6dc [ 2400.126270] ? task_will_free_mem+0x134/0x6d0 [ 2400.130784] out_of_memory+0x349/0x1250 [ 2400.134805] ? oom_killer_disable+0x270/0x270 [ 2400.139319] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2400.144232] ? memcg_event_wake+0x210/0x210 [ 2400.148596] ? do_raw_spin_unlock+0x171/0x260 [ 2400.153114] try_charge+0xe22/0x1300 [ 2400.156856] ? find_held_lock+0x2d/0x110 [ 2400.160936] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2400.165806] ? lock_downgrade+0x740/0x740 [ 2400.170099] ? check_preemption_disabled+0x41/0x280 [ 2400.175249] memcg_kmem_charge_memcg+0x7b/0x150 [ 2400.180024] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2400.184546] ? should_fail+0x142/0x7bc [ 2400.188566] ? __isolate_free_page+0x4c0/0x4c0 [ 2400.193190] memcg_kmem_charge+0x132/0x360 [ 2400.197700] __alloc_pages_nodemask+0x396/0x6a0 [ 2400.202476] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2400.207511] ? _raw_spin_unlock_irq+0x24/0x80 [ 2400.212031] copy_process.part.0+0x3d6/0x7a60 [ 2400.216535] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2400.221648] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2400.226238] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2400.231377] ? __lock_acquire+0x6ee/0x49c0 [ 2400.235628] ? do_try_to_free_pages+0xd13/0x1090 [ 2400.240495] ? __cleanup_sighand+0x60/0x60 [ 2400.244734] ? mark_held_locks+0xf0/0xf0 [ 2400.248803] ? shrink_node+0x1350/0x1350 [ 2400.252887] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2400.257916] _do_fork+0x22f/0xf40 [ 2400.261387] ? fork_idle+0x1e0/0x1e0 [ 2400.265109] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2400.271019] ? check_preemption_disabled+0x41/0x280 [ 2400.276065] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2400.280844] ? trace_hardirqs_off_caller+0x55/0x210 [ 2400.285872] ? do_syscall_64+0x21/0x620 [ 2400.289856] do_syscall_64+0xf9/0x620 [ 2400.293671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2400.298867] RIP: 0033:0x45f219 [ 2400.302328] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2400.321252] RSP: 002b:00007ffd584c5298 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2400.328969] RAX: ffffffffffffffda RBX: 00007fc83977a700 RCX: 000000000045f219 [ 2400.336248] RDX: 00007fc83977a9d0 RSI: 00007fc839779db0 RDI: 00000000003d0f00 [ 2400.343533] RBP: 00007ffd584c54b0 R08: 00007fc83977a700 R09: 00007fc83977a700 03:49:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x50, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000600100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xec0) [ 2400.351074] R10: 00007fc83977a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2400.358354] R13: 00007ffd584c534f R14: 00007fc83977a9c0 R15: 000000000076bf0c [ 2400.420333] Task in /syz2 killed as a result of limit of /syz2 [ 2400.424070] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2400.427718] memory: usage 307184kB, limit 307200kB, failcnt 385 [ 2400.461701] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2400.477890] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2400.479544] serio: Serial port pts1 [ 2400.491325] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2400.533986] Memory cgroup out of memory: Kill process 21827 (syz-executor.2) score 1103 or sacrifice child [ 2400.562994] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:11 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) ioctl$KDADDIO(r1, 0x4b34, 0x3cd) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:11 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xe7ffffff]}) 03:49:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe100, {0x4}}, 0x14}}, 0x0) [ 2400.580853] Killed process 21827 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2400.603289] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2400.612250] oom_reaper: reaped process 21827 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf00) 03:49:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000680100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:11 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xfdfdffff]}) [ 2400.723330] serio: Serial port pts1 [ 2400.734051] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x58, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2400.816415] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2400.854355] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x2fbe) 03:49:12 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xfffffdfd]}) [ 2400.901615] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2400.944737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50679 sclass=netlink_route_socket pig=22174 comm=syz-executor.0 [ 2400.978267] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2401.008399] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2401.026274] serio: Serial port pts1 [ 2401.031038] CPU: 0 PID: 22012 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2401.038981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.048348] Call Trace: [ 2401.050957] dump_stack+0x188/0x20d [ 2401.054655] dump_header+0x159/0xa5e [ 2401.058399] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2401.063508] ? ___ratelimit+0x59/0x573 [ 2401.067403] oom_kill_process.cold+0x10/0x6dc [ 2401.071918] ? task_will_free_mem+0x134/0x6d0 [ 2401.076429] out_of_memory+0x349/0x1250 [ 2401.080416] ? oom_killer_disable+0x270/0x270 [ 2401.084927] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2401.089778] ? memcg_event_wake+0x210/0x210 [ 2401.094117] ? do_raw_spin_unlock+0x171/0x260 [ 2401.098620] try_charge+0xe22/0x1300 [ 2401.102371] ? find_held_lock+0x2d/0x110 [ 2401.106466] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2401.111336] ? lock_downgrade+0x740/0x740 [ 2401.115514] ? check_preemption_disabled+0x41/0x280 [ 2401.120558] memcg_kmem_charge_memcg+0x7b/0x150 [ 2401.125255] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2401.129765] ? should_fail+0x142/0x7bc [ 2401.133664] ? __isolate_free_page+0x4c0/0x4c0 [ 2401.138261] memcg_kmem_charge+0x132/0x360 [ 2401.142640] __alloc_pages_nodemask+0x396/0x6a0 [ 2401.143182] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2401.147331] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2401.160952] ? _raw_spin_unlock_irq+0x24/0x80 [ 2401.165482] copy_process.part.0+0x3d6/0x7a60 [ 2401.170018] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2401.175142] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2401.179749] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2401.184884] ? __lock_acquire+0x6ee/0x49c0 [ 2401.189153] ? do_try_to_free_pages+0xd13/0x1090 [ 2401.194656] ? __cleanup_sighand+0x60/0x60 [ 2401.198902] ? mark_held_locks+0xf0/0xf0 [ 2401.202974] ? shrink_node+0x1350/0x1350 [ 2401.207051] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2401.212197] _do_fork+0x22f/0xf40 [ 2401.215675] ? fork_idle+0x1e0/0x1e0 [ 2401.219411] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2401.225323] ? check_preemption_disabled+0x41/0x280 [ 2401.230410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2401.235211] ? trace_hardirqs_off_caller+0x55/0x210 [ 2401.240245] ? do_syscall_64+0x21/0x620 [ 2401.244254] do_syscall_64+0xf9/0x620 [ 2401.248076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2401.253314] RIP: 0033:0x45f219 [ 2401.256634] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2401.275908] RSP: 002b:00007ffd584c5298 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2401.283778] RAX: ffffffffffffffda RBX: 00007fc83977a700 RCX: 000000000045f219 [ 2401.291172] RDX: 00007fc83977a9d0 RSI: 00007fc839779db0 RDI: 00000000003d0f00 [ 2401.298932] RBP: 00007ffd584c54b0 R08: 00007fc83977a700 R09: 00007fc83977a700 03:49:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000006c0100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2401.306217] R10: 00007fc83977a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2401.313496] R13: 00007ffd584c534f R14: 00007fc83977a9c0 R15: 000000000076bf0c [ 2401.322871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57366 sclass=netlink_route_socket pig=22237 comm=syz-executor.1 [ 2401.346199] Task in /syz2 killed as a result of limit of /syz2 [ 2401.353487] memory: usage 307200kB, limit 307200kB, failcnt 419 [ 2401.356288] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2401.361304] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2401.380306] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2401.387524] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2401.404243] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2401.409251] Memory cgroup out of memory: Kill process 22012 (syz-executor.2) score 1103 or sacrifice child [ 2401.433888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50679 sclass=netlink_route_socket pig=22178 comm=syz-executor.0 03:49:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x3f00) 03:49:12 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xffffffe7]}) [ 2401.470633] Killed process 22012 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe300, {0x4}}, 0x14}}, 0x0) [ 2401.516175] oom_reaper: reaped process 22012 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:12 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0xffffffff]}) 03:49:12 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r4}}, 0x18) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000740100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2401.664295] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:49:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x60, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2401.707716] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2401.737623] CPU: 1 PID: 22373 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2401.745566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2401.754936] Call Trace: [ 2401.757563] dump_stack+0x188/0x20d [ 2401.761228] dump_header+0x159/0xa5e [ 2401.764985] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2401.770233] ? ___ratelimit+0x59/0x573 [ 2401.774155] oom_kill_process.cold+0x10/0x6dc [ 2401.778693] ? task_will_free_mem+0x134/0x6d0 [ 2401.783223] out_of_memory+0x349/0x1250 [ 2401.787224] ? oom_killer_disable+0x270/0x270 [ 2401.791753] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2401.796684] ? memcg_event_wake+0x210/0x210 [ 2401.801040] ? do_raw_spin_unlock+0x171/0x260 [ 2401.805557] try_charge+0xe22/0x1300 [ 2401.809305] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2401.814175] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2401.819047] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2401.825133] ? __lock_acquire+0x6ee/0x49c0 [ 2401.829530] mem_cgroup_try_charge+0x249/0x5c0 [ 2401.834133] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2401.839088] wp_page_copy+0x3fe/0x1530 [ 2401.843007] ? follow_pfn+0x260/0x260 [ 2401.846935] ? __lock_acquire+0x6ee/0x49c0 [ 2401.851194] do_wp_page+0x518/0xfa0 [ 2401.854866] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2401.859564] __handle_mm_fault+0x21a4/0x3b60 [ 2401.864000] ? copy_page_range+0x1e70/0x1e70 [ 2401.868441] ? count_memcg_event_mm+0x279/0x4c0 [ 2401.873157] handle_mm_fault+0x1a5/0x670 [ 2401.877434] __do_page_fault+0x5ed/0xdd0 [ 2401.881534] ? trace_hardirqs_off_caller+0x55/0x210 [ 2401.886574] ? vmalloc_fault+0x730/0x730 [ 2401.890661] ? page_fault+0x8/0x30 [ 2401.894223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2401.899089] ? page_fault+0x8/0x30 [ 2401.902651] page_fault+0x1e/0x30 [ 2401.906113] RIP: 0033:0x433926 [ 2401.909313] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 20 06 72 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 38 85 00 85 c0 0f 84 [ 2401.928234] RSP: 002b:00007ffd584c51c0 EFLAGS: 00010206 [ 2401.933630] RAX: 00000000000205b1 RBX: 0000000000720620 RCX: 0000000000000121 [ 2401.940920] RDX: 0000000001bfe930 RSI: 0000000001bfea50 RDI: 0000000000000000 [ 2401.948432] RBP: 0000000000000121 R08: ffffffffffffffff R09: 0000000000000000 03:49:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x4000) 03:49:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x68, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2401.955728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000720678 [ 2401.963023] R13: 0000000000720678 R14: 0000000000000000 R15: 0000000000002710 [ 2401.978349] Task in /syz2 killed as a result of limit of /syz2 [ 2401.999259] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2402.005552] serio: Serial port pts1 [ 2402.012091] memory: usage 307200kB, limit 307200kB, failcnt 458 [ 2402.037606] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x5865) [ 2402.059168] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2402.079020] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:96KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2402.095785] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:13 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2402.112082] serio: Serial port pts1 03:49:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x6000) [ 2402.146316] Memory cgroup out of memory: Kill process 22373 (syz-executor.2) score 1103 or sacrifice child 03:49:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000007a0100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2402.246880] Killed process 22373 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x70, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe400, {0x4}}, 0x14}}, 0x0) 03:49:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x6558) [ 2402.293484] oom_reaper: reaped process 22373 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB [ 2402.293991] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2402.323597] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000300)={0x0, &(0x7f0000000400)="15a0188082669b28b02c8d9c70d340ee64797de585db0fd9ca4e0fd7da8c03be452956a44a29b9da9c264794b1efcd0894de7eca8d863fe5692d83f6e7c4b270feb21bbb84df0120011a6faa7a0a3c0cddd7c93e18a6f514f141c5a911065e65d3aa75da114d83bb51a84ef9591312df76de26b442a78bae6725bfb6ff642a723c896134e7c8b10dd3f407413ff29e127b60ce18bb22d3a9469f372a1bea62301af82000983b37c094972f85ef09f5bd36d0ad6c940850a9f8b790f817721377777bf569bf25f1d9d79aa397fe52cb8b462cba7a5662ab53c9b83c15a86d3e57d4d468276b6708e4b7223deefa3d7a62cc2255", 0xf3}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) timer_create(0x3, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3515028000dd6048f52386890ab5ff35f60f139b278d5b928b24401b7b4b91ea7525e62db3f35b4bc2b411d3e69e8d9db599be45c75502eb5ce77e615e6ce77e670a0a5e4ccf0e180c575a878e51723221b80124ccf4c7efb343d376312305aa4a7aed3a439f749b9e0d9db2a7e1cb5f022bc6f37428b101dd8a80d7d0e88262e23f3ee777129ee1d4a460b131325e80b6723d2bef15f569aa75415fb37ab084c6a956fd01cc89409a282404c12d094691334894acc88e28d5ea86ac37e52b746522a3ac88fdd52c0886e8446c5b30fa1d6b098c241fd7fa0a679a0405fc32474287881d6864317b942489162651398222", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000000d23d00014100000014001700000000000000006574683a6c6f0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040026bd7000fedbdf250100000000000000014100000018001701000000000000007564703a73797a300000000057aea257976fac33fde5c04d4af78a193195c03d88cd8c8875ae59ecfbc96149e04dc5a69dc9be59fb095b432dacdeccf8d53bad51eb674c6bffb791585959598995dc84e57a81a0f4eac4502ed4b1273ee07434d6cb7b"], 0x34}}, 0x40) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:13 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xe7]}) 03:49:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000300004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2402.429566] serio: Serial port pts1 03:49:13 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xe7ff]}) [ 2402.568989] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x8100) [ 2402.656633] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x78, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:13 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xfdfd]}) 03:49:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000a00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xbe2f) [ 2402.816389] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2402.865366] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2402.878895] CPU: 1 PID: 22646 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2402.886879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2402.896339] Call Trace: [ 2402.899079] dump_stack+0x188/0x20d [ 2402.902736] dump_header+0x159/0xa5e [ 2402.906469] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2402.911630] ? ___ratelimit+0x59/0x573 [ 2402.915719] oom_kill_process.cold+0x10/0x6dc [ 2402.920241] ? task_will_free_mem+0x134/0x6d0 [ 2402.924763] out_of_memory+0x349/0x1250 [ 2402.928766] ? oom_killer_disable+0x270/0x270 [ 2402.933293] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2402.938158] ? memcg_event_wake+0x210/0x210 [ 2402.942509] ? do_raw_spin_unlock+0x171/0x260 [ 2402.947022] try_charge+0xe22/0x1300 [ 2402.950770] ? find_held_lock+0x2d/0x110 [ 2402.954846] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2402.959764] ? lock_downgrade+0x740/0x740 03:49:14 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xffe7]}) [ 2402.963935] ? check_preemption_disabled+0x41/0x280 [ 2402.968980] memcg_kmem_charge_memcg+0x7b/0x150 [ 2402.973672] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2402.978189] ? should_fail+0x142/0x7bc [ 2402.982098] ? __lock_is_held+0xad/0x140 [ 2402.986184] ? __isolate_free_page+0x4c0/0x4c0 [ 2402.990790] memcg_kmem_charge+0x132/0x360 [ 2402.995051] __alloc_pages_nodemask+0x396/0x6a0 [ 2402.999744] ? should_fail+0x142/0x7bc [ 2403.003655] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2403.008703] alloc_pages_current+0xff/0x200 [ 2403.013052] pte_alloc_one+0x16/0x190 [ 2403.016882] __do_fault+0x2cd/0x470 [ 2403.020541] ? __pmd_alloc+0x35e/0x440 [ 2403.024459] __handle_mm_fault+0x28cb/0x3b60 [ 2403.028898] ? copy_page_range+0x1e70/0x1e70 [ 2403.033332] ? count_memcg_event_mm+0x279/0x4c0 [ 2403.038042] handle_mm_fault+0x1a5/0x670 [ 2403.042131] __do_page_fault+0x5ed/0xdd0 [ 2403.046306] ? trace_hardirqs_off_caller+0x55/0x210 [ 2403.051344] ? vmalloc_fault+0x730/0x730 [ 2403.055419] ? page_fault+0x8/0x30 [ 2403.058972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2403.063831] ? page_fault+0x8/0x30 [ 2403.067409] page_fault+0x1e/0x30 [ 2403.070876] RIP: 0033:0x403667 [ 2403.074081] Code: 00 00 00 48 83 ec 08 48 8b 15 35 f0 87 00 48 8b 05 26 f0 87 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 08 f0 87 00 48 83 c4 08 c3 48 89 c6 bf d8 f9 4c 00 [ 2403.092996] RSP: 002b:00007ffd584c53c0 EFLAGS: 00010287 [ 2403.098380] RAX: 0000001b2ff20000 RBX: 0000000000000000 RCX: 0000001b30f20000 [ 2403.105664] RDX: 0000001b2ff20004 RSI: 00007ffd584c5180 RDI: 0000000000000000 [ 2403.112944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 2403.120217] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 2403.127495] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2403.136037] Task in /syz2 killed as a result of limit of /syz2 [ 2403.142630] memory: usage 307200kB, limit 307200kB, failcnt 492 [ 2403.143458] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2403.148999] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2403.149008] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2403.149015] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2403.149085] Memory cgroup out of memory: Kill process 22646 (syz-executor.2) score 1103 or sacrifice child [ 2403.149115] Killed process 22646 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2403.149761] oom_reaper: reaped process 22646 (syz-executor.2), now anon-rss:0kB, file-rss:34112kB, shmem-rss:0kB [ 2403.197990] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2403.234274] serio: Serial port pts1 03:49:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xc00e) 03:49:14 executing program 0: r0 = getpid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r2, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000100)={0x5, {0x4, 0x7fffffff, 0x0, 0x6}, {0xeb6, 0x10000, 0x1000, 0xd330}, {0x8, 0x1000}}) read(r4, 0x0, 0x6c00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) r6 = getpid() inotify_init1(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=r6}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:14 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xe7ffffff]}) 03:49:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x88, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe600, {0x4}}, 0x14}}, 0x0) 03:49:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000f00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2403.368649] serio: Serial port pts1 [ 2403.375690] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2403.394456] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2403.400560] CPU: 0 PID: 23132 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2403.408475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2403.417844] Call Trace: [ 2403.420454] dump_stack+0x188/0x20d [ 2403.424105] dump_header+0x159/0xa5e [ 2403.427847] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2403.432970] ? ___ratelimit+0x59/0x573 [ 2403.436876] oom_kill_process.cold+0x10/0x6dc [ 2403.441394] ? task_will_free_mem+0x134/0x6d0 [ 2403.445918] out_of_memory+0x349/0x1250 [ 2403.449913] ? oom_killer_disable+0x270/0x270 [ 2403.454422] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2403.459278] ? memcg_event_wake+0x210/0x210 [ 2403.463614] ? do_raw_spin_unlock+0x171/0x260 [ 2403.468117] try_charge+0xe22/0x1300 [ 2403.471851] ? find_held_lock+0x2d/0x110 [ 2403.475920] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2403.481131] ? lock_downgrade+0x740/0x740 [ 2403.485301] ? check_preemption_disabled+0x41/0x280 [ 2403.490344] memcg_kmem_charge_memcg+0x7b/0x150 [ 2403.495026] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2403.499534] ? should_fail+0x142/0x7bc [ 2403.503431] ? __lock_is_held+0xad/0x140 [ 2403.507511] ? __isolate_free_page+0x4c0/0x4c0 [ 2403.512107] memcg_kmem_charge+0x132/0x360 [ 2403.516449] __alloc_pages_nodemask+0x396/0x6a0 [ 2403.520628] nla_parse: 4 callbacks suppressed [ 2403.520637] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2403.521132] ? should_fail+0x142/0x7bc [ 2403.521148] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2403.521173] alloc_pages_current+0xff/0x200 [ 2403.538532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57366 sclass=netlink_route_socket pig=23233 comm=syz-executor.1 [ 2403.543344] pte_alloc_one+0x16/0x190 [ 2403.543362] __do_fault+0x2cd/0x470 [ 2403.543373] ? __pmd_alloc+0x35e/0x440 [ 2403.543392] __handle_mm_fault+0x28cb/0x3b60 [ 2403.576026] ? copy_page_range+0x1e70/0x1e70 [ 2403.580540] ? count_memcg_event_mm+0x279/0x4c0 [ 2403.585245] handle_mm_fault+0x1a5/0x670 [ 2403.589333] __do_page_fault+0x5ed/0xdd0 [ 2403.593526] ? trace_hardirqs_off_caller+0x55/0x210 [ 2403.598566] ? vmalloc_fault+0x730/0x730 [ 2403.602646] ? page_fault+0x8/0x30 [ 2403.606217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2403.611085] ? page_fault+0x8/0x30 [ 2403.614642] page_fault+0x1e/0x30 [ 2403.618111] RIP: 0033:0x403667 [ 2403.621315] Code: 00 00 00 48 83 ec 08 48 8b 15 35 f0 87 00 48 8b 05 26 f0 87 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 08 f0 87 00 48 83 c4 08 c3 48 89 c6 bf d8 f9 4c 00 [ 2403.640234] RSP: 002b:00007ffd584c53c0 EFLAGS: 00010287 [ 2403.645615] RAX: 0000001b2ff20000 RBX: 0000000000000000 RCX: 0000001b30f20000 [ 2403.652888] RDX: 0000001b2ff20004 RSI: 00007ffd584c5180 RDI: 0000000000000000 [ 2403.660160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 03:49:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x94, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:14 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) [ 2403.667453] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 2403.674727] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 03:49:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf000) [ 2403.719238] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2403.755159] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000001400004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:15 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) [ 2403.849419] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x34000) 03:49:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x300, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2403.916602] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2403.955691] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2403.987912] Task in /syz2 killed as a result of limit of /syz2 [ 2404.001573] memory: usage 307172kB, limit 307200kB, failcnt 516 [ 2404.008328] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2404.024835] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2404.039374] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2404.069443] Memory cgroup out of memory: Kill process 23132 (syz-executor.2) score 1103 or sacrifice child [ 2404.080454] Killed process 23132 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2404.134866] oom_reaper: reaped process 23132 (syz-executor.2), now anon-rss:0kB, file-rss:34112kB, shmem-rss:0kB 03:49:15 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x40, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x400}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x5}}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x37, 0x37, 0x31, 0x30, 0x30, 0x61, 0x61], 0x2d, [0x39, 0x63, 0x33, 0x62], 0x2d, [0x35, 0x63, 0x33, 0x4f], 0x2d, [0x35, 0x36, 0x30, 0x38], 0x2d, [0x34, 0x35, 0x65, 0x39, 0x35, 0x33, 0x61, 0x31]}}}, {@hash='hash'}, {@smackfshat={'smackfshat', 0x3d, '^lo'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1}, 0x0) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x400300) 03:49:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000001f00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:15 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xffffffe7]}) 03:49:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe700, {0x4}}, 0x14}}, 0x0) [ 2404.208386] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2404.294658] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2404.299212] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2404.334996] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2404.344318] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2404.353496] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2404.366344] CPU: 1 PID: 23464 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2404.374280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2404.383645] Call Trace: [ 2404.386258] dump_stack+0x188/0x20d [ 2404.389907] dump_header+0x159/0xa5e [ 2404.393643] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2404.398911] ? ___ratelimit+0x59/0x573 [ 2404.402827] oom_kill_process.cold+0x10/0x6dc [ 2404.407445] ? task_will_free_mem+0x134/0x6d0 [ 2404.411955] out_of_memory+0x349/0x1250 [ 2404.415945] ? oom_killer_disable+0x270/0x270 [ 2404.420461] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2404.425313] ? memcg_event_wake+0x210/0x210 [ 2404.429681] ? do_raw_spin_unlock+0x171/0x260 [ 2404.434186] try_charge+0xe22/0x1300 [ 2404.437915] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2404.442770] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2404.447625] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2404.453703] mem_cgroup_try_charge+0x249/0x5c0 [ 2404.458299] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2404.463237] __handle_mm_fault+0x1cfb/0x3b60 [ 2404.467656] ? copy_page_range+0x1e70/0x1e70 [ 2404.472075] ? count_memcg_event_mm+0x279/0x4c0 [ 2404.476772] handle_mm_fault+0x1a5/0x670 [ 2404.480981] __do_page_fault+0x5ed/0xdd0 [ 2404.485070] ? trace_hardirqs_off_caller+0x55/0x210 [ 2404.490101] ? vmalloc_fault+0x730/0x730 [ 2404.494193] ? page_fault+0x8/0x30 [ 2404.497751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2404.502606] ? page_fault+0x8/0x30 [ 2404.506157] page_fault+0x1e/0x30 [ 2404.509627] RIP: 0033:0x45f1fd [ 2404.512824] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2404.531734] RSP: 002b:00007ffd584c5298 EFLAGS: 00010202 [ 2404.537097] RAX: ffffffffffffffea RBX: 00007fc83977a700 RCX: 00007fc83977a700 [ 2404.544379] RDX: 00000000003d0f00 RSI: 00007fc839779db0 RDI: 0000000000413430 [ 2404.553754] RBP: 00007ffd584c54b0 R08: 00007fc83977a9d0 R09: 00007fc83977a700 [ 2404.561059] R10: 00007fc839779dc0 R11: 0000000000000246 R12: 0000000000000000 [ 2404.568334] R13: 00007ffd584c534f R14: 00007fc83977a9c0 R15: 000000000076bf0c 03:49:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x2, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf0ffff) [ 2404.583706] serio: Serial port pts1 [ 2404.588892] Task in /syz2 killed as a result of limit of /syz2 [ 2404.598012] memory: usage 307200kB, limit 307200kB, failcnt 547 [ 2404.606712] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2404.613539] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:15 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0xffffffff]}) [ 2404.631001] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:100KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2404.651309] Memory cgroup out of memory: Kill process 23464 (syz-executor.2) score 1103 or sacrifice child 03:49:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000002500004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2404.682849] Killed process 23464 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x1000000) 03:49:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xe900, {0x4}}, 0x14}}, 0x0) [ 2404.732240] oom_reaper: reaped process 23464 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB [ 2404.827739] syz-executor.2 invoked oom-killer: gfp_mask=0x604050(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2404.849152] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2404.862367] CPU: 0 PID: 23694 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2404.867717] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2404.870294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2404.870372] Call Trace: [ 2404.870393] dump_stack+0x188/0x20d [ 2404.870410] dump_header+0x159/0xa5e [ 2404.870427] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2404.870439] ? ___ratelimit+0x59/0x573 [ 2404.870453] oom_kill_process.cold+0x10/0x6dc [ 2404.870471] ? task_will_free_mem+0x134/0x6d0 [ 2404.895873] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2404.897999] out_of_memory+0x349/0x1250 [ 2404.898020] ? oom_killer_disable+0x270/0x270 [ 2404.937572] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2404.942431] ? memcg_event_wake+0x210/0x210 [ 2404.946766] ? do_raw_spin_unlock+0x171/0x260 [ 2404.951270] try_charge+0xe22/0x1300 [ 2404.955003] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2404.959860] ? __lock_is_held+0xad/0x140 [ 2404.963943] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2404.968973] ? __alloc_pages_nodemask+0x5d1/0x6a0 [ 2404.973833] memcg_kmem_charge_memcg+0x7b/0x150 [ 2404.978511] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2404.983017] ? mark_held_locks+0xa6/0xf0 [ 2404.987094] ? cache_grow_begin+0x580/0x8a0 [ 2404.991428] cache_grow_begin+0x3ed/0x8a0 [ 2404.995586] fallback_alloc+0x205/0x2d0 [ 2404.999597] kmem_cache_alloc+0x1ea/0x710 [ 2405.003754] ? find_held_lock+0x2d/0x110 [ 2405.007819] ? avc_has_perm+0x2f6/0x5b0 [ 2405.011802] ? ratelimit_state_init+0xa0/0xa0 [ 2405.016320] ext4_alloc_inode+0x1a/0x630 [ 2405.020403] ? ratelimit_state_init+0xa0/0xa0 [ 2405.024914] alloc_inode+0x5d/0x180 [ 2405.028555] new_inode_pseudo+0x14/0xe0 [ 2405.032539] new_inode+0x1b/0x40 [ 2405.035920] __ext4_new_inode+0x403/0x5b00 [ 2405.040194] ? ext4_free_inode+0x1780/0x1780 [ 2405.044609] ? __dquot_initialize+0x4d2/0xb40 [ 2405.049122] ? dquot_get_next_dqblk+0x180/0x180 [ 2405.053814] ? selinux_dentry_init_security+0x270/0x270 [ 2405.059211] ext4_symlink+0x3e6/0xba0 [ 2405.063135] vfs_symlink+0x374/0x5a0 [ 2405.066863] ? security_path_symlink+0x111/0x160 [ 2405.071659] do_symlinkat+0x215/0x280 [ 2405.075474] ? __ia32_sys_unlink+0x50/0x50 [ 2405.079805] ? trace_hardirqs_off_caller+0x55/0x210 [ 2405.084842] ? do_syscall_64+0x21/0x620 [ 2405.088830] do_syscall_64+0xf9/0x620 [ 2405.092644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2405.097837] RIP: 0033:0x45c577 [ 2405.101035] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 6d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2405.119951] RSP: 002b:00007ffd584c5578 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 03:49:16 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2405.127682] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c577 [ 2405.133005] serio: Serial port pts1 [ 2405.134958] RDX: 00007ffd584c5613 RSI: 00000000004c2385 RDI: 00007ffd584c5600 [ 2405.134966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000013 [ 2405.134979] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000001 [ 2405.160440] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2405.172866] Task in /syz2 killed as a result of limit of /syz2 03:49:16 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 2405.182141] memory: usage 307200kB, limit 307200kB, failcnt 588 [ 2405.188609] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2405.213003] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x2000000) 03:49:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x5, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000042b00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2405.236628] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2405.315262] serio: Serial port pts1 [ 2405.328686] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2405.338874] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:16 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xe7]}) [ 2405.366076] Killed process 23694 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2405.379968] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2405.404829] oom_reaper: reaped process 23694 (syz-executor.2), now anon-rss:0kB, file-rss:34176kB, shmem-rss:0kB 03:49:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xeb00, {0x4}}, 0x14}}, 0x0) 03:49:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x4000000) 03:49:16 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r7, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x40) [ 2405.538706] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 03:49:16 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ff]}) [ 2405.601623] serio: Serial port pts1 [ 2405.606553] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2405.612224] CPU: 0 PID: 23906 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2405.620121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2405.629478] Call Trace: [ 2405.632108] dump_stack+0x188/0x20d [ 2405.635755] dump_header+0x159/0xa5e [ 2405.639485] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2405.644607] ? ___ratelimit+0x59/0x573 [ 2405.648513] oom_kill_process.cold+0x10/0x6dc [ 2405.653027] ? task_will_free_mem+0x134/0x6d0 [ 2405.657534] out_of_memory+0x349/0x1250 [ 2405.661529] ? oom_killer_disable+0x270/0x270 [ 2405.666036] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2405.670931] ? memcg_event_wake+0x210/0x210 [ 2405.675271] ? do_raw_spin_unlock+0x171/0x260 [ 2405.679771] try_charge+0xe22/0x1300 [ 2405.683495] ? find_held_lock+0x2d/0x110 [ 2405.687558] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2405.692417] ? lock_downgrade+0x740/0x740 [ 2405.696576] ? check_preemption_disabled+0x41/0x280 [ 2405.701605] memcg_kmem_charge_memcg+0x7b/0x150 [ 2405.706279] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2405.710782] ? should_fail+0x142/0x7bc [ 2405.714672] ? __lock_is_held+0xad/0x140 [ 2405.718754] ? __isolate_free_page+0x4c0/0x4c0 [ 2405.723364] memcg_kmem_charge+0x132/0x360 [ 2405.727625] __alloc_pages_nodemask+0x396/0x6a0 [ 2405.732314] ? should_fail+0x142/0x7bc [ 2405.736251] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2405.742252] alloc_pages_current+0xff/0x200 [ 2405.746594] pte_alloc_one+0x16/0x190 [ 2405.750415] __do_fault+0x2cd/0x470 [ 2405.754044] ? __pmd_alloc+0x35e/0x440 [ 2405.757940] __handle_mm_fault+0x28cb/0x3b60 [ 2405.762626] ? copy_page_range+0x1e70/0x1e70 [ 2405.767394] ? count_memcg_event_mm+0x279/0x4c0 [ 2405.772098] handle_mm_fault+0x1a5/0x670 [ 2405.776188] __do_page_fault+0x5ed/0xdd0 [ 2405.780395] ? trace_hardirqs_off_caller+0x55/0x210 [ 2405.785431] ? vmalloc_fault+0x730/0x730 [ 2405.789594] ? page_fault+0x8/0x30 [ 2405.793155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2405.798020] ? page_fault+0x8/0x30 [ 2405.801735] page_fault+0x1e/0x30 [ 2405.805214] RIP: 0033:0x403667 [ 2405.808423] Code: 00 00 00 48 83 ec 08 48 8b 15 35 f0 87 00 48 8b 05 26 f0 87 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 08 f0 87 00 48 83 c4 08 c3 48 89 c6 bf d8 f9 4c 00 [ 2405.827333] RSP: 002b:00007ffd584c53c0 EFLAGS: 00010287 [ 2405.832823] RAX: 0000001b2ff20000 RBX: 0000000000000000 RCX: 0000001b30f20000 [ 2405.840304] RDX: 0000001b2ff20004 RSI: 00007ffd584c5180 RDI: 0000000000000000 03:49:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000263100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2405.847686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 2405.854971] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 2405.862257] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 03:49:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x6, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:17 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfd]}) 03:49:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x6000000) [ 2405.969500] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2406.013317] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:17 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xffe7]}) [ 2406.065592] Task in /syz2 killed as a result of limit of /syz2 [ 2406.078349] memory: usage 307200kB, limit 307200kB, failcnt 622 [ 2406.093749] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2406.114384] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2406.125886] Memory cgroup stats for /syz2: cache:0KB rss:96KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2406.155817] Memory cgroup out of memory: Kill process 23906 (syz-executor.2) score 1103 or sacrifice child 03:49:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000263600004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xa000000) [ 2406.186238] Killed process 23906 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2406.204547] oom_reaper: reaped process 23906 (syz-executor.2), now anon-rss:0kB, file-rss:34112kB, shmem-rss:0kB 03:49:17 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xe7ffffff]}) [ 2406.315265] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2406.357523] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xec00, {0x4}}, 0x14}}, 0x0) 03:49:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x8, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2406.611850] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 2406.641785] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2406.656636] CPU: 1 PID: 24353 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2406.664561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2406.673913] Call Trace: [ 2406.676513] dump_stack+0x188/0x20d [ 2406.680156] dump_header+0x159/0xa5e [ 2406.683878] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2406.688987] ? ___ratelimit+0x59/0x573 [ 2406.692886] oom_kill_process.cold+0x10/0x6dc [ 2406.697395] ? task_will_free_mem+0x134/0x6d0 [ 2406.701904] out_of_memory+0x349/0x1250 [ 2406.705897] ? oom_killer_disable+0x270/0x270 [ 2406.710406] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2406.715415] ? memcg_event_wake+0x210/0x210 [ 2406.719767] ? do_raw_spin_unlock+0x171/0x260 [ 2406.724275] try_charge+0xe22/0x1300 [ 2406.728016] ? find_held_lock+0x2d/0x110 [ 2406.732214] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2406.737088] ? lock_downgrade+0x740/0x740 [ 2406.741255] ? check_preemption_disabled+0x41/0x280 [ 2406.746293] memcg_kmem_charge_memcg+0x7b/0x150 [ 2406.750988] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2406.755506] ? should_fail+0x142/0x7bc [ 2406.759421] ? __lock_is_held+0xad/0x140 [ 2406.763501] ? __isolate_free_page+0x4c0/0x4c0 [ 2406.768244] memcg_kmem_charge+0x132/0x360 [ 2406.772497] __alloc_pages_nodemask+0x396/0x6a0 [ 2406.777213] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2406.782248] ? find_held_lock+0x2d/0x110 [ 2406.786346] alloc_pages_current+0xff/0x200 [ 2406.790698] __pmd_alloc+0x37/0x440 [ 2406.794338] __handle_mm_fault+0x1827/0x3b60 [ 2406.798906] ? copy_page_range+0x1e70/0x1e70 [ 2406.803326] ? count_memcg_event_mm+0x279/0x4c0 [ 2406.808029] handle_mm_fault+0x1a5/0x670 [ 2406.812106] __do_page_fault+0x5ed/0xdd0 [ 2406.816177] ? trace_hardirqs_off_caller+0x55/0x210 [ 2406.821197] ? vmalloc_fault+0x730/0x730 [ 2406.825317] ? page_fault+0x8/0x30 [ 2406.828884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2406.833741] ? page_fault+0x8/0x30 [ 2406.837306] page_fault+0x1e/0x30 [ 2406.840769] RIP: 0033:0x403667 [ 2406.843972] Code: 00 00 00 48 83 ec 08 48 8b 15 35 f0 87 00 48 8b 05 26 f0 87 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 08 f0 87 00 48 83 c4 08 c3 48 89 c6 bf d8 f9 4c 00 [ 2406.863002] RSP: 002b:00007ffd584c53c0 EFLAGS: 00010287 [ 2406.868383] RAX: 0000001b2ff20000 RBX: 0000000000000000 RCX: 0000001b30f20000 [ 2406.875664] RDX: 0000001b2ff20004 RSI: 00007ffd584c5180 RDI: 0000000000000000 [ 2406.883065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 2406.890345] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 2406.897633] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2406.909249] Task in /syz2 killed as a result of limit of /syz2 [ 2406.915385] memory: usage 307200kB, limit 307200kB, failcnt 659 [ 2406.926317] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2406.938448] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2406.949392] Memory cgroup stats for /syz2: cache:0KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2406.981349] Memory cgroup out of memory: Kill process 24353 (syz-executor.2) score 1103 or sacrifice child [ 2406.999289] Killed process 24353 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2407.012498] oom_reaper: reaped process 24353 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000003f00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xc000000) 03:49:19 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 03:49:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x9, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:19 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x420000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xee00, {0x4}}, 0x14}}, 0x0) [ 2408.655870] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2408.678694] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2408.691074] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2408.696674] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2408.705941] CPU: 0 PID: 24365 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2408.713857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2408.723250] Call Trace: [ 2408.725864] dump_stack+0x188/0x20d [ 2408.729521] dump_header+0x159/0xa5e [ 2408.733260] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2408.738470] ? ___ratelimit+0x59/0x573 [ 2408.742386] oom_kill_process.cold+0x10/0x6dc [ 2408.746911] ? task_will_free_mem+0x134/0x6d0 [ 2408.751431] out_of_memory+0x349/0x1250 [ 2408.755449] ? oom_killer_disable+0x270/0x270 [ 2408.759972] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2408.764838] ? memcg_event_wake+0x210/0x210 [ 2408.769274] ? do_raw_spin_unlock+0x171/0x260 [ 2408.773936] try_charge+0xe22/0x1300 [ 2408.777679] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2408.782563] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2408.788320] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2408.794527] ? __lock_acquire+0x6ee/0x49c0 [ 2408.798797] mem_cgroup_try_charge+0x249/0x5c0 [ 2408.803402] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2408.808358] wp_page_copy+0x3fe/0x1530 [ 2408.812311] ? follow_pfn+0x260/0x260 [ 2408.816129] ? __lock_acquire+0x6ee/0x49c0 [ 2408.820391] do_wp_page+0x518/0xfa0 [ 2408.824049] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2408.828838] __handle_mm_fault+0x21a4/0x3b60 [ 2408.833269] ? copy_page_range+0x1e70/0x1e70 [ 2408.837780] ? count_memcg_event_mm+0x279/0x4c0 [ 2408.842482] handle_mm_fault+0x1a5/0x670 [ 2408.847002] __do_page_fault+0x5ed/0xdd0 [ 2408.851101] ? trace_hardirqs_off_caller+0x55/0x210 [ 2408.856137] ? vmalloc_fault+0x730/0x730 [ 2408.860214] ? page_fault+0x8/0x30 [ 2408.863770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2408.868733] ? page_fault+0x8/0x30 [ 2408.872292] page_fault+0x1e/0x30 [ 2408.875760] RIP: 0033:0x4749ee [ 2408.878966] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 2408.898577] RSP: 002b:00007ffd584c4dd0 EFLAGS: 00010202 03:49:19 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) 03:49:20 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffe7]}) [ 2408.903965] RAX: 0000000000000006 RBX: 00007ffd584c5330 RCX: 0000000000000000 [ 2408.911345] RDX: 00007ffd584c54a8 RSI: 00000000004c2258 RDI: 00007ffd584c5330 [ 2408.918639] RBP: 00007ffd584c5320 R08: 0000000000000000 R09: 00007ffd584c54a8 [ 2408.925934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd584c5600 [ 2408.933244] R13: 00000000004c2258 R14: 00007ffd584c54a8 R15: 0000000000000001 [ 2408.942896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57366 sclass=netlink_route_socket pig=24472 comm=syz-executor.1 [ 2408.957853] serio: Serial port pts1 [ 2408.961746] Task in /syz2 killed as a result of limit of /syz2 [ 2408.968047] memory: usage 307200kB, limit 307200kB, failcnt 684 [ 2408.974507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2408.988682] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xe000000) 03:49:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000004000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2409.011624] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:84KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2409.081272] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2409.105907] Killed process 24365 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf000000) 03:49:20 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0xffffffff]}) 03:49:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0xa, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf000, {0x4}}, 0x14}}, 0x0) [ 2409.151806] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2409.173265] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x10000000) [ 2409.291605] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 03:49:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000005c00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2409.344074] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2409.376316] CPU: 1 PID: 24704 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2409.384254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2409.393618] Call Trace: [ 2409.396248] dump_stack+0x188/0x20d [ 2409.399909] dump_header+0x159/0xa5e [ 2409.403800] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2409.408928] ? ___ratelimit+0x59/0x573 [ 2409.412843] oom_kill_process.cold+0x10/0x6dc [ 2409.417369] ? task_will_free_mem+0x134/0x6d0 [ 2409.421917] out_of_memory+0x349/0x1250 [ 2409.425934] ? oom_killer_disable+0x270/0x270 [ 2409.430469] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2409.435345] ? memcg_event_wake+0x210/0x210 [ 2409.439703] ? do_raw_spin_unlock+0x171/0x260 [ 2409.444220] try_charge+0xe22/0x1300 [ 2409.447956] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2409.452811] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2409.457677] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2409.463747] ? __lock_acquire+0x6ee/0x49c0 [ 2409.468023] mem_cgroup_try_charge+0x249/0x5c0 [ 2409.472629] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2409.477601] wp_page_copy+0x3fe/0x1530 [ 2409.481522] ? follow_pfn+0x260/0x260 [ 2409.485371] ? __lock_acquire+0x6ee/0x49c0 [ 2409.489635] do_wp_page+0x518/0xfa0 [ 2409.493287] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2409.497985] __handle_mm_fault+0x21a4/0x3b60 [ 2409.502412] ? copy_page_range+0x1e70/0x1e70 [ 2409.506831] ? count_memcg_event_mm+0x279/0x4c0 [ 2409.511665] handle_mm_fault+0x1a5/0x670 [ 2409.515741] __do_page_fault+0x5ed/0xdd0 [ 2409.519821] ? trace_hardirqs_off_caller+0x55/0x210 [ 2409.524861] ? vmalloc_fault+0x730/0x730 [ 2409.528941] ? page_fault+0x8/0x30 [ 2409.532500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2409.537356] ? page_fault+0x8/0x30 [ 2409.540942] page_fault+0x1e/0x30 [ 2409.544410] RIP: 0033:0x4749ee [ 2409.547610] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 2409.566610] RSP: 002b:00007ffd584c4dd0 EFLAGS: 00010202 [ 2409.572250] RAX: 0000000000000006 RBX: 00007ffd584c5330 RCX: 0000000000000000 [ 2409.579569] RDX: 00007ffd584c54a8 RSI: 00000000004c2258 RDI: 00007ffd584c5330 [ 2409.586943] RBP: 00007ffd584c5320 R08: 0000000000000000 R09: 00007ffd584c54a8 [ 2409.594231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd584c5600 [ 2409.601691] R13: 00000000004c2258 R14: 00007ffd584c54a8 R15: 0000000000000001 [ 2409.635853] Task in /syz2 killed as a result of limit of /syz2 [ 2409.641170] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2409.642267] memory: usage 307136kB, limit 307200kB, failcnt 707 [ 2409.663175] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2409.670446] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2409.676780] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:84KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2409.696547] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2409.719724] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2409.730208] Killed process 24704 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2409.747277] oom_reaper: reaped process 24704 (syz-executor.2), now anon-rss:0kB, file-rss:34496kB, shmem-rss:0kB [ 2409.765629] serio: Serial port pts1 03:49:20 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000100)=0x1, 0x4) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:20 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:49:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0xb, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x3f000000) 03:49:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf100, {0x4}}, 0x14}}, 0x0) 03:49:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000045c00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2409.889870] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2409.919525] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2409.943770] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2409.949501] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2409.965710] CPU: 0 PID: 24813 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2409.973665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2409.983031] Call Trace: [ 2409.985638] dump_stack+0x188/0x20d [ 2409.989291] dump_header+0x159/0xa5e [ 2409.993024] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2409.998151] ? ___ratelimit+0x59/0x573 [ 2410.002064] oom_kill_process.cold+0x10/0x6dc [ 2410.006710] ? task_will_free_mem+0x134/0x6d0 [ 2410.011229] out_of_memory+0x349/0x1250 [ 2410.015320] ? oom_killer_disable+0x270/0x270 [ 2410.019939] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2410.024810] ? memcg_event_wake+0x210/0x210 [ 2410.029164] ? do_raw_spin_unlock+0x171/0x260 [ 2410.033826] try_charge+0xe22/0x1300 [ 2410.037567] ? find_held_lock+0x2d/0x110 [ 2410.041652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2410.046530] ? lock_downgrade+0x740/0x740 [ 2410.050699] ? check_preemption_disabled+0x41/0x280 [ 2410.055742] memcg_kmem_charge_memcg+0x7b/0x150 [ 2410.060433] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2410.064947] ? should_fail+0x142/0x7bc [ 2410.068856] ? __isolate_free_page+0x4c0/0x4c0 [ 2410.073463] memcg_kmem_charge+0x132/0x360 [ 2410.077724] __alloc_pages_nodemask+0x396/0x6a0 [ 2410.082422] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2410.087468] ? _raw_spin_unlock_irq+0x24/0x80 [ 2410.092006] copy_process.part.0+0x3d6/0x7a60 [ 2410.096522] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2410.101649] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2410.106247] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2410.111370] ? __lock_acquire+0x6ee/0x49c0 [ 2410.115612] ? do_try_to_free_pages+0xd13/0x1090 [ 2410.120402] ? __cleanup_sighand+0x60/0x60 [ 2410.124658] ? mark_held_locks+0xf0/0xf0 [ 2410.128745] ? shrink_node+0x1350/0x1350 [ 2410.132842] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2410.137887] _do_fork+0x22f/0xf40 [ 2410.141388] ? fork_idle+0x1e0/0x1e0 [ 2410.145131] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2410.151037] ? check_preemption_disabled+0x41/0x280 [ 2410.156081] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2410.161210] ? trace_hardirqs_off_caller+0x55/0x210 [ 2410.166413] ? do_syscall_64+0x21/0x620 [ 2410.170518] do_syscall_64+0xf9/0x620 [ 2410.174378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2410.179585] RIP: 0033:0x45f219 [ 2410.182802] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2410.201727] RSP: 002b:00007ffd584c5298 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2410.209459] RAX: ffffffffffffffda RBX: 00007fc83977a700 RCX: 000000000045f219 [ 2410.216744] RDX: 00007fc83977a9d0 RSI: 00007fc839779db0 RDI: 00000000003d0f00 [ 2410.224030] RBP: 00007ffd584c54b0 R08: 00007fc83977a700 R09: 00007fc83977a700 [ 2410.231309] R10: 00007fc83977a9d0 R11: 0000000000000202 R12: 0000000000000000 03:49:21 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7]}) 03:49:21 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ff]}) 03:49:21 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfd]}) [ 2410.238613] R13: 00007ffd584c534f R14: 00007fc83977a9c0 R15: 000000000076bf0c [ 2410.247161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57366 sclass=netlink_route_socket pig=24921 comm=syz-executor.1 [ 2410.253570] Task in /syz2 killed as a result of limit of /syz2 [ 2410.273075] memory: usage 307176kB, limit 307200kB, failcnt 739 03:49:21 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {r0, r1+30000000}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 2410.291157] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2410.311047] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x40000000) 03:49:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x10, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000045d00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2410.391919] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2410.427098] serio: Serial port pts1 [ 2410.431591] Memory cgroup out of memory: Kill process 24813 (syz-executor.2) score 1103 or sacrifice child 03:49:21 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffe7]}) [ 2410.448318] Killed process 24813 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2410.461869] oom_reaper: reaped process 24813 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf200, {0x4}}, 0x14}}, 0x0) 03:49:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x60000000) [ 2410.505663] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2410.566565] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2410.585400] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2410.626429] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2410.632157] CPU: 1 PID: 25257 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2410.640069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2410.649576] Call Trace: [ 2410.652183] dump_stack+0x188/0x20d [ 2410.655827] dump_header+0x159/0xa5e [ 2410.659569] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2410.664703] ? ___ratelimit+0x59/0x573 [ 2410.668621] oom_kill_process.cold+0x10/0x6dc [ 2410.673164] ? task_will_free_mem+0x134/0x6d0 [ 2410.677692] out_of_memory+0x349/0x1250 [ 2410.681699] ? __schedule+0x86e/0x1d80 [ 2410.685608] ? oom_killer_disable+0x270/0x270 [ 2410.690141] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2410.695026] ? memcg_event_wake+0x210/0x210 [ 2410.699376] ? ___preempt_schedule+0x16/0x18 [ 2410.703809] try_charge+0xe22/0x1300 [ 2410.707557] ? find_held_lock+0x2d/0x110 [ 2410.711635] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2410.716675] ? lock_downgrade+0x740/0x740 [ 2410.720861] ? check_preemption_disabled+0x41/0x280 03:49:21 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe7ffffff]}) [ 2410.725911] memcg_kmem_charge_memcg+0x7b/0x150 [ 2410.730628] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2410.735409] ? should_fail+0x142/0x7bc [ 2410.739329] ? __isolate_free_page+0x4c0/0x4c0 [ 2410.743948] memcg_kmem_charge+0x132/0x360 [ 2410.748224] __alloc_pages_nodemask+0x396/0x6a0 [ 2410.752928] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2410.757968] ? _raw_spin_unlock_irq+0x24/0x80 [ 2410.762495] copy_process.part.0+0x3d6/0x7a60 [ 2410.767020] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2410.772149] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2410.776777] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2410.781912] ? __lock_acquire+0x6ee/0x49c0 [ 2410.786173] ? do_try_to_free_pages+0xd13/0x1090 [ 2410.790965] ? __cleanup_sighand+0x60/0x60 [ 2410.795225] ? mark_held_locks+0xf0/0xf0 [ 2410.799426] ? shrink_node+0x1350/0x1350 [ 2410.803526] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2410.808572] _do_fork+0x22f/0xf40 [ 2410.812050] ? fork_idle+0x1e0/0x1e0 [ 2410.815795] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2410.821698] ? check_preemption_disabled+0x41/0x280 03:49:21 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) [ 2410.826744] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2410.831516] ? trace_hardirqs_off_caller+0x55/0x210 [ 2410.836675] ? do_syscall_64+0x21/0x620 [ 2410.840680] do_syscall_64+0xf9/0x620 [ 2410.844517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2410.849734] RIP: 0033:0x45f219 [ 2410.852939] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2410.871869] RSP: 002b:00007ffd584c5298 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2410.879746] RAX: ffffffffffffffda RBX: 00007fc83977a700 RCX: 000000000045f219 [ 2410.887034] RDX: 00007fc83977a9d0 RSI: 00007fc839779db0 RDI: 00000000003d0f00 [ 2410.894322] RBP: 00007ffd584c54b0 R08: 00007fc83977a700 R09: 00007fc83977a700 [ 2410.901615] R10: 00007fc83977a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2410.908926] R13: 00007ffd584c534f R14: 00007fc83977a9c0 R15: 000000000076bf0c 03:49:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000045e00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2410.936379] Task in /syz2 killed as a result of limit of /syz2 [ 2410.949321] memory: usage 307188kB, limit 307200kB, failcnt 774 [ 2410.963368] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2410.979951] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2410.986312] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2411.017061] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x65580000) 03:49:22 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) [ 2411.035968] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2411.061551] Memory cgroup out of memory: Kill process 25257 (syz-executor.2) score 1103 or sacrifice child [ 2411.080728] Killed process 25257 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2411.096292] oom_reaper: reaped process 25257 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB [ 2412.596122] NOHZ: local_softirq_pending 08 03:49:24 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_names='tunl0\x00'}) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000100)=0x8001) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$SIOCRSACCEPT(r3, 0x89e3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="cdee1a16080000d50c8a9d63db0edf00ce0002000000000002000000"]}) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000500)=""/90, 0x5a}], 0x4, &(0x7f00000005c0)=""/170, 0xaa}, 0x5}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/11, 0xb}, {&(0x7f0000000840)=""/56, 0x38}], 0x3, &(0x7f00000008c0)=""/113, 0x71}, 0x6}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f0000000a00)=""/171, 0xab}, {&(0x7f0000000ac0)=""/210, 0xd2}, {&(0x7f0000000bc0)=""/198, 0xc6}, {&(0x7f0000000cc0)=""/39, 0x27}, {&(0x7f0000000d00)=""/233, 0xe9}], 0x6, &(0x7f0000000e80)=""/100, 0x64}, 0xf6}, {{&(0x7f0000000f00)=@rc={0x1f, @none}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/3, 0x3}], 0x1, &(0x7f0000001000)=""/14, 0xe}, 0x6}, {{&(0x7f0000001040)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000010c0)=""/211, 0xd3}, {&(0x7f00000011c0)=""/81, 0x51}, {&(0x7f0000001240)=""/191, 0xbf}, {&(0x7f0000001300)=""/182, 0xb6}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/48, 0x30}, {&(0x7f0000001440)=""/214, 0xd6}, {&(0x7f0000001540)=""/218, 0xda}], 0x8, &(0x7f00000016c0)=""/101, 0x65}, 0xffffff80}, {{&(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000017c0)=""/36, 0x24}, {&(0x7f0000001800)=""/6, 0x6}, {&(0x7f0000001840)=""/92, 0x5c}, {&(0x7f00000018c0)=""/11, 0xb}, {&(0x7f0000001900)=""/168, 0xa8}, {&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/155, 0x9b}], 0x7}, 0x34}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/102, 0x66}, {&(0x7f0000001c40)=""/224, 0xe0}, {&(0x7f0000001d40)=""/101, 0x65}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/45, 0x2d}, {&(0x7f0000001e40)}], 0x6, &(0x7f0000001f00)=""/106, 0x6a}, 0x2}], 0x7, 0x11, &(0x7f0000002180)={r5, r6+30000000}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf300, {0x4}}, 0x14}}, 0x0) 03:49:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x14, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000045f00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:24 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffe7]}) 03:49:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x81000000) [ 2413.477382] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2413.482420] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2413.517040] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x88a8ffff) [ 2413.536762] serio: Serial port pts1 [ 2413.547609] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2413.580629] CPU: 0 PID: 25678 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2413.588563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2413.597937] Call Trace: [ 2413.600552] dump_stack+0x188/0x20d [ 2413.604211] dump_header+0x159/0xa5e [ 2413.608048] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2413.613236] ? ___ratelimit+0x59/0x573 [ 2413.617144] oom_kill_process.cold+0x10/0x6dc [ 2413.621661] ? task_will_free_mem+0x134/0x6d0 [ 2413.626174] out_of_memory+0x349/0x1250 [ 2413.630163] ? oom_killer_disable+0x270/0x270 [ 2413.634682] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2413.639551] ? memcg_event_wake+0x210/0x210 [ 2413.643887] ? do_raw_spin_unlock+0x171/0x260 [ 2413.648400] try_charge+0xe22/0x1300 [ 2413.652129] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2413.656985] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2413.661996] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2413.668090] ? __lock_acquire+0x6ee/0x49c0 [ 2413.672472] mem_cgroup_try_charge+0x249/0x5c0 [ 2413.677099] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2413.682047] wp_page_copy+0x3fe/0x1530 [ 2413.685963] ? follow_pfn+0x260/0x260 [ 2413.689785] ? __lock_acquire+0x6ee/0x49c0 [ 2413.694049] do_wp_page+0x518/0xfa0 [ 2413.697698] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2413.702396] __handle_mm_fault+0x21a4/0x3b60 [ 2413.706834] ? copy_page_range+0x1e70/0x1e70 [ 2413.711257] ? count_memcg_event_mm+0x279/0x4c0 [ 2413.715962] handle_mm_fault+0x1a5/0x670 [ 2413.720049] __do_page_fault+0x5ed/0xdd0 [ 2413.724129] ? trace_hardirqs_off_caller+0x55/0x210 [ 2413.729156] ? vmalloc_fault+0x730/0x730 [ 2413.733226] ? page_fault+0x8/0x30 [ 2413.736776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2413.741630] ? page_fault+0x8/0x30 [ 2413.745179] page_fault+0x1e/0x30 [ 2413.748645] RIP: 0033:0x411898 [ 2413.751853] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2413.770808] RSP: 002b:00007ffd584c5300 EFLAGS: 00010246 03:49:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:24 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff]}) [ 2413.776198] RAX: 00000000816cb3f2 RBX: 0000000073abc796 RCX: 0000001b30f20000 [ 2413.783487] RDX: 0000000000000000 RSI: 00000000000013f2 RDI: ffffffff816cb3f2 [ 2413.790778] RBP: 0000000000000000 R08: 00000000816cb3f2 R09: 00000000816cb3f6 [ 2413.798065] R10: 00007ffd584c54a0 R11: 0000000000000246 R12: 000000000076bf88 [ 2413.805443] R13: 0000000080000000 R14: 00007fc83b77b008 R15: 0000000000000000 [ 2413.812749] ? trace_hardirqs_off_caller+0x12/0x210 [ 2413.826317] Task in /syz2 killed as a result of limit of /syz2 [ 2413.853836] memory: usage 307200kB, limit 307200kB, failcnt 802 [ 2413.876774] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x9effffff) [ 2413.911468] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2413.912980] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2413.936403] serio: Serial port pts1 [ 2413.944186] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x38, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2413.978501] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:112KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:25 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000100)) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046100004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2414.053964] Memory cgroup out of memory: Kill process 25678 (syz-executor.2) score 1103 or sacrifice child [ 2414.141425] Killed process 25678 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2414.180447] oom_reaper: reaped process 25678 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf301, {0x4}}, 0x14}}, 0x0) 03:49:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xbe2f0000) [ 2414.195264] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2414.209170] serio: Serial port pts1 [ 2414.234443] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xc00e0000) 03:49:25 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:49:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046200004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2414.374415] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2414.421194] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2414.426816] CPU: 1 PID: 25923 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2414.434723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2414.444090] Call Trace: [ 2414.446697] dump_stack+0x188/0x20d [ 2414.450346] dump_header+0x159/0xa5e [ 2414.454082] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2414.459291] ? ___ratelimit+0x59/0x573 [ 2414.463202] oom_kill_process.cold+0x10/0x6dc [ 2414.467723] ? task_will_free_mem+0x134/0x6d0 [ 2414.472246] out_of_memory+0x349/0x1250 [ 2414.476246] ? oom_killer_disable+0x270/0x270 [ 2414.480795] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2414.485660] ? memcg_event_wake+0x210/0x210 [ 2414.490015] ? do_raw_spin_unlock+0x171/0x260 [ 2414.494541] try_charge+0xe22/0x1300 [ 2414.498286] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2414.503150] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2414.508009] ? __pte_alloc+0x1bb/0x350 [ 2414.511924] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2414.518022] mem_cgroup_try_charge+0x249/0x5c0 [ 2414.522631] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2414.527580] __handle_mm_fault+0x1cfb/0x3b60 [ 2414.532015] ? copy_page_range+0x1e70/0x1e70 [ 2414.536441] ? count_memcg_event_mm+0x279/0x4c0 [ 2414.541147] handle_mm_fault+0x1a5/0x670 [ 2414.545219] __do_page_fault+0x5ed/0xdd0 [ 2414.549303] ? trace_hardirqs_off_caller+0x55/0x210 [ 2414.554332] ? vmalloc_fault+0x730/0x730 [ 2414.558408] ? page_fault+0x8/0x30 [ 2414.561980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2414.566852] ? page_fault+0x8/0x30 [ 2414.570437] page_fault+0x1e/0x30 [ 2414.573910] RIP: 0033:0x40f8da [ 2414.577121] Code: 48 24 8b 4c 24 28 89 48 28 31 c0 48 8b 8c 04 20 01 00 00 48 89 8c 02 30 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 e8 d6 43 ff ff <83> 05 23 07 76 00 01 80 7c 24 07 00 74 0b f6 44 24 08 01 0f 84 b5 [ 2414.596039] RSP: 002b:00007ffd584c53d0 EFLAGS: 00010207 [ 2414.601438] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000045c849 [ 2414.608721] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf08 03:49:25 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe7]}) 03:49:25 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x39, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2414.616092] RBP: 000000000076bf0c R08: 00007fc83977a700 R09: 00ffffffffffffff [ 2414.623378] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf00 [ 2414.630656] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf0c [ 2414.657821] Task in /syz2 killed as a result of limit of /syz2 [ 2414.662813] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2414.691367] memory: usage 307156kB, limit 307200kB, failcnt 835 [ 2414.705847] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf0ffffff) [ 2414.725416] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2414.748788] serio: Serial port pts1 [ 2414.749277] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046300004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2414.764851] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:25 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe7ff]}) 03:49:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xffffa888) [ 2414.841050] Memory cgroup out of memory: Kill process 25923 (syz-executor.2) score 1103 or sacrifice child [ 2414.851306] serio: Serial port pts1 [ 2414.870386] Killed process 25923 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2414.904093] oom_reaper: reaped process 25923 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf400, {0x4}}, 0x14}}, 0x0) 03:49:26 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x301600, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x52b40, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x4}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xfffff000) [ 2414.991573] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2415.014066] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2415.060380] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2415.105578] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2415.121678] CPU: 1 PID: 26178 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2415.129611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.139098] Call Trace: [ 2415.141723] dump_stack+0x188/0x20d [ 2415.145379] dump_header+0x159/0xa5e [ 2415.149118] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2415.154358] ? ___ratelimit+0x59/0x573 [ 2415.158266] oom_kill_process.cold+0x10/0x6dc [ 2415.162778] ? task_will_free_mem+0x134/0x6d0 [ 2415.168279] out_of_memory+0x349/0x1250 [ 2415.172274] ? oom_killer_disable+0x270/0x270 [ 2415.176829] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2415.181697] ? memcg_event_wake+0x210/0x210 [ 2415.186164] ? do_raw_spin_unlock+0x171/0x260 [ 2415.190690] try_charge+0xe22/0x1300 [ 2415.194603] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2415.199465] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2415.204343] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2415.210433] ? __lock_acquire+0x6ee/0x49c0 [ 2415.214698] mem_cgroup_try_charge+0x249/0x5c0 [ 2415.219400] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2415.224350] wp_page_copy+0x3fe/0x1530 [ 2415.228259] ? follow_pfn+0x260/0x260 [ 2415.232516] ? __lock_acquire+0x6ee/0x49c0 [ 2415.236781] do_wp_page+0x518/0xfa0 [ 2415.240420] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2415.245118] __handle_mm_fault+0x21a4/0x3b60 [ 2415.249542] ? copy_page_range+0x1e70/0x1e70 [ 2415.253988] ? count_memcg_event_mm+0x279/0x4c0 [ 2415.258689] handle_mm_fault+0x1a5/0x670 [ 2415.262880] __do_page_fault+0x5ed/0xdd0 [ 2415.266961] ? trace_hardirqs_off_caller+0x55/0x210 [ 2415.272257] ? vmalloc_fault+0x730/0x730 [ 2415.276334] ? page_fault+0x8/0x30 [ 2415.279882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2415.284750] ? page_fault+0x8/0x30 [ 2415.288302] page_fault+0x1e/0x30 [ 2415.291760] RIP: 0033:0x411898 03:49:26 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 03:49:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046400004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:26 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9dec) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000100)={0x80, 0x40, 0x400, 0x0, 0x5}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x102, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2415.294967] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2415.314068] RSP: 002b:00007ffd584c5300 EFLAGS: 00010246 [ 2415.319573] RAX: 0000000075d0ec11 RBX: 00000000ecb5f55a RCX: 0000001b30f20000 [ 2415.326852] RDX: 0000000000000000 RSI: 0000000000000c11 RDI: ffffffff75d0ec11 [ 2415.334124] RBP: 000000000000000e R08: 0000000075d0ec11 R09: 0000000075d0ec15 [ 2415.341394] R10: 00007ffd584c54a0 R11: 0000000000000246 R12: 000000000076bf88 [ 2415.348676] R13: 0000000080000000 R14: 00007fc83b77b008 R15: 000000000000000e 03:49:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xffffff7f) [ 2415.412634] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2415.443522] serio: Serial port pts1 [ 2415.447939] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:26 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffe7]}) 03:49:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046500004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2415.525443] serio: Serial port pts1 [ 2415.541535] Task in /syz2 killed as a result of limit of /syz2 [ 2415.560176] memory: usage 307200kB, limit 307200kB, failcnt 849 03:49:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x201, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2415.592040] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2415.617293] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xffffff9e) [ 2415.642437] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2415.675743] Memory cgroup out of memory: Kill process 26178 (syz-executor.2) score 1103 or sacrifice child [ 2415.690395] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2415.701031] Killed process 26178 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf500, {0x4}}, 0x14}}, 0x0) 03:49:26 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x4c501) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:26 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe7ffffff]}) 03:49:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xfffffff0) [ 2415.749484] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2415.844301] serio: Serial port pts1 [ 2415.893853] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:49:26 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:49:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046600004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x40030000000000) [ 2415.938710] serio: Serial port pts1 [ 2415.948104] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2415.957635] CPU: 1 PID: 26533 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2415.965559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2415.974924] Call Trace: [ 2415.977536] dump_stack+0x188/0x20d [ 2415.981262] dump_header+0x159/0xa5e [ 2415.984997] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2415.990114] ? ___ratelimit+0x59/0x573 [ 2415.994019] oom_kill_process.cold+0x10/0x6dc [ 2415.998538] ? task_will_free_mem+0x134/0x6d0 [ 2416.003054] out_of_memory+0x349/0x1250 [ 2416.007056] ? oom_killer_disable+0x270/0x270 [ 2416.011604] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2416.016463] ? memcg_event_wake+0x210/0x210 [ 2416.020800] ? do_raw_spin_unlock+0x171/0x260 [ 2416.025302] try_charge+0xe22/0x1300 [ 2416.029032] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2416.033884] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2416.038746] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2416.044827] ? __lock_acquire+0x6ee/0x49c0 [ 2416.049085] mem_cgroup_try_charge+0x249/0x5c0 [ 2416.053693] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2416.058641] wp_page_copy+0x3fe/0x1530 [ 2416.062553] ? follow_pfn+0x260/0x260 [ 2416.066371] ? __lock_acquire+0x6ee/0x49c0 [ 2416.070820] do_wp_page+0x518/0xfa0 [ 2416.074473] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2416.079165] __handle_mm_fault+0x21a4/0x3b60 [ 2416.083618] ? copy_page_range+0x1e70/0x1e70 [ 2416.088043] ? count_memcg_event_mm+0x279/0x4c0 [ 2416.092749] handle_mm_fault+0x1a5/0x670 [ 2416.096824] __do_page_fault+0x5ed/0xdd0 [ 2416.100913] ? trace_hardirqs_off_caller+0x55/0x210 [ 2416.105947] ? vmalloc_fault+0x730/0x730 [ 2416.110015] ? page_fault+0x8/0x30 [ 2416.113568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2416.118424] ? page_fault+0x8/0x30 [ 2416.121967] page_fault+0x1e/0x30 [ 2416.125865] RIP: 0033:0x411898 [ 2416.129077] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2416.147982] RSP: 002b:00007ffd584c5300 EFLAGS: 00010246 [ 2416.154751] RAX: 00000000680bc38b RBX: 00000000e4894d2f RCX: 0000001b30f20000 [ 2416.162038] RDX: 0000000000000000 RSI: 000000000000038b RDI: ffffffff680bc38b [ 2416.169333] RBP: 0000000000000002 R08: 00000000680bc38b R09: 00000000680bc38f [ 2416.176622] R10: 00007ffd584c54a0 R11: 0000000000000246 R12: 000000000076bf88 03:49:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x300, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2416.183914] R13: 0000000080000000 R14: 00007fc83b77b008 R15: 0000000000000002 [ 2416.194498] Task in /syz2 killed as a result of limit of /syz2 [ 2416.203989] memory: usage 307200kB, limit 307200kB, failcnt 878 [ 2416.219497] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2416.238692] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:27 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x2, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) [ 2416.261334] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2416.290784] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2416.315670] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2416.342785] Memory cgroup out of memory: Kill process 26533 (syz-executor.2) score 1103 or sacrifice child 03:49:27 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:49:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf0ffffffffffff) [ 2416.370465] serio: Serial port pts1 [ 2416.376761] Killed process 26533 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000036700004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2416.433958] oom_reaper: reaped process 26533 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB 03:49:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf600, {0x4}}, 0x14}}, 0x0) [ 2416.490492] serio: Serial port pts1 03:49:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x100000000000000) 03:49:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x301, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:27 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x6c00) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x301080, 0x0) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x1, 0x42002) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/247}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@can_newroute={0x290, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "41967b1cd859be7c"}, 0x7}}, @CGW_DST_IF={0x8}, @CGW_CS_CRC8={0x11e, 0x6, {0x60, 0x5b, 0x50, 0x2, 0x0, "471aabae4d8b73eac969563150281aa2affa03050cbe998bbd86d6b329880b31855fe43ddc0dc637cae2e3a4084d40caa01c612a42ba14661ab5ab22eb6562ca13b7a6aa202a8bbd98ba9fad8a559b202959d902faf29c34ad84288a9ac0019c0d8abe395c27b437d1adea9c381b844c0a55c9e60ecaab0605c0b8792b3bd75eeb53945238859f8ad014a7ad7c3cd2d6395e587885c145b86652766016c95ed4b44362594d26044c4826840b60e565d3a07b8ed48f662137c0cb67cdbc1f9002c17949b327fec6cd8df639f09f1e33816565dcf66c53507fb2bb28becde5de5f1281921cd44e9fe2ea31b2e894b7848b56852328bfe3e3127609c2a5670372c1", 0x2, "afff52931708ebb49779c8636ce805d9a3838fc0"}}, @CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r5}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x49, 0x3b, 0x7c, 0x5, 0x1c, "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", 0x1, "55c54594681cfe4cabdb98b89e24e85aadb87b7f"}}]}, 0x290}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) [ 2416.592486] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 03:49:27 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffe7]}) [ 2416.649126] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2416.664942] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2416.683690] CPU: 0 PID: 26787 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2416.686884] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2416.691612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2416.691623] Call Trace: [ 2416.711833] dump_stack+0x188/0x20d [ 2416.715492] dump_header+0x159/0xa5e [ 2416.719218] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2416.724334] ? ___ratelimit+0x59/0x573 [ 2416.728236] oom_kill_process.cold+0x10/0x6dc [ 2416.732743] ? task_will_free_mem+0x134/0x6d0 [ 2416.737252] out_of_memory+0x349/0x1250 [ 2416.741240] ? oom_killer_disable+0x270/0x270 [ 2416.745841] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2416.750695] ? memcg_event_wake+0x210/0x210 [ 2416.755028] ? do_raw_spin_unlock+0x171/0x260 [ 2416.759534] try_charge+0xe22/0x1300 [ 2416.763259] ? find_held_lock+0x2d/0x110 [ 2416.767323] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2416.772176] ? lock_downgrade+0x740/0x740 [ 2416.776332] ? check_preemption_disabled+0x41/0x280 [ 2416.781370] memcg_kmem_charge_memcg+0x7b/0x150 [ 2416.786052] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2416.790557] ? should_fail+0x142/0x7bc [ 2416.794456] ? __isolate_free_page+0x4c0/0x4c0 [ 2416.799058] memcg_kmem_charge+0x132/0x360 [ 2416.803390] __alloc_pages_nodemask+0x396/0x6a0 [ 2416.808078] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2416.813110] ? _raw_spin_unlock_irq+0x24/0x80 [ 2416.817660] copy_process.part.0+0x3d6/0x7a60 [ 2416.822169] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2416.827286] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2416.831881] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2416.837000] ? __lock_acquire+0x6ee/0x49c0 [ 2416.841252] ? do_try_to_free_pages+0xd13/0x1090 [ 2416.846032] ? __cleanup_sighand+0x60/0x60 [ 2416.850290] ? mark_held_locks+0xf0/0xf0 [ 2416.854447] ? shrink_node+0x1350/0x1350 [ 2416.859053] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2416.864090] _do_fork+0x22f/0xf40 [ 2416.867561] ? fork_idle+0x1e0/0x1e0 [ 2416.871290] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2416.877347] ? check_preemption_disabled+0x41/0x280 [ 2416.882496] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2416.887282] ? trace_hardirqs_off_caller+0x55/0x210 [ 2416.892321] ? do_syscall_64+0x21/0x620 [ 2416.896320] do_syscall_64+0xf9/0x620 [ 2416.900136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2416.905360] RIP: 0033:0x45f219 [ 2416.908576] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2416.927487] RSP: 002b:00007ffd584c5298 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2416.935214] RAX: ffffffffffffffda RBX: 00007fc83977a700 RCX: 000000000045f219 [ 2416.942503] RDX: 00007fc83977a9d0 RSI: 00007fc839779db0 RDI: 00000000003d0f00 03:49:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x200000000000000) [ 2416.949805] RBP: 00007ffd584c54b0 R08: 00007fc83977a700 R09: 00007fc83977a700 [ 2416.957083] R10: 00007fc83977a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2416.964372] R13: 00007ffd584c534f R14: 00007fc83977a9c0 R15: 000000000076bf0c [ 2416.985713] serio: Serial port pts1 03:49:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000046700004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2417.061801] Task in /syz2 killed as a result of limit of /syz2 [ 2417.068725] memory: usage 307176kB, limit 307200kB, failcnt 905 [ 2417.083258] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2417.094041] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:28 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}) [ 2417.106250] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2417.160813] Memory cgroup out of memory: Kill process 26787 (syz-executor.2) score 1103 or sacrifice child [ 2417.184766] Killed process 26787 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x402, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2417.222602] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2417.238825] oom_reaper: reaped process 26787 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 2417.247236] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x400000000000000) 03:49:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf700, {0x4}}, 0x14}}, 0x0) 03:49:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000008700004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2417.410864] syz-executor.2 invoked oom-killer: gfp_mask=0x604050(GFP_NOFS|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2417.441351] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2417.461230] CPU: 0 PID: 27076 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2417.469171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2417.478887] Call Trace: [ 2417.481497] dump_stack+0x188/0x20d [ 2417.485144] dump_header+0x159/0xa5e [ 2417.488876] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2417.493997] ? ___ratelimit+0x59/0x573 [ 2417.497906] oom_kill_process.cold+0x10/0x6dc [ 2417.502425] ? task_will_free_mem+0x134/0x6d0 [ 2417.506954] out_of_memory+0x349/0x1250 [ 2417.510960] ? oom_killer_disable+0x270/0x270 [ 2417.515762] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2417.521232] ? memcg_event_wake+0x210/0x210 [ 2417.525572] ? do_raw_spin_unlock+0x171/0x260 [ 2417.530076] try_charge+0xe22/0x1300 [ 2417.533802] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2417.538659] ? __lock_is_held+0xad/0x140 [ 2417.542768] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2417.547800] ? __alloc_pages_nodemask+0x5d1/0x6a0 [ 2417.552653] memcg_kmem_charge_memcg+0x7b/0x150 [ 2417.557330] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2417.561841] ? mark_held_locks+0xa6/0xf0 [ 2417.565911] ? cache_grow_begin+0x580/0x8a0 [ 2417.570255] cache_grow_begin+0x3ed/0x8a0 [ 2417.574427] fallback_alloc+0x205/0x2d0 [ 2417.578420] kmem_cache_alloc+0x1ea/0x710 [ 2417.582580] ? find_held_lock+0x2d/0x110 [ 2417.586650] ? avc_has_perm+0x2f6/0x5b0 [ 2417.590639] ? ratelimit_state_init+0xa0/0xa0 [ 2417.595146] ext4_alloc_inode+0x1a/0x630 [ 2417.599225] ? ratelimit_state_init+0xa0/0xa0 [ 2417.603734] alloc_inode+0x5d/0x180 [ 2417.607375] new_inode_pseudo+0x14/0xe0 [ 2417.611367] new_inode+0x1b/0x40 [ 2417.614787] __ext4_new_inode+0x403/0x5b00 [ 2417.619057] ? ext4_free_inode+0x1780/0x1780 [ 2417.623487] ? __dquot_initialize+0x4d2/0xb40 [ 2417.628008] ? dquot_get_next_dqblk+0x180/0x180 [ 2417.632798] ? selinux_dentry_init_security+0x270/0x270 [ 2417.638189] ext4_symlink+0x3e6/0xba0 [ 2417.642022] vfs_symlink+0x374/0x5a0 [ 2417.645750] ? security_path_symlink+0x111/0x160 [ 2417.650521] do_symlinkat+0x215/0x280 [ 2417.654364] ? __ia32_sys_unlink+0x50/0x50 [ 2417.658612] ? trace_hardirqs_off_caller+0x55/0x210 [ 2417.663643] ? do_syscall_64+0x21/0x620 [ 2417.667634] do_syscall_64+0xf9/0x620 [ 2417.671455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2417.676659] RIP: 0033:0x45c577 [ 2417.679875] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 6d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 4d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2417.698792] RSP: 002b:00007ffd584c5578 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 2417.706625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c577 [ 2417.713912] RDX: 00007ffd584c5617 RSI: 00000000004c237c RDI: 00007ffd584c5600 [ 2417.721228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000017 [ 2417.728512] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000001 [ 2417.735798] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2417.750561] serio: Serial port pts1 [ 2417.755994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57366 sclass=netlink_route_socket pig=27080 comm=syz-executor.1 [ 2417.769266] Task in /syz2 killed as a result of limit of /syz2 [ 2417.776603] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2417.795518] memory: usage 307200kB, limit 307200kB, failcnt 945 [ 2417.806105] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:28 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000140)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) read(r3, 0x0, 0x6c00) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xdc7e, 0x800}, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}, 0x4e22, 0x0, 0x4e24, 0x9, 0x2, 0xa0, 0x80, 0x32, 0x0, r6}, {0x3, 0x0, 0x0, 0x4b, 0xdd, 0x24b, 0x7, 0x1}, {0x9, 0x3f, 0x5, 0x9}, 0x4, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d6, 0x33}, 0x2, @in6=@loopback, 0x3500, 0x3, 0x3, 0x0, 0x0, 0x4, 0x4}}, 0xe8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:49:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x600000000000000) [ 2417.942530] serio: Serial port pts1 03:49:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000039200004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2417.972476] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2417.986450] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x500, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2418.013492] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2418.051078] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xa00000000000000) [ 2418.067718] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2418.098414] Killed process 27076 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2418.104587] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2418.126176] oom_reaper: reaped process 27076 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 03:49:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf800, {0x4}}, 0x14}}, 0x0) 03:49:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000003af00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2418.256550] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2418.296408] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2418.314382] CPU: 1 PID: 27103 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2418.322317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2418.331689] Call Trace: [ 2418.334305] dump_stack+0x188/0x20d [ 2418.337968] dump_header+0x159/0xa5e [ 2418.341746] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2418.346885] ? ___ratelimit+0x59/0x573 [ 2418.350810] oom_kill_process.cold+0x10/0x6dc [ 2418.355330] ? task_will_free_mem+0x134/0x6d0 [ 2418.359851] out_of_memory+0x349/0x1250 [ 2418.363983] ? oom_killer_disable+0x270/0x270 [ 2418.368510] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2418.373506] ? memcg_event_wake+0x210/0x210 [ 2418.377852] ? do_raw_spin_unlock+0x171/0x260 [ 2418.382365] try_charge+0xe22/0x1300 [ 2418.386109] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2418.390978] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2418.395850] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2418.401934] ? __lock_acquire+0x6ee/0x49c0 [ 2418.406197] mem_cgroup_try_charge+0x249/0x5c0 [ 2418.410801] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2418.415766] wp_page_copy+0x3fe/0x1530 [ 2418.419799] ? follow_pfn+0x260/0x260 [ 2418.423622] ? __lock_acquire+0x6ee/0x49c0 [ 2418.428139] do_wp_page+0x518/0xfa0 [ 2418.431797] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2418.436569] __handle_mm_fault+0x21a4/0x3b60 [ 2418.441016] ? copy_page_range+0x1e70/0x1e70 [ 2418.445451] ? count_memcg_event_mm+0x279/0x4c0 [ 2418.450187] handle_mm_fault+0x1a5/0x670 [ 2418.454269] __do_page_fault+0x5ed/0xdd0 [ 2418.458358] ? trace_hardirqs_off_caller+0x55/0x210 [ 2418.463395] ? vmalloc_fault+0x730/0x730 [ 2418.467474] ? page_fault+0x8/0x30 [ 2418.471028] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2418.475901] ? page_fault+0x8/0x30 [ 2418.479458] page_fault+0x1e/0x30 [ 2418.483004] RIP: 0033:0x4749ee [ 2418.486204] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 2418.505117] RSP: 002b:00007ffd584c4dd0 EFLAGS: 00010202 03:49:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xc00000000000000) [ 2418.510757] RAX: 0000000000000006 RBX: 00007ffd584c5330 RCX: 0000000000000000 [ 2418.518217] RDX: 00007ffd584c54a8 RSI: 00000000004c2258 RDI: 00007ffd584c5330 [ 2418.525508] RBP: 00007ffd584c5320 R08: 0000000000000000 R09: 00007ffd584c54a8 [ 2418.532792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd584c5600 [ 2418.540079] R13: 00000000004c2258 R14: 00007ffd584c54a8 R15: 0000000000000001 [ 2418.628589] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2418.671541] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2418.741359] serio: Serial port pts1 [ 2418.825275] Task in /syz2 killed as a result of limit of /syz2 [ 2418.832613] memory: usage 307200kB, limit 307200kB, failcnt 971 [ 2418.852170] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xcb00, {0x4}}, 0x14}}, 0x0) 03:49:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xe00000000000000) 03:49:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000200004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2418.876255] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2418.898198] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:84KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x502, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2418.992190] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2419.020941] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2419.031434] Killed process 27103 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf00000000000000) 03:49:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf900, {0x4}}, 0x14}}, 0x0) [ 2419.089664] oom_reaper: reaped process 27103 (syz-executor.2), now anon-rss:0kB, file-rss:34496kB, shmem-rss:0kB [ 2419.110949] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2419.223132] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2419.259486] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2419.282098] CPU: 0 PID: 27140 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2419.290077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2419.299448] Call Trace: [ 2419.302057] dump_stack+0x188/0x20d [ 2419.305699] dump_header+0x159/0xa5e [ 2419.309429] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2419.314546] ? ___ratelimit+0x59/0x573 [ 2419.318448] oom_kill_process.cold+0x10/0x6dc [ 2419.322949] ? task_will_free_mem+0x134/0x6d0 [ 2419.327459] out_of_memory+0x349/0x1250 [ 2419.331451] ? oom_killer_disable+0x270/0x270 [ 2419.335964] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2419.340818] ? memcg_event_wake+0x210/0x210 [ 2419.345161] ? do_raw_spin_unlock+0x171/0x260 [ 2419.349688] try_charge+0xe22/0x1300 [ 2419.353421] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2419.359151] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2419.364012] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2419.370097] ? __lock_acquire+0x6ee/0x49c0 [ 2419.374344] mem_cgroup_try_charge+0x249/0x5c0 [ 2419.378955] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2419.383899] wp_page_copy+0x3fe/0x1530 [ 2419.387808] ? follow_pfn+0x260/0x260 [ 2419.391630] ? __lock_acquire+0x6ee/0x49c0 [ 2419.395893] do_wp_page+0x518/0xfa0 [ 2419.399547] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2419.404336] __handle_mm_fault+0x21a4/0x3b60 [ 2419.408789] ? copy_page_range+0x1e70/0x1e70 [ 2419.413262] ? count_memcg_event_mm+0x279/0x4c0 [ 2419.417974] handle_mm_fault+0x1a5/0x670 [ 2419.422065] __do_page_fault+0x5ed/0xdd0 [ 2419.426172] ? trace_hardirqs_off_caller+0x55/0x210 [ 2419.431208] ? vmalloc_fault+0x730/0x730 [ 2419.435291] ? page_fault+0x8/0x30 [ 2419.438840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2419.443784] ? page_fault+0x8/0x30 [ 2419.447330] page_fault+0x1e/0x30 [ 2419.450908] RIP: 0033:0x412858 [ 2419.454129] Code: 48 8b 05 43 d6 30 00 48 89 08 48 8b 15 41 d6 30 00 48 89 42 08 48 8b 05 26 d6 30 00 48 89 05 2f d6 30 00 49 8d 81 c0 02 00 00 <48> 89 05 41 fe 86 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 2419.473302] RSP: 002b:00007ffd584c5528 EFLAGS: 00010246 [ 2419.478681] RAX: 0000000001bfdc00 RBX: 00007ffd584c5530 RCX: 000000000071fe80 [ 2419.485969] RDX: 0000000000412690 RSI: 000000000071fe70 RDI: 0000000001bfdc20 [ 2419.493255] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2419.500546] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2419.508785] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2419.540426] Task in /syz2 killed as a result of limit of /syz2 [ 2419.546524] memory: usage 307152kB, limit 307200kB, failcnt 990 [ 2419.593545] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2419.617708] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2419.641807] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2419.723938] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2419.753809] Killed process 27140 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2419.777237] oom_reaper: reaped process 27140 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 03:49:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x600, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x1000000000000000) 03:49:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xfa00, {0x4}}, 0x14}}, 0x0) 03:49:30 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:49:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000300004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2419.916139] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2419.943806] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2419.943837] CPU: 1 PID: 27149 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2419.943844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2419.943849] Call Trace: [ 2419.943869] dump_stack+0x188/0x20d [ 2419.943888] dump_header+0x159/0xa5e [ 2419.943902] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2419.943917] ? ___ratelimit+0x59/0x573 [ 2419.986247] oom_kill_process.cold+0x10/0x6dc [ 2419.990833] ? task_will_free_mem+0x134/0x6d0 [ 2419.995364] out_of_memory+0x349/0x1250 [ 2419.999450] ? oom_killer_disable+0x270/0x270 [ 2420.003978] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2420.008852] ? memcg_event_wake+0x210/0x210 [ 2420.013202] ? do_raw_spin_unlock+0x171/0x260 [ 2420.017717] try_charge+0xe22/0x1300 [ 2420.021980] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2420.026845] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2420.031740] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2420.037823] ? __lock_acquire+0x6ee/0x49c0 [ 2420.042196] mem_cgroup_try_charge+0x249/0x5c0 [ 2420.046887] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2420.051835] wp_page_copy+0x3fe/0x1530 [ 2420.055744] ? follow_pfn+0x260/0x260 [ 2420.059557] ? __lock_acquire+0x6ee/0x49c0 [ 2420.063818] do_wp_page+0x518/0xfa0 [ 2420.067474] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2420.072347] __handle_mm_fault+0x21a4/0x3b60 [ 2420.076779] ? copy_page_range+0x1e70/0x1e70 [ 2420.081404] ? count_memcg_event_mm+0x279/0x4c0 [ 2420.086207] handle_mm_fault+0x1a5/0x670 [ 2420.090305] __do_page_fault+0x5ed/0xdd0 [ 2420.094393] ? trace_hardirqs_off_caller+0x55/0x210 [ 2420.099595] ? vmalloc_fault+0x730/0x730 [ 2420.103675] ? page_fault+0x8/0x30 [ 2420.107231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2420.112625] ? page_fault+0x8/0x30 [ 2420.116188] page_fault+0x1e/0x30 [ 2420.119650] RIP: 0033:0x433926 [ 2420.122851] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 20 06 72 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 38 85 00 85 c0 0f 84 [ 2420.142639] RSP: 002b:00007ffd584c51c0 EFLAGS: 00010206 [ 2420.148022] RAX: 00000000000205b1 RBX: 0000000000720620 RCX: 0000000000000121 [ 2420.155313] RDX: 0000000001bfe930 RSI: 0000000001bfea50 RDI: 0000000000000000 03:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2420.162598] RBP: 0000000000000121 R08: ffffffffffffffff R09: 0000000000000000 [ 2420.169880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000720678 [ 2420.177168] R13: 0000000000720678 R14: 0000000000000000 R15: 0000000000002710 03:49:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x602, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x2, 0x0) 03:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4b47, 0x0) [ 2420.328554] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2420.360645] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4b49, 0x0) [ 2420.398443] Task in /syz2 killed as a result of limit of /syz2 [ 2420.421955] memory: usage 307200kB, limit 307200kB, failcnt 1019 [ 2420.433549] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x3f00000000000000) [ 2420.451984] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2420.458696] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:96KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2420.521587] Memory cgroup out of memory: Kill process 27149 (syz-executor.2) score 1103 or sacrifice child [ 2420.546927] Killed process 27149 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x541b, 0x0) [ 2420.570735] oom_reaper: reaped process 27149 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000400004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xfb00, {0x4}}, 0x14}}, 0x0) 03:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5421, 0x0) [ 2420.691161] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2420.731883] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2420.742095] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2420.754185] CPU: 1 PID: 27182 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2420.762274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2420.771638] Call Trace: [ 2420.774328] dump_stack+0x188/0x20d [ 2420.777980] dump_header+0x159/0xa5e [ 2420.781713] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2420.786833] ? ___ratelimit+0x59/0x573 [ 2420.790747] oom_kill_process.cold+0x10/0x6dc [ 2420.795265] ? task_will_free_mem+0x134/0x6d0 [ 2420.799789] out_of_memory+0x349/0x1250 [ 2420.803789] ? oom_killer_disable+0x270/0x270 [ 2420.808312] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2420.813173] ? memcg_event_wake+0x210/0x210 [ 2420.817414] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2420.817508] ? do_raw_spin_unlock+0x171/0x260 [ 2420.830319] try_charge+0xe22/0x1300 [ 2420.834062] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2420.838933] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2420.843814] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2420.849899] ? __lock_acquire+0x6ee/0x49c0 [ 2420.854157] mem_cgroup_try_charge+0x249/0x5c0 [ 2420.858754] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2420.863693] wp_page_copy+0x3fe/0x1530 [ 2420.867600] ? follow_pfn+0x260/0x260 [ 2420.871404] ? __lock_acquire+0x6ee/0x49c0 [ 2420.875651] do_wp_page+0x518/0xfa0 [ 2420.879372] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2420.884314] __handle_mm_fault+0x21a4/0x3b60 [ 2420.888734] ? copy_page_range+0x1e70/0x1e70 [ 2420.893150] ? count_memcg_event_mm+0x279/0x4c0 [ 2420.897844] handle_mm_fault+0x1a5/0x670 [ 2420.901914] __do_page_fault+0x5ed/0xdd0 [ 2420.906163] ? trace_hardirqs_off_caller+0x55/0x210 [ 2420.911185] ? vmalloc_fault+0x730/0x730 [ 2420.915254] ? page_fault+0x8/0x30 [ 2420.918818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2420.923667] ? page_fault+0x8/0x30 [ 2420.927235] page_fault+0x1e/0x30 [ 2420.930710] RIP: 0033:0x45ae9b [ 2420.933914] Code: 25 20 06 00 00 b8 c0 71 41 00 48 89 15 2e db 82 00 48 85 c0 74 08 4c 89 cf e8 31 c3 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 ca 60 2c 00 00 00 00 00 48 c7 05 af 60 2c 00 00 00 00 00 [ 2420.952928] RSP: 002b:00007ffd584c5530 EFLAGS: 00010206 [ 2420.958302] RAX: 0000000000000000 RBX: 00007ffd584c5530 RCX: 00000000004171d3 [ 2420.966011] RDX: 0000051282aa1006 RSI: 0000000000000018 RDI: 0000000001bfdc20 [ 2420.973285] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 03:49:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x700, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x4000000000000000) [ 2420.980554] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2420.987827] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2421.022797] Task in /syz2 killed as a result of limit of /syz2 03:49:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000a00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5450, 0x0) [ 2421.049827] memory: usage 307196kB, limit 307200kB, failcnt 1054 03:49:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x6000000000000000) 03:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5451, 0x0) [ 2421.192707] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2421.240632] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2421.274924] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x801, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x6558000000000000) [ 2421.291906] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2421.322229] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5452, 0x0) 03:49:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000f00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2421.403622] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2421.431828] Killed process 27182 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xfc00, {0x4}}, 0x14}}, 0x0) [ 2421.455258] oom_reaper: reaped process 27182 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 03:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5460, 0x0) [ 2421.509147] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2421.531859] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2421.547977] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2421.565686] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2421.578250] CPU: 0 PID: 27219 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2421.586174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2421.595535] Call Trace: [ 2421.598139] dump_stack+0x188/0x20d [ 2421.601774] dump_header+0x159/0xa5e [ 2421.605494] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2421.610604] ? ___ratelimit+0x59/0x573 [ 2421.614513] oom_kill_process.cold+0x10/0x6dc [ 2421.619026] ? task_will_free_mem+0x134/0x6d0 [ 2421.623546] out_of_memory+0x349/0x1250 [ 2421.627681] ? oom_killer_disable+0x270/0x270 [ 2421.632204] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2421.637064] ? memcg_event_wake+0x210/0x210 [ 2421.641409] ? do_raw_spin_unlock+0x171/0x260 [ 2421.645918] try_charge+0xe22/0x1300 [ 2421.649656] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2421.654511] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2421.659365] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2421.665448] ? __lock_acquire+0x6ee/0x49c0 [ 2421.669715] mem_cgroup_try_charge+0x249/0x5c0 [ 2421.674315] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2421.679277] wp_page_copy+0x3fe/0x1530 [ 2421.683457] ? follow_pfn+0x260/0x260 [ 2421.687276] ? __lock_acquire+0x6ee/0x49c0 [ 2421.691545] do_wp_page+0x518/0xfa0 [ 2421.695196] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2421.699904] __handle_mm_fault+0x21a4/0x3b60 [ 2421.704340] ? copy_page_range+0x1e70/0x1e70 [ 2421.708797] ? count_memcg_event_mm+0x279/0x4c0 [ 2421.713497] handle_mm_fault+0x1a5/0x670 [ 2421.717588] __do_page_fault+0x5ed/0xdd0 [ 2421.721673] ? trace_hardirqs_off_caller+0x55/0x210 [ 2421.726708] ? vmalloc_fault+0x730/0x730 [ 2421.730785] ? page_fault+0x8/0x30 [ 2421.734354] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2421.739212] ? page_fault+0x8/0x30 [ 2421.742771] page_fault+0x1e/0x30 [ 2421.746241] RIP: 0033:0x45ae9b 03:49:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x8100000000000000) [ 2421.749445] Code: 25 20 06 00 00 b8 c0 71 41 00 48 89 15 2e db 82 00 48 85 c0 74 08 4c 89 cf e8 31 c3 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 ca 60 2c 00 00 00 00 00 48 c7 05 af 60 2c 00 00 00 00 00 [ 2421.768357] RSP: 002b:00007ffd584c5530 EFLAGS: 00010206 [ 2421.773821] RAX: 0000000000000000 RBX: 00007ffd584c5530 RCX: 00000000004171d3 [ 2421.781128] RDX: 00000512f58646df RSI: 0000000000000018 RDI: 0000000001bfdc20 [ 2421.788421] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2421.795709] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2421.802996] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 03:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae00, 0x0) 03:49:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000001000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2421.868152] Task in /syz2 killed as a result of limit of /syz2 [ 2421.874667] memory: usage 307196kB, limit 307200kB, failcnt 1073 [ 2421.881413] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2421.888357] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2421.895492] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0xe01, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae01, 0x0) [ 2421.934284] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2421.962428] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child 03:49:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x88a8ffff00000000) [ 2421.983502] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2421.995421] Killed process 27219 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xfd00, {0x4}}, 0x14}}, 0x0) [ 2422.029764] oom_reaper: reaped process 27219 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 03:49:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000001400004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae03, 0x0) [ 2422.122275] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2422.161768] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2422.178056] CPU: 0 PID: 27241 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2422.186001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2422.195364] Call Trace: [ 2422.197971] dump_stack+0x188/0x20d [ 2422.201628] dump_header+0x159/0xa5e [ 2422.205368] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2422.210483] ? ___ratelimit+0x59/0x573 [ 2422.214385] oom_kill_process.cold+0x10/0x6dc [ 2422.218913] ? task_will_free_mem+0x134/0x6d0 [ 2422.223439] out_of_memory+0x349/0x1250 [ 2422.227466] ? oom_killer_disable+0x270/0x270 [ 2422.231982] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2422.236858] ? memcg_event_wake+0x210/0x210 [ 2422.241214] ? do_raw_spin_unlock+0x171/0x260 [ 2422.245878] try_charge+0xe22/0x1300 [ 2422.249627] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2422.254600] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2422.259480] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2422.265577] ? __lock_acquire+0x6ee/0x49c0 [ 2422.270442] mem_cgroup_try_charge+0x249/0x5c0 [ 2422.275039] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2422.280000] wp_page_copy+0x3fe/0x1530 [ 2422.283926] ? follow_pfn+0x260/0x260 [ 2422.287756] ? __lock_acquire+0x6ee/0x49c0 [ 2422.292026] do_wp_page+0x518/0xfa0 [ 2422.295677] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2422.300374] __handle_mm_fault+0x21a4/0x3b60 [ 2422.304808] ? copy_page_range+0x1e70/0x1e70 [ 2422.309252] ? count_memcg_event_mm+0x279/0x4c0 [ 2422.313959] handle_mm_fault+0x1a5/0x670 [ 2422.318051] __do_page_fault+0x5ed/0xdd0 [ 2422.322139] ? trace_hardirqs_off_caller+0x55/0x210 [ 2422.327180] ? vmalloc_fault+0x730/0x730 [ 2422.331263] ? page_fault+0x8/0x30 [ 2422.334823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2422.339702] ? page_fault+0x8/0x30 [ 2422.343267] page_fault+0x1e/0x30 [ 2422.346736] RIP: 0033:0x412858 [ 2422.349941] Code: 48 8b 05 43 d6 30 00 48 89 08 48 8b 15 41 d6 30 00 48 89 42 08 48 8b 05 26 d6 30 00 48 89 05 2f d6 30 00 49 8d 81 c0 02 00 00 <48> 89 05 41 fe 86 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 2422.368852] RSP: 002b:00007ffd584c5528 EFLAGS: 00010246 03:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae04, 0x0) [ 2422.374240] RAX: 0000000001bfdc00 RBX: 00007ffd584c5530 RCX: 000000000071fe80 [ 2422.381524] RDX: 0000000000412690 RSI: 000000000071fe70 RDI: 0000000001bfdc20 [ 2422.388814] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2422.396105] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2422.403392] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2422.419563] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2422.431933] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2422.441450] Task in /syz2 killed as a result of limit of /syz2 [ 2422.454200] memory: usage 307200kB, limit 307200kB, failcnt 1094 [ 2422.471879] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae07, 0x0) [ 2422.484053] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2422.494496] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:72KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2422.517376] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2422.546379] Killed process 27241 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2422.577536] oom_reaper: reaped process 27241 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 03:49:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000002500004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae08, 0x0) 03:49:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x9effffff00000000) 03:49:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xfe00, {0x4}}, 0x14}}, 0x0) 03:49:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0xf00, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2422.692399] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2422.712232] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40049409, 0x0) [ 2422.744140] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2422.750328] CPU: 0 PID: 27261 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2422.758245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2422.767617] Call Trace: [ 2422.770252] dump_stack+0x188/0x20d [ 2422.773899] dump_header+0x159/0xa5e [ 2422.777631] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2422.782757] ? ___ratelimit+0x59/0x573 [ 2422.786679] oom_kill_process.cold+0x10/0x6dc [ 2422.791202] ? task_will_free_mem+0x134/0x6d0 [ 2422.795724] out_of_memory+0x349/0x1250 [ 2422.799723] ? oom_killer_disable+0x270/0x270 [ 2422.804251] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2422.809118] ? memcg_event_wake+0x210/0x210 [ 2422.813471] ? do_raw_spin_unlock+0x171/0x260 [ 2422.818160] try_charge+0xe22/0x1300 [ 2422.821904] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2422.826770] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2422.831641] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2422.837728] ? __lock_acquire+0x6ee/0x49c0 [ 2422.841991] mem_cgroup_try_charge+0x249/0x5c0 [ 2422.846602] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2422.851558] wp_page_copy+0x3fe/0x1530 [ 2422.855476] ? follow_pfn+0x260/0x260 [ 2422.859290] ? __lock_acquire+0x6ee/0x49c0 [ 2422.863550] do_wp_page+0x518/0xfa0 [ 2422.867196] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2422.871976] __handle_mm_fault+0x21a4/0x3b60 [ 2422.876410] ? copy_page_range+0x1e70/0x1e70 [ 2422.880840] ? count_memcg_event_mm+0x279/0x4c0 [ 2422.885550] handle_mm_fault+0x1a5/0x670 [ 2422.889635] __do_page_fault+0x5ed/0xdd0 [ 2422.893716] ? trace_hardirqs_off_caller+0x55/0x210 [ 2422.898751] ? vmalloc_fault+0x730/0x730 [ 2422.902830] ? page_fault+0x8/0x30 [ 2422.906394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2422.911254] ? page_fault+0x8/0x30 [ 2422.914804] page_fault+0x1e/0x30 [ 2422.918263] RIP: 0033:0x412858 [ 2422.921465] Code: 48 8b 05 43 d6 30 00 48 89 08 48 8b 15 41 d6 30 00 48 89 42 08 48 8b 05 26 d6 30 00 48 89 05 2f d6 30 00 49 8d 81 c0 02 00 00 <48> 89 05 41 fe 86 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 2422.940384] RSP: 002b:00007ffd584c5528 EFLAGS: 00010246 [ 2422.945755] RAX: 0000000001bfdc00 RBX: 00007ffd584c5530 RCX: 000000000071fe80 [ 2422.948770] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2422.953036] RDX: 0000000000412690 RSI: 000000000071fe70 RDI: 0000000001bfdc20 [ 2422.953045] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2422.953052] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2422.953059] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 03:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40086602, 0x0) 03:49:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xbe2f000000000000) 03:49:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0xf01, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40087602, 0x0) 03:49:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000005c00004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2423.281530] Task in /syz2 killed as a result of limit of /syz2 [ 2423.287690] memory: usage 307200kB, limit 307200kB, failcnt 1120 03:49:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xc00e000000000000) 03:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4008ae06, 0x0) [ 2423.320520] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2423.341980] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2423.382004] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2423.392551] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4020940d, 0x0) [ 2423.505253] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:72KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000008700004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2423.553076] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2423.592775] Killed process 27261 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xff00, {0x4}}, 0x14}}, 0x0) 03:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x80086601, 0x0) 03:49:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xf0ffffff00000000) [ 2423.674974] oom_reaper: reaped process 27261 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2423.705413] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x1001, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2423.759937] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x80087601, 0x0) [ 2423.814304] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 03:49:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xffffff7f00000000) [ 2423.889361] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2423.912600] CPU: 1 PID: 27305 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2423.920542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2423.929912] Call Trace: [ 2423.932518] dump_stack+0x188/0x20d [ 2423.936162] dump_header+0x159/0xa5e [ 2423.939891] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2423.945012] ? ___ratelimit+0x59/0x573 [ 2423.948929] oom_kill_process.cold+0x10/0x6dc [ 2423.953456] ? task_will_free_mem+0x134/0x6d0 [ 2423.957976] out_of_memory+0x349/0x1250 [ 2423.961973] ? oom_killer_disable+0x270/0x270 [ 2423.966504] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2423.971371] ? memcg_event_wake+0x210/0x210 [ 2423.975902] ? do_raw_spin_unlock+0x171/0x260 [ 2423.980424] try_charge+0xe22/0x1300 [ 2423.984175] ? find_held_lock+0x2d/0x110 [ 2423.988258] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2423.993129] ? lock_downgrade+0x740/0x740 [ 2423.997302] ? check_preemption_disabled+0x41/0x280 [ 2424.002350] memcg_kmem_charge_memcg+0x7b/0x150 [ 2424.007053] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2424.011686] ? should_fail+0x142/0x7bc [ 2424.015597] ? __lock_is_held+0xad/0x140 [ 2424.019688] ? __isolate_free_page+0x4c0/0x4c0 [ 2424.024303] memcg_kmem_charge+0x132/0x360 [ 2424.028578] __alloc_pages_nodemask+0x396/0x6a0 [ 2424.033273] ? should_fail+0x142/0x7bc [ 2424.037201] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2424.042257] alloc_pages_current+0xff/0x200 [ 2424.046609] pte_alloc_one+0x16/0x190 [ 2424.050437] __do_fault+0x2cd/0x470 [ 2424.054080] ? __pmd_alloc+0x35e/0x440 [ 2424.057987] __handle_mm_fault+0x28cb/0x3b60 [ 2424.062413] ? copy_page_range+0x1e70/0x1e70 [ 2424.066847] ? count_memcg_event_mm+0x279/0x4c0 [ 2424.071558] handle_mm_fault+0x1a5/0x670 [ 2424.075646] __do_page_fault+0x5ed/0xdd0 [ 2424.079732] ? trace_hardirqs_off_caller+0x55/0x210 [ 2424.084815] ? vmalloc_fault+0x730/0x730 [ 2424.088897] ? page_fault+0x8/0x30 [ 2424.092455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2424.097329] ? page_fault+0x8/0x30 [ 2424.100901] page_fault+0x1e/0x30 [ 2424.104379] RIP: 0033:0x403667 [ 2424.107591] Code: 00 00 00 48 83 ec 08 48 8b 15 35 f0 87 00 48 8b 05 26 f0 87 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 08 f0 87 00 48 83 c4 08 c3 48 89 c6 bf d8 f9 4c 00 [ 2424.126513] RSP: 002b:00007ffd584c53c0 EFLAGS: 00010287 [ 2424.131893] RAX: 0000001b2ff20000 RBX: 0000000000000000 RCX: 0000001b30f20000 03:49:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006703004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x8008ae9d, 0x0) [ 2424.139184] RDX: 0000001b2ff20004 RSI: 00007ffd584c5180 RDI: 0000000000000000 [ 2424.146557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 2424.153847] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 2424.161135] R13: 00007ffd584c55b0 R14: 0000000000000000 R15: 00007ffd584c55c0 03:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc0045878, 0x0) [ 2424.286682] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2424.328807] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0xfffffffffffff000) [ 2424.380583] Task in /syz2 killed as a result of limit of /syz2 [ 2424.386776] memory: usage 307200kB, limit 307200kB, failcnt 1158 03:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc0045878, 0x0) 03:49:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x1300, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) [ 2424.423838] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2424.464624] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2424.484930] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2424.723521] Memory cgroup out of memory: Kill process 27305 (syz-executor.2) score 1103 or sacrifice child [ 2424.753314] Killed process 27305 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2424.789484] oom_reaper: reaped process 27305 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e46, {0x4}}, 0x14}}, 0x0) 03:49:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000009203004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) 03:49:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x102, 0x2, {0x0, 0x2, 0x1000, 0x2}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x2}}}, 0x24}}, 0x0) 03:49:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x1700, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, 0x0) 03:49:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="a409e0ff000000000008000000000000c0c381fec6785910002ec5dae1adb83a0175a1dc51fe7885c7d6", @ANYRES32=r2, @ANYBLOB="000000000200000000000000"], 0x24}}, 0x0) [ 2424.919712] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2424.958147] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2424.995186] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2425.011115] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2425.021060] CPU: 0 PID: 27344 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2425.028986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2425.038346] Call Trace: [ 2425.040961] dump_stack+0x188/0x20d [ 2425.044609] dump_header+0x159/0xa5e [ 2425.048341] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2425.053459] ? ___ratelimit+0x59/0x573 [ 2425.057360] oom_kill_process.cold+0x10/0x6dc [ 2425.061877] ? task_will_free_mem+0x134/0x6d0 [ 2425.066392] out_of_memory+0x349/0x1250 [ 2425.070395] ? oom_killer_disable+0x270/0x270 [ 2425.074919] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2425.079783] ? memcg_event_wake+0x210/0x210 [ 2425.084122] ? do_raw_spin_unlock+0x171/0x260 [ 2425.088628] try_charge+0xe22/0x1300 [ 2425.092369] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2425.097222] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2425.102087] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2425.108165] ? __lock_acquire+0x6ee/0x49c0 [ 2425.112531] mem_cgroup_try_charge+0x249/0x5c0 [ 2425.117149] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2425.122115] wp_page_copy+0x3fe/0x1530 [ 2425.126041] ? follow_pfn+0x260/0x260 [ 2425.129858] ? __lock_acquire+0x6ee/0x49c0 [ 2425.134109] do_wp_page+0x518/0xfa0 [ 2425.137755] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2425.142455] __handle_mm_fault+0x21a4/0x3b60 [ 2425.146890] ? copy_page_range+0x1e70/0x1e70 [ 2425.151319] ? count_memcg_event_mm+0x279/0x4c0 [ 2425.156362] handle_mm_fault+0x1a5/0x670 [ 2425.160445] __do_page_fault+0x5ed/0xdd0 [ 2425.164530] ? trace_hardirqs_off_caller+0x55/0x210 [ 2425.169569] ? vmalloc_fault+0x730/0x730 [ 2425.173773] ? page_fault+0x8/0x30 [ 2425.177325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2425.182192] ? page_fault+0x8/0x30 [ 2425.185754] page_fault+0x1e/0x30 [ 2425.189213] RIP: 0033:0x412903 03:49:36 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRESHEX, @ANYRES64], @ANYBLOB="10002cbd7000fddbdf2504000000140006000000000000000000000000000000000014000500fc2515fbe578c386b0a25e74f1073206140006000000000000000000000000000000000114000500000000000000000000000000000000012e5a583d36fccdf795a233a8e1ce85932b36e22b48828d91015103f04f38e1fdba4a19efeb36475063733cd3b4fb0d42bfdd59a1fc0f7b2e5f2ce85d65e0977cb6c17329eb59a0296a233bfd26b3d97cc734561a22c4e9b3fb56f613f10932"], 0x3}, 0x1, 0x0, 0x0, 0x400c004}, 0x80) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r7, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(r5, 0x8, 0x0) r8 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x9) ioctl$DRM_IOCTL_RM_MAP(r8, 0x4028641b, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x7, 0x1, 0xa, &(0x7f0000ffd000/0x3000)=nil, 0x8}) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000200)=@req3={0x10000, 0xf34, 0x80000000, 0x8001, 0xe25e, 0xff}, 0x1c) [ 2425.192414] Code: 9b d5 30 00 48 89 05 8c d5 30 00 c7 05 a2 d5 30 00 01 00 00 00 48 c7 05 a7 fd 86 00 00 00 00 00 c7 05 a5 fd 86 00 00 00 00 00 05 d3 3d 87 00 00 00 00 00 c3 49 c7 81 c0 02 00 00 90 26 c8 00 [ 2425.199709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27351 comm=syz-executor.4 [ 2425.211324] RSP: 002b:00007ffd584c5528 EFLAGS: 00010202 [ 2425.211341] RAX: 0000000001bfdc00 RBX: 00007ffd584c5530 RCX: 0000000000c82690 [ 2425.211347] RDX: 0000000000000001 RSI: 000000000071fe70 RDI: 0000000001bfdc20 03:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae05, 0x0) [ 2425.211354] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2425.211361] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2425.211367] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2425.212026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57366 sclass=netlink_route_socket pig=27345 comm=syz-executor.1 [ 2425.248072] Task in /syz2 killed as a result of limit of /syz2 03:49:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000af03004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae88, 0x0) [ 2425.359465] memory: usage 307200kB, limit 307200kB, failcnt 1183 [ 2425.360904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27427 comm=syz-executor.4 [ 2425.365808] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:36 executing program 3: r0 = socket(0x10, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket(0x1f, 0x1, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x800013, 0x3c1520) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)) [ 2425.421048] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2425.427370] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:80KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2425.501811] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2425.523117] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2425.537258] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2425.548208] Killed process 27344 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2425.564834] oom_reaper: reaped process 27344 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 03:49:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e47, {0x4}}, 0x14}}, 0x0) 03:49:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x1800, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/145, 0x91}, {&(0x7f00000002c0)=""/97, 0x61}], 0x2, &(0x7f0000000380)=""/215, 0xd7}, 0x1}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000980)=""/101, 0x65}, {&(0x7f0000000a00)=""/136, 0x88}], 0x8}, 0x400}], 0x2, 0x0, &(0x7f0000000680)) bind(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x1, 0x4, 0x3, 0x2}}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) 03:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc0189436, 0x0) 03:49:36 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x400000000000000) 03:49:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000002b04004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc020660b, 0x0) 03:49:36 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) mq_unlink(&(0x7f0000000040)='selinux\x00') r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000380)=0x1010, 0x4) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000340)) r2 = syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0x0, 0x80200) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000002c0)={0x5d0d, 0x2, 0x1}) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x67, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="acd491d7203747ddda31f3892766e71616ae472b57b8e3ac262d0376576aeb94b530ae95a79df7d61741454302029796ef1120d895d1a28186c8a02b559417174cab08756e731cc3c6c7c48f34a2680d78e76a09a38f2679032612551ae6a86637bbf93fe44b7cf9e706d30bbb0253de91550d3e9a2e5cdf4e3415a16d6ae37df9a6e94854b93e247c0fd18cd4d2b1337db86b176e293fc74d9b343897bcd64fdbca442218f95750b467e1bf7699", 0xae, 0x800}], 0x800080, &(0x7f0000000240)='/dev/video#\x00') ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2425.693796] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2425.719322] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2425.749763] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2425.767710] CPU: 0 PID: 27576 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2425.775673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2425.785043] Call Trace: [ 2425.786733] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2425.787643] dump_stack+0x188/0x20d [ 2425.799504] dump_header+0x159/0xa5e [ 2425.803232] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2425.808340] ? ___ratelimit+0x59/0x573 [ 2425.812240] oom_kill_process.cold+0x10/0x6dc [ 2425.816749] ? task_will_free_mem+0x134/0x6d0 [ 2425.821259] out_of_memory+0x349/0x1250 [ 2425.825243] ? oom_killer_disable+0x270/0x270 [ 2425.829760] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2425.834624] ? memcg_event_wake+0x210/0x210 [ 2425.839076] ? do_raw_spin_unlock+0x171/0x260 [ 2425.843588] try_charge+0xe22/0x1300 [ 2425.847316] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2425.852184] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2425.857056] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2425.863146] ? __lock_acquire+0x6ee/0x49c0 [ 2425.867396] mem_cgroup_try_charge+0x249/0x5c0 [ 2425.872000] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2425.876970] wp_page_copy+0x3fe/0x1530 [ 2425.882023] ? follow_pfn+0x260/0x260 [ 2425.885836] ? __lock_acquire+0x6ee/0x49c0 [ 2425.890115] do_wp_page+0x518/0xfa0 [ 2425.893760] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2425.898453] __handle_mm_fault+0x21a4/0x3b60 [ 2425.902878] ? copy_page_range+0x1e70/0x1e70 [ 2425.907301] ? count_memcg_event_mm+0x279/0x4c0 [ 2425.912004] handle_mm_fault+0x1a5/0x670 [ 2425.916079] __do_page_fault+0x5ed/0xdd0 [ 2425.920163] ? trace_hardirqs_off_caller+0x55/0x210 [ 2425.925197] ? vmalloc_fault+0x730/0x730 [ 2425.929265] ? page_fault+0x8/0x30 [ 2425.932824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2425.937820] ? page_fault+0x8/0x30 [ 2425.941382] page_fault+0x1e/0x30 [ 2425.944853] RIP: 0033:0x45ae4e [ 2425.948048] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 f7 da 82 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 2425.966955] RSP: 002b:00007ffd584c5530 EFLAGS: 00010206 [ 2425.972327] RAX: 0000000000c88448 RBX: 00007ffd584c5530 RCX: 000000000045ae1a [ 2425.979603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2425.986887] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2425.994167] R10: 0000000001bfdc10 R11: 0000000000000246 R12: 0000000000000001 [ 2426.001451] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 03:49:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x1b00, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000005c04004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x400002) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000000c0)={0x26, 0x3, 0x0, {0x4, 0x5, 0x0, 'sit0\x00'}}, 0x26) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) [ 2426.043843] ceph: device name is missing path (no : separator in /dev/loop3) [ 2426.090040] Task in /syz2 killed as a result of limit of /syz2 [ 2426.096670] memory: usage 307200kB, limit 307200kB, failcnt 1208 [ 2426.104481] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2426.112747] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2426.150788] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:37 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2426.195737] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2426.210518] Killed process 27576 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2426.222192] oom_reaper: reaped process 27576 (syz-executor.2), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB 03:49:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e48, {0x4}}, 0x14}}, 0x0) [ 2426.245819] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2426.266397] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:37 executing program 0: r0 = getpgrp(0x0) r1 = getpid() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r3, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) kcmp(r0, r1, 0x0, r4, r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x341080, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc008ae09, 0x0) [ 2426.339184] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2426.404504] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2426.426448] CPU: 0 PID: 27706 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2426.434382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2426.444095] Call Trace: [ 2426.446702] dump_stack+0x188/0x20d [ 2426.450346] dump_header+0x159/0xa5e [ 2426.454085] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2426.459196] ? ___ratelimit+0x59/0x573 [ 2426.463101] oom_kill_process.cold+0x10/0x6dc [ 2426.467607] ? task_will_free_mem+0x134/0x6d0 [ 2426.472120] out_of_memory+0x349/0x1250 [ 2426.476114] ? oom_killer_disable+0x270/0x270 [ 2426.480629] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2426.485493] ? memcg_event_wake+0x210/0x210 [ 2426.489828] ? do_raw_spin_unlock+0x171/0x260 [ 2426.494334] try_charge+0xe22/0x1300 [ 2426.498060] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2426.502912] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2426.507767] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2426.513836] ? __lock_acquire+0x6ee/0x49c0 [ 2426.518084] mem_cgroup_try_charge+0x249/0x5c0 [ 2426.522684] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2426.527642] wp_page_copy+0x3fe/0x1530 [ 2426.531562] ? follow_pfn+0x260/0x260 [ 2426.535372] ? __lock_acquire+0x6ee/0x49c0 [ 2426.539631] do_wp_page+0x518/0xfa0 [ 2426.543276] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2426.547965] __handle_mm_fault+0x21a4/0x3b60 [ 2426.552387] ? copy_page_range+0x1e70/0x1e70 [ 2426.556804] ? count_memcg_event_mm+0x279/0x4c0 [ 2426.561499] handle_mm_fault+0x1a5/0x670 [ 2426.565573] __do_page_fault+0x5ed/0xdd0 [ 2426.570693] ? trace_hardirqs_off_caller+0x55/0x210 [ 2426.575726] ? vmalloc_fault+0x730/0x730 [ 2426.579796] ? page_fault+0x8/0x30 [ 2426.583347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2426.588198] ? page_fault+0x8/0x30 [ 2426.591745] page_fault+0x1e/0x30 [ 2426.595206] RIP: 0033:0x45ae9b [ 2426.598407] Code: 25 20 06 00 00 b8 c0 71 41 00 48 89 15 2e db 82 00 48 85 c0 74 08 4c 89 cf e8 31 c3 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 ca 60 2c 00 00 00 00 00 48 c7 05 af 60 2c 00 00 00 00 00 [ 2426.617327] RSP: 002b:00007ffd584c5530 EFLAGS: 00010206 [ 2426.622704] RAX: 0000000000000000 RBX: 00007ffd584c5530 RCX: 00000000004171d3 [ 2426.630497] RDX: 0000051588f6a7b4 RSI: 0000000000000018 RDI: 0000000001bfdc20 [ 2426.637775] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2426.645170] R10: 0000000001bfdc10 R11: 0000000000000202 R12: 0000000000000001 [ 2426.652448] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2426.662204] Task in /syz2 killed as a result of limit of /syz2 [ 2426.668493] memory: usage 307200kB, limit 307200kB, failcnt 1241 [ 2426.675933] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2426.683254] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x2000, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xb8}}, 0x0) 03:49:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000005d04004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2426.689892] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2426.709749] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2426.720788] Killed process 27706 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2426.732308] oom_reaper: reaped process 27706 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2426.732404] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 03:49:37 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100001000008c8, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x8001004, 0x1000}) 03:49:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x5, 0x80000001, 0x7a3d, 0x2, 0x8}) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x40) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000280)=ANY=[]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) connect(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x2, 0x4, 0x1, 0x2}}, 0x80) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000700)={{0x0, 0x0, 0x80}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/20) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) connect$l2tp(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x4}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000100)=0x1) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) [ 2426.754210] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2426.787966] CPU: 0 PID: 9796 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2426.795816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2426.805181] Call Trace: [ 2426.807782] dump_stack+0x188/0x20d [ 2426.811582] dump_header+0x159/0xa5e [ 2426.815314] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2426.820431] ? ___ratelimit+0x59/0x573 [ 2426.824334] oom_kill_process.cold+0x10/0x6dc [ 2426.828844] ? task_will_free_mem+0x134/0x6d0 [ 2426.833361] out_of_memory+0x349/0x1250 [ 2426.837359] ? oom_killer_disable+0x270/0x270 [ 2426.841873] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2426.846726] ? memcg_event_wake+0x210/0x210 [ 2426.851060] ? do_raw_spin_unlock+0x171/0x260 [ 2426.855653] try_charge+0xbdf/0x1300 [ 2426.859381] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2426.864239] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2426.869094] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2426.875163] ? __lock_acquire+0x6ee/0x49c0 [ 2426.879403] mem_cgroup_try_charge+0x249/0x5c0 [ 2426.883996] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2426.888936] wp_page_copy+0x3fe/0x1530 [ 2426.892838] ? follow_pfn+0x260/0x260 [ 2426.896665] ? __lock_acquire+0x6ee/0x49c0 [ 2426.900911] do_wp_page+0x518/0xfa0 [ 2426.904551] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2426.909229] __handle_mm_fault+0x21a4/0x3b60 [ 2426.913658] ? copy_page_range+0x1e70/0x1e70 [ 2426.918079] ? count_memcg_event_mm+0x279/0x4c0 [ 2426.922779] handle_mm_fault+0x1a5/0x670 [ 2426.926870] __do_page_fault+0x5ed/0xdd0 [ 2426.930956] ? trace_hardirqs_off_caller+0x55/0x210 [ 2426.936097] ? vmalloc_fault+0x730/0x730 [ 2426.940173] ? page_fault+0x8/0x30 [ 2426.943720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2426.948569] ? page_fault+0x8/0x30 [ 2426.952116] page_fault+0x1e/0x30 [ 2426.955572] RIP: 0033:0x45af7a [ 2426.958771] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 2426.977680] RSP: 002b:00007ffd584c5530 EFLAGS: 00010246 03:49:37 executing program 0: socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_TSC(0x1a, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2426.983048] RAX: 0000000000000000 RBX: 00007ffd584c5530 RCX: 000000000045ae1a [ 2426.990350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000c871c8 [ 2426.997639] RBP: 00007ffd584c5570 R08: 0000000000000001 R09: 0000000001bfd940 [ 2427.004928] R10: 0000000001bfdc10 R11: 0000000000000246 R12: 00000000000000ca [ 2427.012208] R13: 0000000000002893 R14: 0000000000000000 R15: 00007ffd584c55c0 [ 2427.036017] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCCONS(r2, 0x541d) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x7fff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000140)="c9b51a8827b2951c92361eea456f745e719bfc77689f56ed83a2a677a4737cffdf2917a9b03ffd4f0dd2c153fda61fe3ec8a75d64440b06ff127945517bb682a", 0x40, 0x8659}, {&(0x7f0000000180)="0d9c3eed6e5703eeae4c0edf8fc5af171bc23b18a2d67003311095739344fe3fc6082a43a8ff01469cc3b8c6befeaf20757df25020251bb7c4622a073c2ff68c009ba6d721df8d0299e9675bf91fed1f8a690ddeadb8185c86c2594ed6de67a907174b76849d7001e744432aa6f2ffc9cfb30c0d75cc498bfbe5009913060df9998820206ae69dfd7842fc071a3217587b53169746f01af545b629c58d917c47f678797965fe7dcb12c81ae84090a2864b111385c257ab3f272970f3a946ad1891cadf5c620e9a92ed34b848290c2dda196eb0465fb58a7beecb24612eb1", 0xde, 0xfffffffffffffffa}, {&(0x7f0000000280)="843c0805f5ce3441726cdd681fe77d2d39a2253a0b1b9eea46a39d6f5d8c14ba6ab72ca6f6e8bdcea77b89247c047d7a243b09ee6fd31b3970b1b7abd5f966539aa4bcddad0f205503b0d26309850a7fa19f2bc486b6657a02146ff0ca88", 0x5e, 0x4}, {&(0x7f0000000300)="e12c666c14118d4e9aad1eabc56ddd561afcc85ed18c015ea56b0b4042e817338cda77d0d2346fef8b110eac7e958e8c9722b20fe7278964dfc30b90c1b2fdb16d50c2621ffc48114082bb117944e17ac9ca5fbe64345f2e56c146f0d876c2e158ff3888cbd29e3cac32fba012ab62ab20b22085bfc216db466838cc4fcfdd35de8722849b1abdd308e57435110eb9a15c0e5d81ae4fa8739f9ddf1d7bd3f0e64a7ba9d02f9c0cde0083ee3c1ba8c8d53e54becc970fde9a", 0xb8, 0x5}], 0x820002, &(0x7f0000000440)={[{@discard='discard'}], [{@subj_type={'subj_type', 0x3d, '+securitykeyring}-vmnet0:vmnet1\\\'/vmnet1wlan1^,em0.'}}, {@smackfsdef={'smackfsdef', 0x3d, 'sit0\x00'}}, {@smackfsdef={'smackfsdef'}}, {@appraise='appraise'}, {@context={'context', 0x3d, 'system_u'}}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xb, 0x40040) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000000)) [ 2427.089296] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) 03:49:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000005e04004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2427.253505] Task in /syz2 killed as a result of limit of /syz2 03:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x10000]}, &(0x7f0000000080), &(0x7f0000000100), 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2427.299183] memory: usage 307040kB, limit 307200kB, failcnt 1242 03:49:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffe200005566736300000000080a020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r8, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newchain={0x4c, 0x64, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x5}, {0x4, 0x3}, {0x9, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9c}}]}, 0x4c}}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r9, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205649, &(0x7f0000000140)={0x9d0000, 0x6, 0x1000, r1, 0x0, &(0x7f0000000100)={0x990a92, 0x400, [], @string=&(0x7f0000000000)=0x2}}) setsockopt$inet_dccp_int(r10, 0x21, 0x4, &(0x7f0000000180)=0x8000, 0x4) [ 2427.372062] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2427.382592] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2427.401974] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2427.413473] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2427.427182] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2427.479362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2427.479494] Memory cgroup out of memory: Kill process 9796 (syz-executor.2) score 117 or sacrifice child [ 2427.513646] Killed process 9796 (syz-executor.2) total-vm:74568kB, anon-rss:100kB, file-rss:35752kB, shmem-rss:0kB [ 2427.533113] oom_reaper: reaped process 9796 (syz-executor.2), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 2427.574300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 03:49:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e49, {0x4}}, 0x14}}, 0x0) 03:49:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x3}]]}}}]}, 0xb8}}, 0x0) 03:49:38 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r0) keyctl$assume_authority(0x10, r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0x7, "2ca56ab22af3a5d8d7ebfba981232fdb6f79ddcdfa76f595718913f6f0c8dda3", 0x3, 0x10f0f610, 0x3, 0x2, 0x2}) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0285629, &(0x7f0000000040)=0x3) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000002c0)={0x8001000, 0x2, 0x3}) r5 = socket(0x21, 0x800, 0x32) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000480)={0x9d0000, 0x3, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x6, [], @string=&(0x7f0000000400)=0x5}}) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r6 = dup(r2) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000040)={0x0, &(0x7f00000000c0)="c7d1d8b696db5eb3988a125548424d554b95d2d285641ada8404dec35524dc04ee9c474f63baa21f321f10beab62ab3d74e9b87f48ce413edc0fd9a3779ad011b73766e28fe21e15c149a3fc8856ee8d5112b1ea5473ce245013b1c4c735cf7748e5941b1e233bdd3def8271ae530ac1bb8e25b5fc01663fb990b7d46232fcb573dbf8f1c7a8158644fe", 0x8a}) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x109000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r7, 0x40086408, &(0x7f0000000300)={0x3f, 0x2}) 03:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:49:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000005f04004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) fstatfs(r0, &(0x7f0000000700)=""/4096) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x2, 0xac9a}, 0xc) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/64, 0x40}], 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0600f367dd440000f0daab1a0cb585c6fc6843122a00270df0639b150000000000000000", @ANYRES32=r3, @ANYBLOB="000000000200000000000000"], 0x24}}, 0x0) 03:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) write$FUSE_LK(r2, &(0x7f0000000140)={0x28, 0xfffffffffffffff5, 0x5, {{0xc000000, 0x3, 0x1, r3}}}, 0x28) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000040)=0x8000) [ 2427.738094] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2427.770883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17629 sclass=netlink_route_socket pig=27964 comm=syz-executor.4 03:49:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x0, [], [{0x753fd373, 0x1000, 0x8, 0x81, 0x1, 0x8}, {0xffffff12, 0x8, 0x9, 0x2, 0xe108, 0x7}], [[], [], [], [], [], [], []]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x26200) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1b, 0x400, 0x70bd27, 0x25dfdbff, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) [ 2427.814420] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2427.842298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17629 sclass=netlink_route_socket pig=28034 comm=syz-executor.4 03:49:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) 03:49:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e4a, {0x4}}, 0x14}}, 0x0) 03:49:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006004004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2428.060963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:39 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) 03:49:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) 03:49:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x5}]]}}}]}, 0xb8}}, 0x0) [ 2428.191463] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:39 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x5, @raw_data="71288342b95bfa35dc8a3826170dc7684cfa746cff6ec05bc16aca54378a1e2f726d3fffff9a103926f334314460f5af0ce02e2505070eeb0b1a43a598ab72bf4e380592fbef13fbcd13426feca8bcfff534cbb7608b02ace7acfcad42e03c52e8f9be9a2845e725d8c17ce97b99af5f67e2f0ccc2226c3d325fe311738680b19cb7d3a9bd8816f3bbf7cf6ac5e6b48d0575ca23a34c7d4c1fbb8a57ad334db2471ffab7a4d3516bcae5473d3e4b7151a0a2b6c0784c047ee989f4f0ea496b4bcd7673cc984274a9"}) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b28f57c336"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "0983b5be82940d697baf96689d53"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c1475378adffcabe54f59c266d"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3369a9de2871"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4d}, 0x20000040) [ 2428.257734] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r1) r2 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r2, 0x3b}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha1-avx2\x00'}}, &(0x7f00000001c0)="8fa4cb7290fce28c252081fde072a6eb55c9dbe64098597883d133743790bfb97fd48cbb4be3f53197d9ada6b5739f33ff78d0768ebe3659414201", &(0x7f0000000200)) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:49:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006104004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2428.397930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28192 comm=syz-executor.3 [ 2428.495325] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:39 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005070000000000000000000000008314dccdb94c1a52ffb06ea7c3794e01f4ab2f", @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r9, {0x60}, {0x0, 0xfff1}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) [ 2428.546708] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:39 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001004}) [ 2428.612653] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 03:49:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006204004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2428.713752] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2428.752291] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x6}]]}}}]}, 0xb8}}, 0x0) [ 2428.817362] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2428.844765] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2429.156624] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2431.033745] audit: type=1400 audit(2000000981.941:910): avc: denied { map } for pid=28418 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1101 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 2431.149039] IPVS: ftp: loaded support on port[0] = 21 [ 2431.640300] chnl_net:caif_netlink_parms(): no params data found [ 2431.978469] bridge0: port 1(bridge_slave_0) entered blocking state [ 2431.990954] bridge0: port 1(bridge_slave_0) entered disabled state [ 2432.001120] device bridge_slave_0 entered promiscuous mode [ 2432.064489] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.070979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2432.087368] device bridge_slave_1 entered promiscuous mode [ 2432.188931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2432.250855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2432.351875] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2432.370756] team0: Port device team_slave_0 added [ 2432.432413] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2432.451664] team0: Port device team_slave_1 added [ 2432.537106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2432.550894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2432.583938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2432.660041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2432.666331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2432.706544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2432.777926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2432.796556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2432.939907] device hsr_slave_0 entered promiscuous mode [ 2432.994430] device hsr_slave_1 entered promiscuous mode [ 2433.078764] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2433.095171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2433.625674] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2433.927093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2434.008793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2434.024745] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2434.039548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2434.050224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2434.116614] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2434.127474] 8021q: adding VLAN 0 to HW filter on device team0 [ 2434.149847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2434.159826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2434.176417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2434.190107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2434.196592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2434.284267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2434.292468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2434.301915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2434.320373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2434.336949] bridge0: port 2(bridge_slave_1) entered blocking state [ 2434.343400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2434.403380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2434.419722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2434.451804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2434.499745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2434.524085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2434.542893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2434.562193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2434.632734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2434.640855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2434.658162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2434.677406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2434.693946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2434.761651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2434.779429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2434.804229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2434.861343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2434.877310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2434.893913] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2434.908674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2435.027761] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2435.097085] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2435.111087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2435.118896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2435.203834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2435.248784] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2435.329133] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 2435.338247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2435.354884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2435.538084] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2435.557152] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2435.573248] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2435.654733] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 2435.662496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2435.681465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2435.743862] device veth0_vlan entered promiscuous mode [ 2435.769197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2435.787771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2435.874300] device veth1_vlan entered promiscuous mode [ 2435.983168] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2436.076017] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 2436.084454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2436.101869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2436.167470] device veth0_macvtap entered promiscuous mode [ 2436.181777] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2436.252994] device veth1_macvtap entered promiscuous mode [ 2436.266529] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 2436.292311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2436.357729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2436.372374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2436.389227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.398863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2436.416747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.427433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2436.442967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.456620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2436.469531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.482779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2436.497549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.509331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2436.524555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.540998] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 2436.553843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2436.608076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2436.625746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2436.649042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2436.666246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2436.686618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2436.704566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.727456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2436.740422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.754132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2436.770738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.781640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2436.804101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.813529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2436.832489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.842933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2436.860335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2436.882601] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2436.891246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2436.960234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2436.977758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:49:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e4b, {0x4}}, 0x14}}, 0x0) 03:49:48 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x5, 0x3}) 03:49:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006304004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="00000000000000000400f1ff0c0001007463696e646578000c0002000600020000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r7, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003000)=@newtfilter={0x3b28, 0x2a, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x2}, {0x0, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xd44, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xd44f}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0xc70, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xfffffeff, 0x9789, 0x8, 0x67, 0x9, 0x9b, 0x3, 0x3, 0x5, 0x1, 0x8, 0x5a28d7cf, 0x7fffffff, 0xfffffc00, 0x8ef, 0x5, 0x3, 0x100, 0x401, 0x2, 0x9, 0xeca000, 0x5, 0x0, 0x7fffffff, 0x9, 0xfffffffe, 0x8, 0x4, 0xe1, 0xb3, 0x0, 0x100, 0x1f, 0x3f, 0x7, 0x68000000, 0x8, 0x10001, 0x8000, 0xffff, 0x20, 0x8, 0xfe38, 0x10000, 0x8000, 0x8, 0x5, 0x401, 0xfffffff9, 0x7, 0x7f6, 0x0, 0x3, 0x10000, 0x7ff, 0x9, 0x0, 0x1, 0x8000, 0x7ff, 0xe168, 0x1000, 0x213e, 0x7, 0x8, 0x8000, 0x7, 0x6, 0x2, 0x80, 0x8001, 0x8, 0x3f000000, 0x1, 0x1, 0xfffffffb, 0x101, 0x7, 0x6d6b, 0x2, 0x1000, 0x20, 0xffffff01, 0x5e92, 0x9, 0x4, 0x7f, 0x8, 0xa2c1, 0x7, 0x5, 0x10001, 0x4, 0x5, 0x99, 0x1f, 0x88, 0x3, 0x8001, 0x400, 0x80000001, 0x4, 0x3ff, 0x5659, 0x8cd0, 0x6, 0x400, 0x7fffffff, 0x8, 0xffffffff, 0x0, 0x400, 0xf7d6, 0xff, 0x20, 0x3, 0x8001, 0x7815, 0x7, 0x80000000, 0x4, 0x3, 0x2e7e, 0x32b, 0x0, 0x7fffffff, 0x5, 0x1, 0xfff, 0xef, 0xc51, 0x100, 0x200, 0x3, 0x0, 0x4, 0x71, 0x7, 0x6, 0xc, 0x1000, 0x85cf, 0x9a1, 0x8, 0x2, 0xfa1e, 0x5, 0x6569, 0x5, 0x2, 0x3, 0x0, 0x349c, 0x8001, 0x1ff, 0xac4f, 0x3ff, 0xc068, 0x5, 0x9, 0x1, 0x1f, 0xa25, 0x8, 0xffff, 0x8, 0x57a, 0x7, 0x81, 0x20, 0x4, 0x2, 0x6, 0xfffffbff, 0x40, 0x0, 0xf24, 0x80, 0x8, 0x7f, 0x5, 0x3, 0x4, 0x2, 0x9, 0x4a96, 0x8, 0x3962f7ee, 0x1, 0x80, 0x80, 0x8ed3, 0xa7, 0x200, 0x5, 0x40, 0x6, 0x1000, 0x5907, 0x4808, 0x7fff, 0x848b, 0x1, 0x8, 0x0, 0x9, 0xffffffff, 0x200, 0x6, 0x3c, 0x8000, 0x854, 0x10001, 0x4, 0x8, 0xc89e, 0x200, 0x7fff, 0x2, 0x7f, 0x9, 0x0, 0x84d, 0x10001, 0x9, 0x3, 0x0, 0x8, 0x10001, 0x3, 0x2, 0x5, 0x7ff, 0x6, 0x1000, 0x2, 0x9, 0x7, 0x7b, 0x5731, 0x80000001, 0x400, 0xa87, 0x9, 0x4, 0x401, 0x3, 0x8, 0xaa, 0x200, 0x4, 0xf3, 0x7, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0xffffffff, 0x401, 0x6, {0x9, 0x2, 0x8, 0x7, 0x5, 0x8}, {0x20, 0x1, 0x3, 0x0, 0x32, 0x101}, 0x7f, 0x9, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xff, 0x3, 0x9, 0x1000, 0xfffff2bb, 0x3, 0x8, 0x3, 0x14, 0x4, 0x1ff, 0x8, 0xffffffea, 0xefac, 0x7fff, 0x1, 0x2, 0x400, 0x6e7, 0xffff, 0x4, 0x7ff, 0x2881, 0x2, 0x4, 0x5, 0x3, 0x8, 0x3, 0x0, 0x1000, 0xfffffff9, 0x80000001, 0xf2, 0x101, 0x4, 0x1f, 0xd0, 0x230, 0x4000, 0x8370, 0x1, 0x1, 0x3, 0x4, 0x3490, 0x5, 0x5800, 0x3ff, 0x3ff, 0x80000000, 0xffff8001, 0xd26e, 0x4, 0x1f, 0x8, 0x8, 0x0, 0x2, 0x4, 0x2, 0xe764, 0x80, 0x767b, 0x2, 0xff, 0x0, 0xb9ba, 0x800, 0x8, 0x3f, 0x5, 0x40, 0xbf1b, 0xe1, 0x8, 0xfffffff7, 0x9d, 0x8, 0x0, 0x4, 0x6cf, 0xcf9, 0x10001, 0x1ff, 0x8, 0x401, 0x7, 0xab, 0x1, 0x3ff, 0x8c, 0x2, 0x1, 0x400, 0xb216, 0x5, 0x9, 0x100, 0x7, 0xd9, 0x7b88, 0x5, 0x1, 0x81, 0x3800000, 0x42ef, 0x2, 0x7, 0x3, 0x0, 0x932, 0x0, 0x6, 0x9b1d, 0x6, 0x20, 0x3, 0x7, 0x3, 0x7, 0x475d4fc4, 0x8, 0x6, 0x101, 0x10000, 0x8, 0x101, 0x9, 0x1, 0x5, 0x3, 0x20, 0x1f, 0x9, 0x9, 0xb70, 0x200, 0x5, 0x2, 0x4cd, 0x0, 0x3ff, 0xffff, 0x4, 0xffffffff, 0x86b9, 0x55, 0xff, 0x1ff, 0x0, 0x0, 0xac98, 0x1, 0x1000, 0x3, 0x970, 0x10000, 0x7, 0x2, 0x4, 0x79cf, 0x8, 0x0, 0x8000, 0x7fff, 0x9, 0x4, 0x0, 0x8, 0x7ff, 0x0, 0x7, 0x4, 0x23515ea5, 0x85, 0x9, 0x3, 0x8, 0x3, 0x1f, 0xffff, 0x3f83, 0x2, 0xff, 0x6ea, 0x6, 0x7, 0x4, 0x8, 0xb179, 0x6, 0x5, 0x2, 0x8, 0x66a9, 0x8001, 0x2, 0x8ad9, 0x5, 0x7, 0x4, 0x3ff, 0x1f, 0xff, 0x3, 0x9, 0x0, 0x189f, 0x2, 0x4, 0x1000, 0x8, 0x4, 0x8, 0x3, 0x4, 0x7, 0x0, 0x80000001, 0x2, 0x8, 0x5, 0x8, 0x8, 0x8, 0xa7, 0x43, 0x2, 0x2, 0x8, 0x2, 0x8, 0x9, 0x5, 0x40, 0x8d9, 0x400, 0x9, 0x9, 0x200, 0x2, 0x1, 0xffffff16, 0x4, 0x3, 0x80000001, 0x5267, 0x3, 0x3, 0x3, 0x1, 0x2, 0x2, 0x800]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x800, 0x6, 0x800, 0x3, 0xff, 0x5, 0xff, 0x4b95, 0x2, 0x9, 0x300e, 0x7, 0xff, 0xfffffffb, 0x80000000, 0xfffffff8, 0x5, 0xffffffff, 0x10000, 0xffffffff, 0x6, 0xce7, 0xb71d, 0x4, 0x7, 0x10000, 0x345, 0xfffff898, 0x1, 0x1, 0xc09, 0x401, 0x8001, 0x0, 0x1, 0x5, 0x4, 0x4, 0x8000, 0x6, 0x2, 0x80000000, 0x2, 0x2, 0xfff, 0x3, 0x6, 0x4, 0x3, 0x5, 0x6, 0x3, 0x5, 0x3f, 0xffffcc1a, 0x8, 0x9, 0x73a4, 0x100, 0x1, 0x6, 0x200, 0x57, 0xffffff21, 0x4, 0x1f, 0x1, 0xffffffff, 0x2, 0xb55, 0x1000, 0x9, 0x821, 0xb73, 0x64f, 0x29, 0x9, 0xfd5, 0xfc000000, 0x5, 0x3, 0x6, 0x3, 0x2, 0x0, 0x7, 0x4, 0x101, 0xd4, 0xfffffffd, 0x800, 0xcd13, 0x0, 0x28000000, 0x3f, 0x4, 0xaf, 0x7f, 0x7fff, 0x1e, 0x56d, 0x1f, 0x4, 0x800, 0x1, 0xb554, 0x595, 0xffff, 0x9de5, 0x40000000, 0x9, 0xa2, 0xff, 0xffffffff, 0x80, 0xffffcb28, 0x7, 0x200, 0x0, 0xffffffff, 0x101, 0x8, 0xff, 0x8001, 0x6, 0x401, 0x3ea1, 0x4, 0x4, 0x2, 0x6, 0xf73d, 0x4, 0x4, 0xffff, 0x8, 0x0, 0x2, 0x8, 0x1b, 0xd52, 0x1429, 0x5, 0x9, 0x3340, 0x10, 0x3, 0x1000, 0x2, 0x5, 0x0, 0x959, 0x401, 0x8, 0x11320907, 0x400, 0x7fff, 0x9, 0x8, 0x8, 0x80, 0x1, 0x9, 0x3, 0x7ff, 0x10000, 0x1, 0x2, 0x2d8e, 0x1, 0x2, 0x7, 0x7fffffff, 0x5, 0x0, 0xffff5ec7, 0x8, 0xffffffff, 0x843, 0x4, 0x4, 0x92, 0x6, 0x2, 0x200, 0x1, 0x7, 0x8, 0x80, 0x101, 0x9, 0x0, 0x3ff, 0xff, 0x6, 0x8, 0xfffffff7, 0x5, 0x5c, 0x64, 0x4, 0x7fff, 0x6, 0x68e, 0x7fffffff, 0xffffffff, 0x3, 0x9, 0xaffe, 0xd1e, 0x0, 0x2ea1, 0xedbe, 0xfff, 0xc5, 0x5, 0xf2, 0x7, 0x8, 0x6, 0x7, 0x9, 0x4, 0x101, 0x7, 0x100000, 0x3, 0xff, 0xf9, 0x9, 0x1, 0x2, 0x5, 0x118, 0x30af, 0xffff, 0x8f72, 0x9, 0x5, 0x3, 0x80000000, 0x2, 0x4, 0x6d25, 0x7, 0x7fff, 0x2e95, 0x1, 0x1, 0x2, 0x1b, 0x3, 0xffffffff, 0x5, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_TCINDEX_ACT={0xc0, 0x7, [@m_vlan={0xbc, 0x20, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xa0, 0x6, "17d3469ff21ccf1f6c1a1008f7f090be14daa30a4c40d59c6e090655353e0b2fdc12c8cb1b6c2f66d13458727aff1faf5ac06c50eb1cc1a1f26de1e7db599a716e4264e70e7643f9a4bdc86fd57a129769d88f84c4e34441c8c023884c7e8989b90040ae1a7cd0035ab3257f05c131788b4a1daca50790eb99f69d406e19829fc2300edfa119a4bfe4a46c57c9b1f0aea6b20b8a4f171d97071a4347"}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd7, 0x2}}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x2d98, 0x2, [@TCA_CGROUP_POLICE={0x50, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x20000000, 0x9, 0xcfef, 0x1, {0x40, 0x1, 0x4000, 0x5, 0x1, 0x7fffffff}, {0x9, 0x1, 0x1ff, 0x800, 0x955a, 0x8}, 0x2dec, 0x6, 0x8}}]}, @TCA_CGROUP_EMATCHES={0x314, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x308, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff, 0x8, 0x2e}, {0x0, 0x4, 0x4}}}, @TCF_EM_IPT={0x98, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x7c, 0x5, "9b16752a5ae0446544186d900ff4548e823855b4b372f9cc0bb2333e0c3c99e9a6d633fab8564a5a74eb204c37c22022ac8689e8c85fde69d9e0f36094103ca9146d3e8281ee082d168869f419e05008fa3275794813d3e8a02a8ce699e9cd34793b542bde3ba5021432dac74d46ef90067cff7fd220fa9b"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_IPT={0x25c, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xd6, 0x5, "70ef84ee4b126f1123525e36d510e902483350fd8b8a6bd24052cc4c91ed520b9f38e36ab0906993518878d8808f8066a3fe2ec3ad0dea2210a86c128740c8a8686bcc6051700244c35af2db5f2f7ff2b7450f1bc007680e1e15da9abd3d7f5ab7f21a04cdb2c3a2f749103402a9ff09580e679778d2cde4abc95759458ead671e93aef38ac88d6ec00e67d0ffc4c52a49cc6ccc36328bd1a206471bc7f92c8ad5899b315053da3a5822e015557d167119c34cdda07d7d0a293b78ab691ba37ea1909da35f43d5189672d9dd643498624985"}, @TCA_EM_IPT_MATCH_DATA={0x5d, 0x5, "ae25dab147634d177faa68584db083902bee2536ebbd0fa902160307ae823edf9da1988e7d1526aa5b424ee859796ca38fa599879957d650a8afbdec4f052b33bb41f6917c5ee62daf2ec40f6302ded39f55617a062dc2ae45"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa0}, @TCA_EM_IPT_MATCH_DATA={0xe0, 0x5, "ccebadee179d88dad665e90aca1ed79af9f87313f73dcfb39010a792584628a4c8a2960289a600c69c7bacf34048341a4d752f54d46f0807fe844839e52c03c349fa837b321b905100ab052c5525c69dfd449d351a791f378688d9ae82677d9c1e9fba32b936d3ac3fbfb7dd6e56e4b5ce017669c16b4a4c766e978ed2cb258cbd19e953b1bb1765d46151404e9d37f8daf7174b64214f5993fb8aeabe802aa863e51d47d0aeeebe6284c6b4a1d0996db3966fd61978a90b3e2d301e3288f216eaeba8d90f2479876ecc07b86a528997e851fc8c5433f1d595298d15"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}, @TCA_CGROUP_ACT={0x2790, 0x1, [@m_simple={0x78, 0x17, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, ',-ppp1bdev\xf6\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'tcindex\x00'}]}, {0x48, 0x6, "0be2241a8f2ee966219195a17a79a1532d02d5caf9cc122e68feffdf801785fd0599e825f881df7e14c99f892b3186f7086e9d43c4fc6487ebced5bd9192fe4fb49f79dd"}}}, @m_police={0x258c, 0xc, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x256c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x9, 0xd7, 0xfff, 0x0, 0x523, 0x508, 0x8, 0x200, 0x3, 0x2, 0x2, 0x9, 0x7bc6f8a5, 0xce, 0x6, 0x82, 0x341, 0x3, 0x1ff, 0x3, 0x1ff, 0x2, 0x1, 0x3, 0x3, 0x7, 0x6, 0x3, 0x5aa, 0x3, 0xf631, 0x8, 0x6, 0x10000, 0x0, 0x3, 0x3, 0xab, 0x8000, 0x6, 0x1, 0x3f, 0x4b6, 0x1, 0x0, 0xff, 0x0, 0x80000000, 0x4, 0x400, 0x2, 0x3, 0x39, 0xf9, 0x3, 0x1, 0x1, 0x1f, 0x4, 0x6, 0x6, 0xf8, 0x65c21202, 0x7, 0x6, 0x187, 0x9bc6, 0x0, 0x4, 0x4, 0x4, 0x101, 0x0, 0xffffffff, 0x7ff, 0x10001, 0x7, 0x8, 0x7, 0x9a, 0x9, 0x7fff, 0x9, 0x492, 0x4, 0x800, 0x20, 0x3f, 0xb990, 0x3, 0x68cfe110, 0x80000000, 0x1, 0x645b, 0xef, 0x9, 0x1, 0x10001, 0xf2d, 0x7, 0xffffff7f, 0x300000, 0x2, 0xffffffff, 0x5, 0xfffffffc, 0x1, 0x69d4, 0x1, 0x90e, 0xffffff01, 0x0, 0x9, 0x3, 0x4, 0x144, 0x7fff, 0x76, 0x2, 0x9, 0x7fff, 0xad1, 0x1, 0xb0, 0x3, 0x0, 0x1, 0x80000001, 0x8, 0x1, 0x7, 0x5, 0x1, 0xebc5, 0x7, 0x6, 0xd0, 0xffffffff, 0x8, 0x0, 0x0, 0x80, 0x800, 0x800, 0x3, 0x2, 0x3721, 0x9, 0xee00, 0x100, 0x9ee, 0x4, 0xffffffff, 0x7ef0, 0x3ff, 0x0, 0x9, 0x5, 0x2, 0x400, 0x8000, 0x80000001, 0x8, 0x8000, 0x0, 0x101, 0x4, 0x9, 0x4, 0x7, 0xfff, 0x1000, 0x2, 0x1, 0x5, 0x5, 0x6, 0x9, 0x7ff, 0x1, 0x2, 0xffff7fff, 0xffffffff, 0x5, 0x1, 0x1f, 0x0, 0x7f, 0xfff, 0x7fffffff, 0x1000, 0xf009, 0x4, 0x3a, 0x1, 0x3, 0x6, 0x10000, 0x9, 0x9, 0x2, 0x4, 0x200, 0x100, 0x65d0, 0x400, 0x8, 0x6, 0x7, 0x5, 0x10000, 0x80000000, 0x101, 0x7, 0x5, 0x0, 0x0, 0x7, 0x9, 0xda, 0x73, 0x7fff, 0x8, 0x9, 0x9, 0x80000000, 0x7f, 0x3, 0x7, 0x7f, 0x9, 0x20, 0xef9a, 0x5, 0x9, 0x6, 0x5, 0xfffffffe, 0xffff, 0x7ff, 0x9, 0x0, 0x20, 0x7fff, 0x8, 0x8, 0xfffffe3e, 0x80000, 0xdf, 0x3f, 0x9, 0x7fffffff, 0x1db2, 0x5e]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x6, 0x8c, 0x1, 0x7, 0x9, 0x80, 0x1000, 0x4, 0x1, 0x7ff, 0x8, 0x9, 0x6fc75f09, 0x10001, 0x9, 0x1f, 0x800, 0x80, 0xfa48, 0x5, 0x7ff, 0x9, 0x1, 0x8, 0x0, 0xfffffffb, 0x1, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x400, 0x58, 0x0, 0x37d, 0x8, 0x8000, 0x9, 0x800, 0x3a4c21fc, 0x28b, 0x1, 0x400, 0x8, 0x125e, 0x2, 0x8, 0x8, 0x0, 0x8, 0x4, 0xffffffe1, 0x7f, 0x100, 0x0, 0x9, 0x200, 0x6, 0x2, 0x140000, 0x80000001, 0x3, 0x6, 0x3, 0x401, 0x4, 0x1, 0xffffffff, 0x7, 0x70, 0x80, 0x2, 0x7ff, 0x6, 0x4ec, 0xfff, 0x3, 0x40, 0x0, 0xfffffffd, 0x40, 0xef0, 0x31, 0x20000000, 0x2, 0x0, 0x100, 0x1, 0x4, 0x1, 0x7f, 0x8, 0x5, 0x8000, 0x51a, 0x3, 0x4, 0x8, 0x3, 0x343, 0xff, 0xffff, 0xffff8000, 0x200, 0xff, 0x7da, 0x2, 0x8000, 0xfffffff7, 0x8, 0x1000, 0x0, 0x2, 0x3, 0x4, 0x7aa, 0x5, 0xfffffffa, 0x400, 0x8, 0x80000001, 0x2, 0x100, 0x8, 0x0, 0xfffffff8, 0xfffffffd, 0x0, 0x5, 0x101, 0x6, 0xff, 0x8, 0x5, 0x9, 0x8, 0x1, 0xff, 0x7fffffff, 0xffffe03e, 0xfffffffe, 0x82, 0x1, 0x101, 0xcf, 0x1, 0x9, 0x6, 0x9, 0x9, 0x6fe, 0x3, 0xffff, 0x6, 0x3, 0xce, 0x7, 0x7, 0x7, 0x2, 0x3ff, 0x8, 0x0, 0x1f, 0x5, 0x80000000, 0x5, 0x1, 0x9, 0x80, 0x2, 0x3, 0xff, 0x8, 0x20, 0x3ff, 0xf0000000, 0x0, 0x3, 0x6, 0x200, 0x6, 0x7, 0x5, 0x8000, 0x6, 0x4, 0xa402, 0x1ff, 0x101, 0x4, 0x800, 0x3, 0x9, 0x5, 0x3, 0x7fff, 0x1fe7, 0x800, 0x3, 0x80000000, 0xe8d, 0x80, 0x40, 0x101, 0x2d, 0x1c0, 0x7, 0x7, 0x1, 0x94, 0x6, 0x5, 0x5, 0x3ff, 0xc38, 0x4, 0x3, 0x2, 0x4, 0x100, 0x6, 0x8001, 0x1000, 0x6, 0x2, 0xd1f0, 0x6dc1, 0x0, 0x8, 0x0, 0x7fffffff, 0x7fff, 0x8000, 0xa0bc, 0x20000000, 0x8, 0x5, 0x2, 0x2, 0xfffffffc, 0x4, 0x76, 0x5, 0x9, 0x7c2f, 0x3, 0x7ff, 0x55, 0x3, 0x2, 0x3, 0xc6d1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7, 0x3, 0x3, 0x6, 0x6, 0x20000, 0x7f, 0x3, 0x1ff, 0x40, 0x0, 0x3, 0x1, 0x200, 0x3, 0xffffff14, 0x3f, 0x2, 0x9f, 0x80000001, 0x5, 0x82, 0x7d6, 0x1ff, 0xe2, 0x9, 0x8, 0x5, 0x1000, 0x4, 0x90a, 0x63, 0x2, 0xdbf3, 0x9, 0xffff, 0x1d0, 0x6, 0x7f, 0x80, 0x0, 0x1ff, 0x1, 0x6, 0x3, 0x7, 0xffff4b92, 0xd7ef, 0xa423, 0x6, 0x3, 0x5, 0x5e, 0x6a5b, 0x1, 0x1, 0x40, 0x7, 0x0, 0x5, 0x81, 0x40000, 0x7f, 0x20, 0x2, 0xff, 0x9, 0xfffffffc, 0x9, 0x3, 0x4, 0x6, 0x1, 0x9f, 0x9, 0x81, 0x8, 0x5, 0xeb, 0x5, 0xf440, 0xe9, 0x4, 0x7, 0x7fffffff, 0x2a8, 0x200, 0x80000001, 0x3, 0x3, 0x7fff, 0xfff, 0x5, 0xffffffff, 0x3, 0xffffffff, 0xfffffff8, 0x1653, 0x200, 0x8, 0x400, 0x1, 0x401, 0x4, 0x1000, 0x6, 0x4, 0x5, 0x1, 0x3, 0x5, 0x0, 0xfffff801, 0x8, 0x3, 0x101, 0x2, 0x10001, 0x10001, 0x1f, 0xc7b, 0xcd, 0x1000, 0x10001, 0x3, 0xfffffffd, 0x3ff, 0x100, 0x7, 0x2, 0x0, 0xcd3, 0x7fffffff, 0x9, 0xfb0, 0x1, 0x76, 0x0, 0x1, 0x3, 0x7fff, 0x5, 0x6, 0x4, 0x5, 0x3, 0x9, 0x0, 0xff, 0x7, 0x3, 0x4, 0x400, 0x6, 0x1, 0x1, 0x660, 0xffff7fff, 0x1008001, 0x100, 0x7fffffff, 0x9, 0x80000001, 0x3, 0x7ff, 0x81, 0x200, 0x7, 0x4, 0x101, 0x4, 0x2d, 0x2, 0xfff, 0xfffffffb, 0x1, 0x1, 0x5, 0x9, 0x8, 0x6, 0x800, 0x7, 0x28, 0x8, 0x2, 0x5d6f, 0x0, 0x6, 0x1, 0x81, 0x4, 0x4, 0x4, 0x3, 0x2, 0xd5e, 0x3, 0xba8e, 0x2, 0xc51, 0x2, 0x3, 0x6, 0xfff, 0x8, 0x5, 0x2, 0x7f, 0xbdf, 0xffffffff, 0x1, 0x1, 0x7, 0x5, 0x3, 0x3, 0xc3c1, 0x6, 0x0, 0x10000, 0x5, 0x6, 0x0, 0x7, 0x8, 0x7f, 0x2, 0x8001, 0xffffff15, 0x8001, 0xc6b8, 0x9c, 0x8, 0x80, 0x7, 0xb1, 0xc658, 0xee, 0x5, 0x1000, 0x2, 0x5, 0x1, 0x8, 0x8, 0x101, 0x401, 0x2, 0x40, 0x0, 0x8, 0x4, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb63, 0x7fffffff, 0x0, 0x1ff, 0xfffffe9b, 0x200, 0xfffffffd, 0x800, 0x1, 0x101, 0x8, 0x0, 0x9c96, 0x0, 0x2, 0x101, 0x10000, 0x1000, 0x80000000, 0x3, 0x8, 0xf59, 0x6, 0x100, 0xffffffff, 0x101, 0x4, 0x4fa, 0x6, 0x6, 0x0, 0x81, 0x8, 0x9, 0x0, 0x5a, 0x4, 0x1, 0x7, 0x10001, 0x7, 0x17d, 0xa2, 0x100, 0x0, 0x3dd, 0x8001, 0xb0, 0x7, 0xffffffff, 0xc0, 0x8000, 0x4, 0x8, 0x3d4, 0xfffffffa, 0x2, 0xec8e, 0x40, 0xb16c, 0x9, 0xffffff01, 0x0, 0xd65, 0x8, 0x8, 0x2, 0xffffffff, 0x198, 0x3, 0x6566, 0x1, 0x0, 0xe41, 0x3, 0xffffffff, 0x6, 0x6, 0xfd9, 0x3, 0xe6, 0xffffff01, 0x8, 0x4, 0xffff, 0x6f8, 0x2, 0xfffffff7, 0x8, 0x4, 0x2, 0x5, 0x7ff, 0xdeb0, 0x0, 0x1f, 0x6, 0x2, 0x800, 0x3, 0x80000001, 0x8, 0x3, 0x8001, 0x20, 0x3, 0xffff, 0x80, 0x8, 0x9, 0x7, 0xffff, 0x2, 0x8, 0x0, 0xffff, 0xd6f9, 0x8, 0xfffff000, 0x3, 0x646, 0xddd, 0x7fff, 0x1ce, 0x9, 0x4, 0x2, 0xffffff81, 0x4, 0x6, 0x3, 0x952, 0x7, 0x6, 0x1000, 0x3, 0x0, 0x0, 0x7afa, 0x0, 0x10000, 0x9, 0xffff, 0x4, 0x3, 0x2, 0x33e4, 0x3, 0x546, 0x7fffffff, 0x9, 0x5b1b0502, 0x4, 0x9, 0x86da, 0x6, 0x100, 0x5, 0x1723, 0x9, 0x8, 0x4, 0x3, 0x0, 0xfffffff9, 0x1, 0x22, 0xfffffff7, 0x8, 0x100, 0x0, 0x1, 0x0, 0x9, 0x8, 0x8, 0x400, 0x1, 0x6, 0x1, 0x0, 0xd59, 0x8, 0x6, 0xccae, 0x8e, 0x21a, 0x7, 0x9, 0xfffffffb, 0x6, 0x3, 0x5, 0x2, 0x3, 0x2, 0x3, 0x101, 0xae7b, 0x19, 0x1f, 0x3, 0x1ff, 0x1000, 0x9, 0xa227, 0x7, 0xffffff00, 0x1f, 0x1, 0xff, 0x3, 0x8, 0x1f, 0xffff8001, 0x6c, 0xedc5, 0x7, 0x8, 0x200, 0x7, 0xfffffff9, 0x75, 0x2, 0x400, 0x8, 0x1f, 0xffff, 0xe35, 0x6, 0x3, 0x0, 0x1, 0x2, 0x80000000, 0x3, 0x1, 0x20, 0x3, 0xef7, 0x4, 0x4, 0x1f, 0x0, 0x2, 0x7fff, 0x81, 0xffffffff, 0x6, 0xfffffff9, 0x0, 0xf0, 0x20, 0xa, 0x6, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfffffffb, 0x800, 0x200000, 0x4, 0x300000, 0x2, 0xfffffffb, 0x1, 0x8, 0x1000, 0xea1, 0xe302, 0x4, 0x6, 0x9, 0x7, 0x7ff, 0x26f3, 0x6000000, 0x800, 0x100, 0x0, 0x7, 0x5, 0x0, 0x401, 0x40, 0x6, 0x0, 0x9, 0x80000001, 0x7, 0x80000001, 0x5, 0xfffffffe, 0x8, 0x800, 0x7f, 0x3, 0x1, 0x4, 0x6, 0x800, 0xa885, 0x10001, 0x6c8, 0x249, 0x2, 0x364, 0xffff, 0x9f3, 0x81, 0x6, 0x7f, 0x200, 0x2, 0x9, 0x3f, 0x8, 0x80000000, 0xf8bc, 0x2, 0x2, 0x4, 0x0, 0x11, 0x9, 0x7, 0x3f, 0x7, 0x11dd, 0x80000001, 0x9, 0x2, 0x8, 0x7, 0xe58, 0x7, 0x2, 0x1, 0x80000000, 0xfff, 0x6, 0x80, 0x5, 0x6, 0x3, 0xa2, 0x7, 0x9, 0x8, 0x1, 0x80, 0x3ff, 0xb027, 0x1c, 0xe9e, 0x8001, 0x5, 0xfffffff8, 0x8, 0xff, 0x1, 0x1, 0x494, 0x8, 0x4, 0x634d, 0x0, 0x9, 0x1000, 0x8001, 0x5, 0x10001, 0xfe9e, 0x4, 0x311a, 0x1, 0x3, 0x7, 0x5, 0x2, 0x3, 0x6, 0x7, 0x8, 0x6cb, 0x0, 0x80000000, 0x2, 0x7fffffff, 0x5, 0x3, 0x10001, 0x6, 0x10001, 0x10000, 0x2, 0x1, 0x1, 0x200, 0x7, 0x9b43, 0x40, 0x5f, 0xfffffffe, 0x8b, 0x2, 0x2a, 0x1c00000, 0x895, 0x1f, 0x5, 0xfffffffd, 0x4, 0xa80c, 0x1, 0x1, 0x6, 0x7, 0x100, 0x9, 0x200, 0x7, 0x3, 0xfffffffe, 0x802, 0x9, 0x401, 0x6, 0x10001, 0x845a, 0xfffffff9, 0x8, 0x6, 0x100, 0x20fe, 0xd563, 0x4, 0x224de239, 0xfffffd00, 0x661, 0x7, 0x0, 0x2, 0x4, 0x0, 0xeef, 0x7, 0x0, 0xc6, 0x80000000, 0x1, 0x6, 0x6, 0x7fffffff, 0x6, 0x401, 0xcf, 0x8, 0x6, 0xfffff801, 0xeef, 0x7ff, 0x80000001, 0x9, 0x6, 0x2, 0x246, 0x7, 0xa0a, 0xff, 0x9, 0x98, 0x100, 0x3, 0x7f, 0x8, 0x80, 0xfffffffc, 0x4971, 0x2, 0x3, 0x5, 0x7, 0x4, 0x7, 0x5e, 0x1000, 0x3ff, 0x1f, 0x10000, 0x800, 0x3, 0x8, 0x61, 0x1, 0x80800001, 0x8, 0x3ff, 0x9, 0x5, 0x3, 0x101, 0xe97b, 0x1, 0x6, 0x4, 0x1, 0x8, 0x3ff, 0x5, 0x10001, 0x80, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x3, 0x80, 0x9, 0x0, {0x6, 0x0, 0x5, 0x8b, 0x1000, 0x40}, {0xf8, 0x3, 0x8, 0x210, 0x4, 0x9}, 0x3, 0x8000, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa691, 0x10000000, 0x800, 0x4, 0x1, {0x9f, 0x2, 0x76, 0xfffb, 0x2, 0x100}, {0x1, 0x3, 0x5, 0x209c, 0x6613, 0x8}, 0x9, 0x8, 0xfb4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x1ff, 0xfffffff8, 0x3ff, 0x9, 0x7, 0xc082, 0x80, 0x6, 0x3, 0xe908, 0x8000, 0x1, 0x37b1, 0xdbc, 0x5, 0xffffffe1, 0x9, 0x1, 0x31, 0x2, 0x6, 0x8, 0x81, 0x3, 0x3, 0xe76, 0x7, 0x1, 0x2, 0x2, 0x1, 0x1, 0x1, 0x7fffffff, 0x1, 0x1, 0x9, 0x200, 0x7, 0x7, 0x80000000, 0x3, 0x8, 0x5e16, 0x2, 0x29, 0x6, 0x9, 0x6, 0x9, 0x2b0, 0x7fff, 0x0, 0x7f, 0x1, 0x7, 0xfffffffb, 0xa628, 0x7b, 0x6d, 0x7fffffff, 0x5, 0x8, 0x800, 0xd4, 0x7f, 0xfffffe01, 0xfffffffe, 0xfffffff7, 0x1000, 0x2b0e12c6, 0x9dc2, 0x3f, 0x40, 0x1, 0x81, 0x3, 0x6, 0x2, 0xda, 0x8001, 0x8, 0x0, 0x7, 0x5, 0x0, 0x1, 0xfffffffb, 0x1, 0x1, 0x80000001, 0x1, 0x1f, 0x1, 0x800, 0x8000, 0xb02f, 0x8, 0x1, 0x7, 0x1ff, 0x4, 0x7f, 0xdd, 0x5b61, 0x7fffffff, 0x1, 0x5, 0x8, 0x1, 0x7, 0x6bb, 0x101, 0x5, 0x28c9e7f7, 0x4, 0x400, 0x6, 0x1d, 0x5, 0x7, 0x8, 0x9, 0xf8000000, 0x7, 0x6, 0xca, 0x5, 0x5f, 0x1, 0x1, 0x4, 0x1ff, 0x8001, 0x10000, 0x0, 0x2, 0x80000001, 0x4, 0x3, 0x9, 0x6c8000, 0x7, 0x0, 0x82, 0x4, 0x3f, 0xf, 0x50000, 0x7, 0x7ff, 0x1, 0x81, 0x8, 0x2, 0x8000, 0x800, 0x7, 0xbd5, 0x4, 0x40, 0xff, 0x3ff, 0x200, 0xdb, 0x8000, 0xff, 0x8, 0xfffff001, 0x0, 0x418, 0xffffffa6, 0x8, 0xfffffff9, 0x5, 0x8, 0x1ff, 0x80000001, 0x1f, 0xffff, 0x7, 0x1, 0x7, 0x8001, 0x8, 0xe4ab, 0xfffffb91, 0x3, 0x6c, 0x8, 0x1, 0x1f, 0x31afd906, 0xd73, 0x7fffffff, 0x5, 0x9, 0x1000, 0xb7d, 0x80, 0x3, 0x7fffffff, 0x1000, 0xffff, 0x7fffffff, 0x7, 0x5, 0x0, 0x513f, 0x6, 0x5, 0x1f, 0x1, 0x8000, 0x5, 0x42aa, 0xd4, 0x76, 0x9, 0x3f, 0xfffffffc, 0x1f, 0xdcd7, 0xfffffff9, 0xba, 0x5, 0xf3d, 0x1000, 0x7, 0xc732, 0x1, 0x2, 0x1, 0x6, 0x3, 0x2, 0x80000001, 0xfffffffc, 0x400, 0x7f, 0x6e0, 0xfffffff8, 0x6, 0x10000, 0x401, 0x2, 0x7, 0x0, 0x0, 0x800, 0x2, 0x3, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x80000001, 0x400, 0x668, 0x6, 0x6, 0x8, 0xa1c1, 0x1, 0x6, 0x0, 0x8, 0x33, 0x7, 0x2, 0x87, 0x7fff, 0x5, 0x100, 0x5, 0x80, 0x7fffffff, 0x80000000, 0x400, 0x2023ccf0, 0x5c, 0x4ca, 0x3ff, 0xffffffff, 0x5, 0x1, 0x1, 0x5, 0x3, 0x5, 0x7, 0x7f, 0x81, 0xf10, 0x3c95, 0x7ff, 0x861d, 0xffffffee, 0x8, 0x4, 0x9, 0x2, 0x3c, 0x9, 0x5, 0x4, 0x7, 0x7, 0xd98c, 0x0, 0x0, 0x5, 0x80000001, 0x7ff, 0x1000, 0x4f7, 0x6, 0x1000, 0x1f, 0x4, 0x7fffffff, 0x8, 0x5, 0x0, 0x1, 0x9, 0x1, 0x0, 0x10001, 0x9, 0x5, 0x7b6f, 0xc6d, 0x1, 0xa080, 0x7ff, 0x4, 0x10000, 0x20, 0x3, 0x3, 0x80, 0x423, 0x2, 0x2, 0x80, 0xffffff9d, 0x0, 0x20, 0x71c4, 0x9, 0x800, 0x4, 0x535, 0x6, 0x4, 0xaf3, 0xa62, 0x72, 0xfffffff9, 0x1f, 0x4, 0x800, 0x8, 0x4, 0x4, 0x40, 0x400, 0x0, 0x264e, 0x8, 0x6, 0x1, 0x10001, 0x4, 0x61f5, 0x7, 0xffff, 0x7fffffff, 0x0, 0x1, 0x70000, 0x0, 0x653, 0x7f, 0x0, 0x391, 0x200, 0x10001, 0x6, 0x8001, 0x6, 0xc48, 0x10000, 0x3, 0x0, 0x8, 0x9, 0x85, 0x5, 0x1, 0x54, 0x1, 0x20, 0x80000000, 0x1, 0x80000001, 0x3ff, 0x3, 0x8, 0x9, 0x7fff, 0xfffffffb, 0x7fffffff, 0xffffffff, 0xfffffff0, 0xffff, 0x401, 0xfffffffb, 0x5, 0x6, 0x7, 0xfffffff9, 0x9, 0x2f57, 0x99, 0x2, 0x10000, 0x5, 0x1, 0x1, 0xfff, 0x41, 0x2, 0x6, 0x8, 0xfffffe01, 0x4, 0xb4ef, 0x400, 0x8, 0x3, 0x6498, 0x3, 0x9, 0x4, 0xffffffff, 0x4, 0x4, 0x1, 0x6, 0x4, 0x101, 0x7, 0x8, 0x2, 0x20, 0x1, 0x1ff, 0x1000, 0xffffa482, 0xffff, 0x9, 0xb67f, 0x4, 0x4ac, 0x6, 0x4, 0xffffffff, 0x5d, 0x0, 0x7, 0x10001, 0x6, 0x0, 0x1ff, 0xca8, 0x6, 0x9, 0x8, 0x2, 0x4, 0x0, 0x1, 0x8000, 0x105c42ed, 0x3ff, 0x10001, 0x7, 0x0, 0x81, 0x400, 0x10001, 0x1, 0xc, 0xfffffe00, 0x120, 0x1, 0x157, 0x1f, 0x5b, 0x8, 0x6, 0x7, 0x6, 0x8, 0x1000000, 0x1, 0x0, 0x75d, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfffffffc, 0x1, 0x62, 0x9, 0x81, 0x40, 0x7261, 0x0, 0x7, 0x2, 0x1, 0x7, 0x49da, 0x8, 0x8001, 0x40000000, 0xffffffff, 0x1, 0x1, 0x400, 0x0, 0xffffffff, 0x8, 0x8000, 0x1, 0x4, 0x4, 0x3e28, 0x6, 0x1, 0x7, 0x4d, 0xfffffff8, 0x7, 0x2, 0x7fffffff, 0x8, 0x1a50, 0x5, 0xff, 0xffffffff, 0x2, 0x8, 0x4, 0x9, 0x6, 0xbcdd, 0x4, 0x6e1e, 0x3, 0x2, 0x20, 0x0, 0x81, 0xffffffff, 0x5, 0x20, 0x40, 0x5, 0x200, 0x7, 0xe2, 0x0, 0x4, 0x2, 0x64, 0x8, 0x200, 0x3ff, 0x6044, 0x8001, 0x7, 0xffffffff, 0x4232, 0x8049, 0x401, 0xfffffff8, 0x400, 0xfd2, 0x1, 0x8, 0x1, 0x21057d4a, 0x10000, 0x80000000, 0x2, 0x8, 0xa0000, 0xff, 0x3f, 0x1, 0x2, 0x1, 0x2, 0x7, 0x3, 0x1, 0x1, 0x5, 0x7, 0x1, 0x7, 0x2, 0x6, 0x4, 0x5, 0x10001, 0xb6e6, 0x2758, 0x81, 0xa0000, 0x9, 0x9, 0x7, 0x7fff, 0x100, 0x5, 0x1, 0x10001, 0x0, 0x1000, 0x3f, 0x3, 0x9, 0xfffffff8, 0x2, 0x7, 0x6, 0x101, 0x1, 0x0, 0x3bf5, 0x0, 0x4, 0xd70a, 0x1, 0xd9, 0xfffffffc, 0x6, 0x9, 0x37, 0x956d, 0x9, 0x5, 0x5, 0x81, 0x1ff, 0x0, 0x4, 0x6, 0x5, 0x0, 0x2, 0x40, 0x7fffffff, 0x4, 0x3f, 0x8000, 0x80000001, 0x0, 0x8, 0x401, 0x8, 0x6, 0x6, 0x1, 0x8, 0x30, 0x2, 0x1, 0x3, 0x9, 0x7, 0x82c, 0x800, 0x1, 0x10000, 0x2, 0x3, 0xb20, 0x80, 0x6, 0x4, 0x7fff, 0x1, 0x7ff, 0xffff8375, 0xd1c, 0x400, 0x1, 0x1, 0x7fff, 0xfffffff8, 0xbcb9, 0xde62, 0x7f, 0x6410e19b, 0x1, 0x7fffffff, 0x6, 0x1, 0x2, 0x3, 0x6, 0x9, 0xb4f, 0xa5, 0x5f, 0xffffff00, 0x400, 0x5, 0x4, 0x2, 0x5, 0x800, 0x6, 0x6e20135a, 0xb8c0, 0x1f, 0x1ff, 0x0, 0x8, 0x9, 0xffffffb6, 0x7, 0xfffffeff, 0x8, 0x6, 0x8, 0x401, 0x9, 0x80000001, 0x0, 0x6, 0x3, 0x7, 0x9, 0xfffffffb, 0x7fffffff, 0x2, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x200, 0x5, 0x1, 0x7, 0x800, 0x5, 0x1, 0x2, 0x8, 0x8001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x8, 0x1, 0x2, 0x4, {0x20, 0x0, 0x5, 0x8, 0x6, 0x9}, {0xb, 0x2, 0xf203, 0xa655, 0x2, 0x401}, 0x7fffffff, 0x2, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6c7, 0x0, 0xb7, 0x3, 0x0, 0x9, 0x9, 0xfffffffa, 0x4, 0x2, 0xe24, 0x6a, 0x3f, 0xdb38, 0xfffffffb, 0x7, 0x80, 0x654b, 0x401, 0x1f, 0xffffff4b, 0x8000, 0x400, 0x4, 0xf2, 0x7, 0x1, 0x7, 0x8, 0xffffa166, 0x400, 0x1, 0x0, 0x1, 0x6, 0x1ff, 0x2, 0xec, 0x1, 0x1, 0x6, 0x2, 0x512a, 0x3, 0xd, 0x14b5424c, 0x4, 0x4e, 0x5, 0xfffffffe, 0xffffff81, 0x10001, 0x10001, 0x6, 0x3, 0x7, 0x4, 0x5, 0x1, 0xa3, 0x477, 0x0, 0xfd02, 0xfffff001, 0x719, 0x6, 0x3, 0x6, 0x101, 0xca79, 0xa84b, 0x0, 0x10000, 0x20, 0x1f, 0x7fffffff, 0x6, 0xfffffe56, 0x80000001, 0xfff, 0x0, 0x8, 0x6, 0x1, 0x1f, 0xb73d, 0xaa2, 0x7, 0x9, 0x7, 0x8, 0xfffffffb, 0x94d4, 0x8, 0xffff, 0x9, 0x0, 0x3, 0x2, 0xffffffff, 0x6, 0x8000, 0x3, 0x7, 0x1ff, 0x80000001, 0x6a4, 0x80, 0xfff, 0xffffff00, 0x3, 0x1a, 0xa000000, 0x825, 0x90, 0x43, 0x8, 0xffff, 0x0, 0x6, 0x7, 0x9, 0x3, 0x3, 0x2, 0x9, 0x4, 0xffffd87b, 0x5, 0x3ff, 0x1d6, 0x5, 0xc377, 0x3ff, 0x9, 0x6, 0x8b73, 0x0, 0xea85, 0x0, 0x6, 0xda, 0x9, 0x6ab3, 0x800, 0x5, 0x0, 0x6, 0x3ff, 0x6, 0xff, 0x2, 0x7, 0x4, 0x800, 0x3, 0x0, 0x4, 0x7ff, 0x6, 0x1e0, 0x80, 0x5, 0xfffffffb, 0x3a9, 0x7, 0x7ec2dff3, 0x1, 0x81, 0x8000, 0x800, 0x9, 0x10000, 0x3, 0x606, 0x80, 0x8, 0x5, 0xfffffff7, 0x7, 0x3, 0x10000, 0x964b, 0x91a9, 0x2, 0x5, 0x9, 0x7f, 0x6, 0xfffffe01, 0x800, 0x1, 0x3, 0x3, 0x2, 0x4c000000, 0x3c, 0x7, 0x3, 0x1, 0x4, 0x1, 0x9, 0x1000, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x7, 0x2, 0xfff, 0x5, 0x401, 0xfffffff8, 0x400, 0x5, 0x400, 0x4, 0x8000, 0x0, 0xfffffff7, 0x80000000, 0xb048, 0x7f, 0x2, 0x1f, 0x2, 0x664, 0x4, 0x6d7, 0x9d46, 0x10001, 0x3, 0x80000000, 0x469ae5e9, 0x1d, 0x3, 0x7, 0x200, 0x7fff, 0x80000001, 0x7, 0xee2, 0x7, 0x7f, 0x6, 0xfff, 0x10000, 0x9, 0x7, 0x4, 0xe9, 0x5, 0xc5fc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}]]}, {0xe, 0x6, "bb18c81f7a4605b5e6e6"}}}, @m_mirred={0x188, 0x8, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x7, 0x4, 0x400}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x40, 0x8, 0xffffff7e, 0x80000000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xdf4, 0x6, 0x6, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000001, 0x8, 0x8a01, 0x125f}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x101, 0x10000000, 0x4, 0xffff}, 0x4, r7}}]}, {0xd3, 0x6, "95160b69fe2cfe59e2067ab93531f70621833613cec3949b3bac80da62f66b2557ebcd8af058c9c890d2226d664d3a35fdd47ef49fd93f9b795f18d7a67876b0442a4435145f7cd1c5343523b3f9449e4293beb3dfb43e5c5965c86a797078854b97d7074df6c0f14cb7fbbe86abab148ec2c06af0bee7ddcca03ad6d89b827d35f21f07ed0693bafe5003b70e4c9d13433e3b6faefabdaba6283353f4cf212db680d9d2692aef56466be4e9dfcd6b0a938d926e3581c467c13f93e5441cfb2a842d846399967d98dae0e8fbb73176"}}}]}, @TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x217}, {0x4, 0x0, 0x3}}}]}]}, @TCA_CGROUP_ACT={0x284, 0x1, [@m_ipt={0x48, 0xc, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9810}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}}}, @m_bpf={0x11c, 0x13, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}]}, {0xfc, 0x6, "dcd968ba2760c364782f3fceb4a3290514e471231bfa0137672ab1ecf71536ba08f48b5c841d18376649b9a89e0a8702fae357aa1720817422d9d94bb84a9c3a15af92eaeb3e572d1f3e2d7c553e27dc94862fd15e9baafc593cb068c16eb42251d77ffedf6b59e206b1061202234fef25c37ec7102becd9e1a9be73c6a19f655033a560a77da4b30f38092d10a47e918aff93dd990d9af6378d8e84a0af5c4ad32b35c383e75d8f9812eec282e2f34a5c55afb7c59152959e581e956b90c1d9f6c7c6ddc1a6d68b9dd5e0a287abd6a6671603c3f85c30e8767300bb8fa984029c7829a9a24c0afe4cb0165cb682605480d23e6c4205cbbd"}}}, @m_csum={0x11c, 0xf, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1e7a4129, 0x5, 0x101, 0x1}, 0x2f}}]}, {0xeb, 0x6, "d05b64f407925454a3d51a3632ae9e7a5612e5ad21f3a60aae4315c6aeccc7c8e46049970fd0736b6b43946727ae42e319406bffcb8e746f33155938f4618e8b0cb56eea38d56d8119f8be63d0fc90853e91df09f39db4540b2fe0de0403952672b64d10be448246d53b1467d967c6749a5c000582a0b6052befd3833ec335ca21332a30cc6fb18ffda345af316a67d5a0b02f8b546c56c8fbcf79c5d2ea5548f168d798d5039e7753ead13e62a7ae1ba8c18dd0a28643692e3695c2a95af4e3bdaf6768f227b3faebcda73c264d6cc16d35b67f1b03400e3986a6a6cc55c844d2e2d239e06fda"}}}]}, @TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x3b28}}, 0x0) 03:49:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x1) 03:49:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x9}]]}}}]}, 0xb8}}, 0x0) 03:49:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$void(r0, 0x5451) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc008ae09, 0x0) [ 2438.134031] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2438.165123] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:49 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x100, 0x188) dup(r3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:49:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006404004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2438.443351] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2438.481809] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x40c00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x1c8, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@broadcast}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'md5\x00'}, 0x208, 0x0, "028f6c03d34ede53c4da683dd69044e73f4462cc04d55e735b65a91e5715693b4080cc7dd84855003cdc1bf65f20f54d502efdac94f892a335cbe2ddecb0ab9d60"}}]}, 0x1c8}}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000080)=""/165) [ 2438.669685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2438.702498] syz-executor.2 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=1000 03:49:49 executing program 4: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={'ip6tnl0\x00', 0x8001, 0xff}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$alg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="17801e71b90e080334905725b5291d54be324ed7a1c4", 0x16}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x70, 0x117, 0x2, 0x5b, "e9abd2b316f8a57155227f12cdb713480b66394c6dfb84079b04b8f15169826209249d6c20dcb6dd5304d7c1fb28fc140ed51f2d3d0a6e3eb6824c9129a754c06e2c28b12ddea0db96e7dec9a4fe0d644c9d371534a51ef5ba2c39"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x81}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x100, 0x4000}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x1}}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000300)=0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) [ 2438.729956] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2438.736027] CPU: 0 PID: 28549 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2438.743927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2438.753718] Call Trace: [ 2438.756324] dump_stack+0x188/0x20d [ 2438.760063] dump_header+0x159/0xa5e [ 2438.763796] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2438.768911] ? ___ratelimit+0x59/0x573 [ 2438.772821] oom_kill_process.cold+0x10/0x6dc 03:49:49 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags=0x2}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000120a010129bd7000fbdbdf2501000007b716896191d7d2e5302b4db4dd5500ef2cd34c5765a0c11c208d71afe74f03b6f004464b9a1fc6449f64959c337707dd98e19f6f51ab8d8fa736ce54a2f8e39f8b7dd00a72bdce5ce485b4c6ff52eaaba11da90cd566d5148a17e3323b4b021c20c1f588ee6a8b3a0f352c360bb324bb2bb4cc4e94ac0c3853fe6dbf5ac0ea24c1a162ed44c2c5e55d995f43e51504f74edab42a35f16941f38ae27e687cb2007a8080c10618d405f766f1ce4419a612316d60a5f82b1be7d29faa561e76fee54b3d1e203c504f8e08001e00", @ANYRES32=r2, @ANYBLOB="04000b007a002100dcb1d2f263147c6febe79f594e6a1e9371c951c0c6fbe580085e5b3afb19dcba01f62de09a15262c5edcb7812916d93e4716c1bc3b3eb41d74592f860200000000100000643981b1a808f9d6538de5a8258464723686540939ab22d7f103d4e2fec07f0cbd061a6ac49b358635cf724580b1611855320000000018e389f7a7f55e2c8fd322a2eccc225ee450aa08d488518012357cfab3551e26598c034301b5793b814a3acdbc6ca687cd78b1c1954fbed0a0bf66000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x40080}, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x9e3a797b0b15490c, 0x0) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r6, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000440)=0xc) setuid(r8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000400)={0x2a14, 0x7, {r6}, {r8}, 0x1}) [ 2438.777519] ? task_will_free_mem+0x134/0x6d0 [ 2438.782033] out_of_memory+0x349/0x1250 [ 2438.786027] ? oom_killer_disable+0x270/0x270 [ 2438.790548] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2438.795405] ? memcg_event_wake+0x210/0x210 [ 2438.799758] ? do_raw_spin_unlock+0x171/0x260 [ 2438.804269] try_charge+0xe22/0x1300 [ 2438.808009] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2438.812870] ? __lock_is_held+0xad/0x140 [ 2438.816953] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2438.821985] ? __alloc_pages_nodemask+0x5d1/0x6a0 [ 2438.826855] memcg_kmem_charge_memcg+0x7b/0x150 [ 2438.831537] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2438.836057] ? mark_held_locks+0xa6/0xf0 [ 2438.840141] ? cache_grow_begin+0x580/0x8a0 [ 2438.844481] cache_grow_begin+0x3ed/0x8a0 [ 2438.848667] fallback_alloc+0x205/0x2d0 [ 2438.852661] kmem_cache_alloc+0x1ea/0x710 [ 2438.855010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3769 sclass=netlink_route_socket pig=28710 comm=syz-executor.4 [ 2438.856828] ? lookup_one_len_unlocked+0x100/0x100 [ 2438.874153] alloc_inode+0xab/0x180 [ 2438.877815] new_inode_pseudo+0x14/0xe0 [ 2438.881803] new_inode+0x1b/0x40 [ 2438.885211] debugfs_get_inode+0x1a/0x130 [ 2438.889431] __debugfs_create_file+0xb6/0x400 [ 2438.894017] ieee80211_debugfs_add_netdev+0x4c5/0x1240 [ 2438.899308] ? __lockdep_init_map+0x100/0x5a0 [ 2438.903817] ? ieee80211_if_parse_tkip_mic_test+0x800/0x800 [ 2438.909548] ? ieee80211_sta_setup_sdata+0x94e/0xb80 [ 2438.914818] ? ieee80211_setup_sdata+0x91d/0xfa0 [ 2438.919599] ieee80211_if_add+0xe15/0x1920 [ 2438.923906] ? minstrel_alloc+0x591/0x700 [ 2438.928084] ieee80211_register_hw+0x2bf4/0x34e0 [ 2438.932864] ? ieee80211_ifa6_changed+0x7b0/0x7b0 [ 2438.937720] ? memset+0x20/0x40 [ 2438.941008] ? __hrtimer_init+0xd5/0x230 [ 2438.945084] ? mac80211_hwsim_addr_match+0x1f0/0x1f0 [ 2438.950220] mac80211_hwsim_new_radio+0x1cb9/0x3bb0 [ 2438.955266] ? cred_has_capability+0x16d/0x2e0 [ 2438.959858] ? hwsim_exit_net+0xba0/0xba0 [ 2438.964046] hwsim_new_radio_nl+0x5e1/0x876 [ 2438.968385] ? mac80211_hwsim_new_radio+0x3bb0/0x3bb0 [ 2438.973604] ? memset+0x20/0x40 [ 2438.976907] ? nla_parse+0x1f3/0x2f0 [ 2438.980646] genl_family_rcv_msg+0x627/0xc10 [ 2438.985076] ? genl_unregister_family+0x720/0x720 [ 2438.989933] ? mutex_trylock+0x1a0/0x1a0 [ 2438.994011] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2438.998606] ? __dev_queue_xmit+0x1778/0x3040 [ 2439.003117] ? __local_bh_enable_ip+0x159/0x270 [ 2439.007817] ? __radix_tree_lookup+0x206/0x360 [ 2439.012424] genl_rcv_msg+0xbf/0x160 [ 2439.016157] netlink_rcv_skb+0x160/0x410 [ 2439.020232] ? genl_family_rcv_msg+0xc10/0xc10 [ 2439.024833] ? netlink_ack+0xa60/0xa60 [ 2439.028749] genl_rcv+0x24/0x40 [ 2439.032039] netlink_unicast+0x4d7/0x6a0 [ 2439.036117] ? netlink_attachskb+0x710/0x710 [ 2439.040546] netlink_sendmsg+0x80b/0xcd0 [ 2439.044632] ? netlink_unicast+0x6a0/0x6a0 [ 2439.048877] ? move_addr_to_kernel.part.0+0x110/0x110 [ 2439.054086] ? netlink_unicast+0x6a0/0x6a0 [ 2439.058328] sock_sendmsg+0xcf/0x120 [ 2439.062049] ___sys_sendmsg+0x803/0x920 [ 2439.066035] ? copy_msghdr_from_user+0x410/0x410 [ 2439.070808] ? __fget+0x319/0x510 [ 2439.074279] ? lock_downgrade+0x740/0x740 [ 2439.078441] ? check_preemption_disabled+0x41/0x280 [ 2439.083476] ? __fget+0x340/0x510 [ 2439.086944] ? iterate_fd+0x350/0x350 [ 2439.090779] ? __fget_light+0x1d1/0x230 [ 2439.094774] __sys_sendmsg+0xec/0x1b0 [ 2439.098588] ? __ia32_sys_shutdown+0x70/0x70 [ 2439.103018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2439.107780] ? trace_hardirqs_off_caller+0x55/0x210 [ 2439.112821] ? do_syscall_64+0x21/0x620 [ 2439.116901] do_syscall_64+0xf9/0x620 [ 2439.120713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2439.125910] RIP: 0033:0x45c849 [ 2439.129110] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2439.148026] RSP: 002b:00007f1b0e98ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2439.155754] RAX: ffffffffffffffda RBX: 00007f1b0e98f6d4 RCX: 000000000045c849 [ 2439.163035] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 2439.170314] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2439.177598] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2439.184874] R13: 00000000000009f7 R14: 00000000004ccaef R15: 000000000076bfac [ 2439.237276] Task in /syz2 killed as a result of limit of /syz2 [ 2439.243635] memory: usage 307200kB, limit 307200kB, failcnt 1269 [ 2439.268407] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2439.298011] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2439.304313] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2439.334505] Memory cgroup out of memory: Kill process 28486 (syz-executor.2) score 1103 or sacrifice child 03:49:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e4c, {0x4}}, 0x14}}, 0x0) [ 2439.353032] Killed process 28486 (syz-executor.2) total-vm:75096kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2439.373747] oom_reaper: reaped process 28486 (syz-executor.2), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB 03:49:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006504004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:50 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="185f0000000000001001000001000000434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3d49739d3a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d08004dad7d61a72872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00"], 0x18}}], 0x40000000000037b, 0xc000) socket(0x0, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x2}) [ 2439.460450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3769 sclass=netlink_route_socket pig=28706 comm=syz-executor.4 03:49:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0xa}]]}}}]}, 0xb8}}, 0x0) 03:49:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x800000000000401) r2 = accept4(r1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="e6a3c689", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r4, 0x9}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc008ae09, 0x0) 03:49:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000002000a0000000a00"], 0x24}}, 0x0) [ 2439.614297] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2439.635026] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2439.661834] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2439.678549] CPU: 0 PID: 28824 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2439.686479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2439.695842] Call Trace: [ 2439.698449] dump_stack+0x188/0x20d [ 2439.702094] dump_header+0x159/0xa5e [ 2439.706517] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2439.711626] ? ___ratelimit+0x59/0x573 [ 2439.715535] oom_kill_process.cold+0x10/0x6dc [ 2439.720079] ? task_will_free_mem+0x134/0x6d0 [ 2439.724695] out_of_memory+0x349/0x1250 [ 2439.728693] ? oom_killer_disable+0x270/0x270 [ 2439.733295] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2439.738148] ? memcg_event_wake+0x210/0x210 [ 2439.742494] ? do_raw_spin_unlock+0x171/0x260 [ 2439.747259] try_charge+0xe22/0x1300 [ 2439.750994] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2439.755846] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2439.760701] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2439.766770] mem_cgroup_try_charge+0x249/0x5c0 [ 2439.771372] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2439.776311] __handle_mm_fault+0x1cfb/0x3b60 [ 2439.780728] ? copy_page_range+0x1e70/0x1e70 [ 2439.785154] ? count_memcg_event_mm+0x279/0x4c0 [ 2439.789867] handle_mm_fault+0x1a5/0x670 [ 2439.793945] __do_page_fault+0x5ed/0xdd0 [ 2439.798450] ? trace_hardirqs_off_caller+0x55/0x210 [ 2439.803480] ? vmalloc_fault+0x730/0x730 [ 2439.807557] ? page_fault+0x8/0x30 [ 2439.812497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2439.817352] ? page_fault+0x8/0x30 [ 2439.820903] page_fault+0x1e/0x30 [ 2439.824357] RIP: 0033:0x45f1fd [ 2439.827563] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2439.831061] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2439.846467] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 03:49:50 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000000c0)={0x0, 0x80000000}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x0, 0x101}) 03:49:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2439.846479] RAX: ffffffffffffffea RBX: 00007f1b0e96e700 RCX: 00007f1b0e96e700 [ 2439.846486] RDX: 00000000003d0f00 RSI: 00007f1b0e96ddb0 RDI: 0000000000413430 [ 2439.846493] RBP: 00007ffc5c858f00 R08: 00007f1b0e96e9d0 R09: 00007f1b0e96e700 [ 2439.846500] R10: 00007f1b0e96ddc0 R11: 0000000000000246 R12: 0000000000000000 [ 2439.846507] R13: 00007ffc5c858d9f R14: 00007f1b0e96e9c0 R15: 000000000076c04c 03:49:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, &(0x7f0000000040)=0x3) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001340)='logon\x00', 0x0, &(0x7f00000012c0)="0000030000b30bfb62082b1da606d2", 0xf, r2) r3 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="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", 0x1000, r2) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="c0f8b22ccad568a9699b7a442b14610b9b6bf83441e8b584b4befe8669b4b26d994a2e778333c5eea9b440df792d963f31f8d9b67677178840b32d5de44943e4b2396be0a1039db7064c78dd9eaa6c513f33637a8e8cbd57f124a37e708bd5d1f6e746642b4d5e896252e3936c9dc4d6887c1a2425562f88503b78e4bd533fe69824c9e466aa60873880ef91353ce290cac358845242410779a60e3e23cdeb56b41db0dfce72a1a31cbbab7d6fffa600e9ba60ff249872f9874daf5be0cb38450abd8b3ce3728716a8fe002dad1d2700b72f41a36792fe161cc57308ec841ea590145b2edd4948c6adfc9e5712d452", 0xef, r3) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) [ 2440.030699] Task in /syz2 killed as a result of limit of /syz2 [ 2440.045875] memory: usage 307192kB, limit 307200kB, failcnt 1293 [ 2440.065698] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2440.087395] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2440.120001] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:164KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006604004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4098, 0x4) r2 = socket(0x11, 0x800000003, 0x0) socket(0x23, 0xa, 0x2) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) [ 2440.162084] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2440.187382] Memory cgroup out of memory: Kill process 28824 (syz-executor.2) score 1103 or sacrifice child 03:49:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000400)={0xfffffffffffffffd, 0x9ed9}) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r5, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(r5, &(0x7f00000003c0)='net/fib_trie\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20040, 0x0) r8 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f00000001c0)={0x9, {0xffffffff, 0x6, 0xc359, 0x7f}}) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc008ae09, 0x0) [ 2440.232250] Killed process 28824 (syz-executor.2) total-vm:74964kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2440.250855] oom_reaper: reaped process 28824 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 03:49:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e4d, {0x4}}, 0x14}}, 0x0) 03:49:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']}) pread64(r0, &(0x7f00000000c0)=""/213, 0xd5, 0xe11) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) [ 2440.290724] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0xb}]]}}}]}, 0xb8}}, 0x0) [ 2440.381434] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000006704004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x280, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:49:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002040)={r2, &(0x7f0000000040)="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", &(0x7f0000001040)="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", 0x1}, 0x20) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000002080)={0x0, 0x9}) [ 2440.597635] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:51 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000340)={0x100, 0x401, 0x0, 'queue0\x00', 0x80}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x22, 0x1, '%lo\\[posix_acl_accessvboxnet1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2f}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x70}}, 0x20000000) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xef}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008801}, 0x40) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00be64b2d3459633e0d101ac732c8bd229a765ea43c7d455cbfe4046dde56a654b581fba79741d6ccc64ebd429c6d150eedd586abdb98d371e13896b9ab357994737995133b03965472aa08ded6161f5f48a2a91afbafb3b9484fa66b37d8fda87f1f7d1693a5ba623e6e0823c2b92fbda808289effa0cdd79df53c5e1d5c08d7c119ef4f032fb9eefd90612c4d01040c84c0d64d3735bb66fcf8328c2caba38aa563c753cf0da0ad4ab90f5c88537cc1d8ea03abd88970d2a61e5f22eae897c07e16b0dfd069ac80056806724c7949422efb6d309f56127ba16b40c29b76bfd7affb5"], 0x3}}, 0x20000080) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x1}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040440}, 0x20004800) keyctl$get_security(0x11, 0x0, &(0x7f0000000400)=""/89, 0x59) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)) [ 2440.645581] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000140)={0x0, @src_change}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYBLOB="000000000200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4815}, 0x0) [ 2441.046989] syz-executor.2 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2441.067872] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2441.073602] CPU: 1 PID: 29184 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2441.081510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2441.090873] Call Trace: [ 2441.093568] dump_stack+0x188/0x20d [ 2441.097212] dump_header+0x159/0xa5e [ 2441.100939] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2441.106068] ? ___ratelimit+0x59/0x573 [ 2441.109984] oom_kill_process.cold+0x10/0x6dc [ 2441.114583] ? task_will_free_mem+0x134/0x6d0 [ 2441.119092] out_of_memory+0x349/0x1250 [ 2441.123087] ? oom_killer_disable+0x270/0x270 [ 2441.127612] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2441.132479] ? memcg_event_wake+0x210/0x210 [ 2441.136816] ? do_raw_spin_unlock+0x171/0x260 [ 2441.141321] try_charge+0xe22/0x1300 [ 2441.145054] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2441.149904] ? __lock_is_held+0xad/0x140 [ 2441.153990] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2441.159032] ? __alloc_pages_nodemask+0x5d1/0x6a0 [ 2441.164087] memcg_kmem_charge_memcg+0x7b/0x150 [ 2441.168784] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2441.173298] ? mark_held_locks+0xa6/0xf0 [ 2441.177368] ? cache_grow_begin+0x580/0x8a0 [ 2441.181790] cache_grow_begin+0x3ed/0x8a0 [ 2441.185966] fallback_alloc+0x205/0x2d0 [ 2441.189981] kmem_cache_alloc+0x1ea/0x710 [ 2441.194150] ? lookup_one_len_unlocked+0x100/0x100 [ 2441.199096] alloc_inode+0xab/0x180 [ 2441.203775] new_inode_pseudo+0x14/0xe0 [ 2441.207756] new_inode+0x1b/0x40 [ 2441.211132] debugfs_get_inode+0x1a/0x130 [ 2441.215314] __debugfs_create_file+0xb6/0x400 [ 2441.219897] cfg80211_debugfs_rdev_add+0x98/0xe2 [ 2441.224666] wiphy_register+0x187a/0x21d0 [ 2441.228839] ? wiphy_unregister+0xf20/0xf20 [ 2441.233280] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2441.238305] ? __kmalloc+0x5f8/0x770 [ 2441.242029] ? ieee80211_register_hw+0xbd2/0x34e0 [ 2441.246884] ? mark_held_locks+0xa6/0xf0 [ 2441.250964] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2441.256146] ? ieee80211_cs_list_valid+0x198/0x280 [ 2441.261094] ieee80211_register_hw+0x1414/0x34e0 [ 2441.266393] ? ieee80211_ifa6_changed+0x7b0/0x7b0 [ 2441.271249] ? memset+0x20/0x40 [ 2441.274631] ? __hrtimer_init+0xd5/0x230 [ 2441.278703] ? mac80211_hwsim_addr_match+0x1f0/0x1f0 [ 2441.283815] mac80211_hwsim_new_radio+0x1cb9/0x3bb0 [ 2441.288855] ? cred_has_capability+0x16d/0x2e0 [ 2441.293448] ? hwsim_exit_net+0xba0/0xba0 [ 2441.297618] hwsim_new_radio_nl+0x5e1/0x876 [ 2441.301954] ? mac80211_hwsim_new_radio+0x3bb0/0x3bb0 [ 2441.307155] ? memset+0x20/0x40 [ 2441.310445] ? nla_parse+0x1f3/0x2f0 [ 2441.314174] genl_family_rcv_msg+0x627/0xc10 [ 2441.318596] ? genl_unregister_family+0x720/0x720 [ 2441.323448] ? mutex_trylock+0x1a0/0x1a0 [ 2441.327519] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2441.332236] ? __dev_queue_xmit+0x1778/0x3040 [ 2441.336782] ? __local_bh_enable_ip+0x159/0x270 [ 2441.341499] ? __radix_tree_lookup+0x206/0x360 [ 2441.346104] genl_rcv_msg+0xbf/0x160 [ 2441.349837] netlink_rcv_skb+0x160/0x410 [ 2441.353921] ? genl_family_rcv_msg+0xc10/0xc10 [ 2441.358528] ? netlink_ack+0xa60/0xa60 [ 2441.362440] genl_rcv+0x24/0x40 [ 2441.365746] netlink_unicast+0x4d7/0x6a0 [ 2441.369831] ? netlink_attachskb+0x710/0x710 [ 2441.374270] netlink_sendmsg+0x80b/0xcd0 [ 2441.378486] ? netlink_unicast+0x6a0/0x6a0 [ 2441.382733] ? move_addr_to_kernel.part.0+0x110/0x110 [ 2441.387952] ? netlink_unicast+0x6a0/0x6a0 [ 2441.392203] sock_sendmsg+0xcf/0x120 [ 2441.395930] ___sys_sendmsg+0x803/0x920 [ 2441.399918] ? copy_msghdr_from_user+0x410/0x410 [ 2441.404683] ? __fget+0x319/0x510 [ 2441.408175] ? lock_downgrade+0x740/0x740 [ 2441.412337] ? check_preemption_disabled+0x41/0x280 [ 2441.417384] ? __fget+0x340/0x510 [ 2441.420850] ? iterate_fd+0x350/0x350 [ 2441.424668] ? __fget_light+0x1d1/0x230 [ 2441.428656] __sys_sendmsg+0xec/0x1b0 [ 2441.432465] ? __ia32_sys_shutdown+0x70/0x70 [ 2441.436918] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2441.441681] ? trace_hardirqs_off_caller+0x55/0x210 [ 2441.446730] ? do_syscall_64+0x21/0x620 [ 2441.450718] do_syscall_64+0xf9/0x620 [ 2441.454531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2441.459721] RIP: 0033:0x45c849 [ 2441.462944] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2441.482632] RSP: 002b:00007f1b0e98ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2441.490353] RAX: ffffffffffffffda RBX: 00007f1b0e98f6d4 RCX: 000000000045c849 [ 2441.498146] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 2441.505426] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.512716] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2441.520014] R13: 00000000000009f7 R14: 00000000004ccaef R15: 000000000076bfac [ 2441.535475] Task in /syz2 killed as a result of limit of /syz2 [ 2441.548854] memory: usage 307200kB, limit 307200kB, failcnt 1328 [ 2441.569994] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2441.577473] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2441.585336] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:164KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2441.606211] Memory cgroup out of memory: Kill process 29076 (syz-executor.2) score 1103 or sacrifice child [ 2441.620206] Killed process 29076 (syz-executor.2) total-vm:74964kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2441.632892] oom_reaper: reaped process 29076 (syz-executor.2), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2441.695137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000000)={0x8, 0x7f, 0x3f, 0x7, 0x12}) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2}}}, 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x7, 0x1, 0x2000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$sock_ifreq(r6, 0x89b0, &(0x7f0000000100)={'ip6erspan0\x00', @ifru_names='macvtap0\x00'}) 03:49:52 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, 0x6, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x444}, 0x4044001) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x800000000000401) r3 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r5, 0x7}, &(0x7f0000000280)=0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x18080, 0x0) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f00000001c0)=0x5, 0x2) 03:49:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000005004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x10}]]}}}]}, 0xb8}}, 0x0) 03:49:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e4e, {0x4}}, 0x14}}, 0x0) [ 2441.928602] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2441.984386] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2441.994853] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2442.045771] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2442.071315] CPU: 1 PID: 29340 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2442.079251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2442.088605] Call Trace: [ 2442.091194] dump_stack+0x188/0x20d [ 2442.094816] dump_header+0x159/0xa5e [ 2442.098607] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2442.103709] ? ___ratelimit+0x59/0x573 [ 2442.107595] oom_kill_process.cold+0x10/0x6dc [ 2442.112087] ? task_will_free_mem+0x134/0x6d0 [ 2442.116577] out_of_memory+0x349/0x1250 [ 2442.120544] ? oom_killer_disable+0x270/0x270 [ 2442.125044] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2442.129877] ? memcg_event_wake+0x210/0x210 [ 2442.134193] ? do_raw_spin_unlock+0x171/0x260 [ 2442.138802] try_charge+0xe22/0x1300 [ 2442.142516] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2442.147372] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2442.152216] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2442.158279] ? __lock_acquire+0x6ee/0x49c0 [ 2442.162517] mem_cgroup_try_charge+0x249/0x5c0 [ 2442.167095] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2442.172019] wp_page_copy+0x3fe/0x1530 [ 2442.175903] ? follow_pfn+0x260/0x260 [ 2442.181255] ? __lock_acquire+0x6ee/0x49c0 [ 2442.185488] do_wp_page+0x518/0xfa0 [ 2442.189239] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2442.193920] __handle_mm_fault+0x21a4/0x3b60 [ 2442.198341] ? copy_page_range+0x1e70/0x1e70 [ 2442.202799] ? count_memcg_event_mm+0x279/0x4c0 [ 2442.207472] handle_mm_fault+0x1a5/0x670 [ 2442.211547] __do_page_fault+0x5ed/0xdd0 [ 2442.215687] ? trace_hardirqs_off_caller+0x55/0x210 [ 2442.220703] ? vmalloc_fault+0x730/0x730 [ 2442.224762] ? page_fault+0x8/0x30 [ 2442.228302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2442.233135] ? page_fault+0x8/0x30 [ 2442.236661] page_fault+0x1e/0x30 [ 2442.240101] RIP: 0033:0x411898 [ 2442.243284] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2442.262174] RSP: 002b:00007ffc5c858d50 EFLAGS: 00010246 [ 2442.267533] RAX: 000000009b171ed0 RBX: 00000000019ec8be RCX: 0000001b2ce20000 [ 2442.274878] RDX: 0000000000000000 RSI: 0000000000001ed0 RDI: ffffffff9b171ed0 [ 2442.282138] RBP: 0000000000000011 R08: 000000009b171ed0 R09: 000000009b171ed4 [ 2442.289417] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 000000000076bf88 03:49:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$KDSETLED(r2, 0x4b32, 0x2e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES32=0x0], 0x2}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667323008a44411fc4b90005ffed"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=@newtaction={0xaf0, 0x30, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{0x128, 0x1, [@m_ct={0x124, 0x9, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x3, 0x7fff, 0x9}}, @TCA_CT_LABELS={0x14, 0x7, "bf2c90d53572d0d269b5e8662fd63525"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_MARK={0x8, 0x5, 0x101}, @TCA_CT_MARK={0x8, 0x5, 0x8000}, @TCA_CT_ACTION={0x6, 0x3, 0x9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0xb0, 0x6, "21856773e5f9a3e205aae03ac70e19e2314459da27ab0aa773fb0ab8aebf3170db1cc1b7500d2fb281e12b612259a983f95cc4bcfa3d14f264e626028c79b6e658aafa324ca07431f17803f2ba90ca12de475d4d5b17fdee633b488deb2db601ec91900373ac005ac18d508dfc155204927d0b0227339d04882e1fd2d018b61d16020689e1b503796add02f4b527e681e0113f91416278b3b72997c0c3a38b9c1adc807890b7f6c45f26031c"}}}]}, {0x794, 0x1, [@m_csum={0xe4, 0x19, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x9, 0xeae}, 0x38}}]}, {0xb2, 0x6, "022584ac0f4dfd830d7b10712a91fa50ca6fcd5b4c133c4be5e801114826d1b5b098d713820ad0ef48ad6fe07772e847ad16e9395491dd7a3509b6a2f870221bc792962be08b5d0d82b49b1fe65dc98052b15255ef8937514f62766d3f9fec239d3650b0255e603ed8c5a5524e7fcc0ca0bc4660109aa920f855df475a4d25927777b7fcdec46bc93dfe6168bca9706cb99e082118c28c017697affce216c641292e59be651577b8c7bb7cdab5b0"}}}, @m_csum={0xa0, 0x16, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x10000000, 0xffff7fff, 0x1}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb5, 0x401, 0x4, 0x5, 0x7}, 0x7d}}]}, {0x53, 0x6, "afb5161a971da183bfcd771bf80d7e8655360c7dbed14d982a0b40cc211a5ad2e4b1dcb91bdf6e0d399d63a365c5d7f85c18b7da7c322ddb02b00ddaf89171883d4bd87e198e99e6ba78d176d36b75"}}}, @m_xt={0x3f8, 0x8, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x330, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x30, 0x6, {0x7, 'mangle\x00', 0x5, 0x4, "d451a8e89218"}}, @TCA_IPT_TARG={0xb4, 0x6, {0xf7, 'nat\x00', 0x6, 0x6, "8a14e3091952bbe015b1686047c3593bec6d52b9a3ee73c7b90dd70c73d6058c6386e7c8f5d0fc2a3b470a7be015d6f0e277ecca19f567539f18804541d8f4cbba6e416c8d4fd232b0103a90275395f5aa6d049e8c38ffe92c43b88eed56e3ae7ed094fa5a7d5ff15c8bebfc9fdaad6e712d76b2d1dc65f120e165a1b8c8a5cb5997cdc52e624bfdd110"}}, @TCA_IPT_TARG={0xa0, 0x6, {0x1, 'raw\x00', 0x3, 0x93, "6b0069a9032c4c66ee5b6098c1661c9a5995fb3b91fadaa39e3aa834b8fbdff1e4dda07b66a9b5f1e527bdc9920a84375dee0b2d091393584364657c067c1af3a75c1f1de67668aa05f2f30983e4aadb82a5f4c36680cd66e8d4c91d76adff70738c984113685d4418b7118bb52ecee9b5f7cab3cf2c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x55, 0x6, {0x0, 'nat\x00', 0x4, 0x1ff, "e5d4bed40d5b6d47b3261a0b76451e1338599f205d37d2947075b8db0d47b770a3c89d8508adb77d2cf016"}}, @TCA_IPT_TARG={0xef, 0x6, {0x8001, 'raw\x00', 0x3, 0x5, "c7e73b9249740f98d20c29b22a6b603246a802de5e6d188129a1637b729d6c4c8492b2c1f5b5aa9b94aaf61e87661f47fd6985a269eef9e7a581752cc3b085447150134af596620c8e2a431c70cd1d873a9d6172a2b8e8b44bd7b83e5494d8993d263f6e8172512e32b509e20c7b2946a04df1e5aeb59eb2b60e16e78a19b8e2e4a4d98329c1795b7eb3d4266bdd45da572aa4d0a1826481b6580e17b4da0ac2000af73b2fbbb6ffaab1575d3c759dde242328cd71295796afb5a8d640b7ca9e608aa90884"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xbc, 0x6, "ba6b46688d27906262cdebba6f04d378ebf45a201661e67f8cdea7514c7faaf545345bae07ec2bacba4125df78657c59daa9b361b3c48f358fd6630363be930cd7fcd787e1b7dec968a944b152ac91f74521fa75abd4f4ec706a32d788e468863f7e51c8095f2c9f912fd2bd0ac32f73c7519e03e0a9e2dfca9fb838d4c0f39ad8e1f4a3175ddc3b4c0be2409be49a5c00cf8f42efec806ae65cf8f12c958029b5cd0ed02a058aabadbc3029969098086c7dc6c8e20ed79b"}}}, @m_ife={0x58, 0x9, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0x1, 0x7fff, 0x14}, 0x1}}]}, {0x2c, 0x6, "f6529a3b51e7dc0981092f8e43c72e49c6f8f30176c248a3fe8144d9bab6d4646c271704759f62ef"}}}, @m_tunnel_key={0x5c, 0xe, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x23, 0x6, "f7832e11831726879b2e747abf460738f805ea3065584f135e0185174629d8"}}}, @m_gact={0x160, 0x1a, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x400, 0x7, 0xc90c, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x220, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1775, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x92, 0x0, 0x41, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0xfb95, 0x1, 0xffffffe1, 0x1467}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xbdc, 0xffffffffffffffff}}]}, {0xe0, 0x6, "9cd0e082e61a5ff97ad88028c195197ecdbc7a2136c46992f0b7477f46f69193df618795becbd6af98b299e4272c99d8f1b0ca75fab71ec81a27518efc56a7fd7872469dfc14f3069ded588578afe0759ab4fd1b4b2d32d1874eb89dc7b31314da8d2da2a4eb80af244438ac7bf82dfeddcdc05b6de9fe61df15f99920cc6dcc5a901eaf1c32bb4ecf7a5d60440368c6e5a23ba001074fce176c76f3fd6c9db02d0ad5da7726dccc1eb1889c31d3aa36c8e3e054aff4027b86f55e96623d0448647a3b53a2e7f187ed104e8a4d71b2ebe2fc9828ae4ed52bf86aee01"}}}]}, {0x220, 0x1, [@m_ct={0x13c, 0xd, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "b55d9ff5103d32cfb2c1c05dc7951e24"}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "08a83d482bcf3148639f3fd5053ddb7a"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}]}, {0xe1, 0x6, "25f3687dbf02ed12a88d52c72e02bd013621ca8c86cb0aa0d376cc4e89face12244e2c199a313ccf7cac4d28341090a2968d997e9660c5a0e717d2353af7ff0d7dc8325085f3e12b4d2496f101550773624b7569c115f8013d26184e78a73ccdadad389d777c1ceb31259775bd01676dedbd58b5a06f4199eb89a72bd4c4cd69990cea769bf168c27921804c3a0ec56fea6cd4d7035e799d74d7eb366fe4e2a42b2bf449c922ecbbdbce326c207f13b3812353aaf05a209ab1c65589c87b9b73b3e67a659dbb25132e1cc0b409d9b1355bad3dffca774d392a6595a996"}}}, @m_simple={0xe0, 0x14, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'tcindex\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'keyring#]\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'tcindex\x00'}, @TCA_DEF_DATA={0x46, 0x3, '}\x80,\x10\x18\xde\xab\xdd\xce\x1b\xb4k%|&\xb9M\xdbZ\xd6\xa2\x97\xc9\xa4\xb4\xee\xd5\x9a\xbc2\x02\xaa\xfe\x8b\xd1\b\xaf\xe4T\xce\x8ar\xd4:uI\xa6\xc9\xd0\x10\xbd\xd92\xd5\xf0\xea\xc3\xca\x17\xf7x\xb5\x15\x0eG\xa1'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x899c, 0xffffffffffffffff, 0x9, 0x6}}, @TCA_DEF_DATA={0x7, 0x3, '.+\x00'}]}, {0x39, 0x6, "9b5061488e09d36f2fc8f7397f2862189d8fefae8deb122ceb047513144c6a58ead6c65fda9560c14c7704a9bf901da64699023913"}}}]}]}, 0xaf0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000e1e420841c100066df2500"/26, @ANYRES32=r5, @ANYBLOB="0e000c000e000f000200030008000b000004000008000b0006000000"], 0x34}}, 0x10) r6 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000000)={0x8001006}) [ 2442.296674] R13: 0000000080000000 R14: 00007f1b109b1008 R15: 0000000000000011 [ 2442.314881] Task in /syz2 killed as a result of limit of /syz2 [ 2442.322238] memory: usage 307200kB, limit 307200kB, failcnt 1361 [ 2442.341068] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2442.370851] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2442.388036] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:136KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2442.435409] Memory cgroup out of memory: Kill process 29340 (syz-executor.2) score 1103 or sacrifice child [ 2442.451833] Killed process 29340 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2442.472680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000006004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2442.481522] oom_reaper: reaped process 29340 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:53 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x800000000000401) r2 = accept4(r1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x120, 0x8, 0x8, 0x9, 0x4, 0xffffff24, 0x3ff, 0x10001, r4}, 0x20) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000000)) 03:49:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e4f, {0x4}}, 0x14}}, 0x0) 03:49:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x14}]]}}}]}, 0xb8}}, 0x0) 03:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) [ 2442.689306] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2442.731311] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:53 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x480102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="9f820000000000000000140000005d9edafc07c6d7028c2cb9d65804d7de4a304670de88c24ea6b8c7a2b074397d568a5d743c571fe5edab589167950b563a01511377fe793ef5060eee396d25655b73bd679cd72a7ee5486f06994738c20ae0eb5c0c1a09e2561e42"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x385e}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe1b}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000040)={0x2, 0x1, [0xffffffff, 0x3, 0xfffffffb, 0x0, 0x20, 0x5, 0x3ff, 0x16]}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:49:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000003126004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000200000000002600a9f72728dbc692b24a2300752a927e679c2e782722700c04b5964cf4461441651310b65bbeca646985f1845379a0ee3dd4ed5a45732643d4696f4be52ea513f38bb8dd62186cddd4324b7d912d8e8d7d1e8f7906796a6a62e7eca30cc535a859b7fd3d0fac921571d5a9710631d5c309ae79e5e8671fbaf827dd7ccfdeb2b84b4a23f95724a03ea7c391cb88bc7c1cbd7b2658da0000"], 0x24}}, 0x0) [ 2442.995919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:53 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x18, 0x80000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x27, [], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=""/39}, &(0x7f0000000180)=0x78) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) [ 2443.065915] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2443.123254] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2443.137726] CPU: 0 PID: 29547 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2443.145678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.155044] Call Trace: [ 2443.157842] dump_stack+0x188/0x20d [ 2443.161493] dump_header+0x159/0xa5e [ 2443.165585] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 03:49:54 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x80) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2443.170707] ? ___ratelimit+0x59/0x573 [ 2443.174713] oom_kill_process.cold+0x10/0x6dc [ 2443.179285] ? task_will_free_mem+0x134/0x6d0 [ 2443.183805] out_of_memory+0x349/0x1250 [ 2443.187807] ? oom_killer_disable+0x270/0x270 [ 2443.192339] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2443.197202] ? memcg_event_wake+0x210/0x210 [ 2443.201547] ? do_raw_spin_unlock+0x171/0x260 [ 2443.206067] try_charge+0xe22/0x1300 [ 2443.209803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2443.214665] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2443.219531] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2443.225609] ? __lock_acquire+0x6ee/0x49c0 [ 2443.229859] mem_cgroup_try_charge+0x249/0x5c0 [ 2443.234464] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2443.239438] wp_page_copy+0x3fe/0x1530 [ 2443.243376] ? follow_pfn+0x260/0x260 [ 2443.247291] ? __lock_acquire+0x6ee/0x49c0 [ 2443.251560] do_wp_page+0x518/0xfa0 [ 2443.255204] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2443.259900] __handle_mm_fault+0x21a4/0x3b60 [ 2443.264335] ? copy_page_range+0x1e70/0x1e70 [ 2443.268763] ? count_memcg_event_mm+0x279/0x4c0 03:49:54 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) accept4$inet6(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x1c, 0x80800) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x1}) [ 2443.273468] handle_mm_fault+0x1a5/0x670 [ 2443.277554] __do_page_fault+0x5ed/0xdd0 [ 2443.281635] ? trace_hardirqs_off_caller+0x55/0x210 [ 2443.286672] ? vmalloc_fault+0x730/0x730 [ 2443.290749] ? page_fault+0x8/0x30 [ 2443.294319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2443.299183] ? page_fault+0x8/0x30 [ 2443.302749] page_fault+0x1e/0x30 [ 2443.306212] RIP: 0033:0x411898 [ 2443.309415] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2443.328415] RSP: 002b:00007ffc5c858d50 EFLAGS: 00010246 [ 2443.333794] RAX: 000000008eb37538 RBX: 00000000789273b9 RCX: 0000001b2ce20000 [ 2443.341076] RDX: 0000000000000000 RSI: 0000000000001538 RDI: ffffffff8eb37538 [ 2443.348702] RBP: 0000000000000004 R08: 000000008eb37538 R09: 000000008eb3753c [ 2443.355981] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 000000000076bf88 [ 2443.363263] R13: 0000000080000000 R14: 00007f1b109b1008 R15: 0000000000000004 03:49:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x18}]]}}}]}, 0xb8}}, 0x0) [ 2443.390545] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2443.416959] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2443.475930] Task in /syz2 killed as a result of limit of /syz2 [ 2443.489407] memory: usage 307200kB, limit 307200kB, failcnt 1388 [ 2443.496304] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2443.523582] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2443.549099] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2443.593192] Memory cgroup out of memory: Kill process 29547 (syz-executor.2) score 1103 or sacrifice child [ 2443.614644] Killed process 29547 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2443.639441] oom_reaper: reaped process 29547 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:49:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e50, {0x4}}, 0x14}}, 0x0) 03:49:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000003626004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2443.755124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2443.791124] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2443.837681] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2443.875495] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2443.928011] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2443.943098] CPU: 1 PID: 30084 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2443.951169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2443.960619] Call Trace: [ 2443.963229] dump_stack+0x188/0x20d [ 2443.966883] dump_header+0x159/0xa5e [ 2443.970700] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2443.975822] ? ___ratelimit+0x59/0x573 [ 2443.979731] oom_kill_process.cold+0x10/0x6dc [ 2443.984253] ? task_will_free_mem+0x134/0x6d0 [ 2443.988767] out_of_memory+0x349/0x1250 [ 2443.992772] ? oom_killer_disable+0x270/0x270 [ 2443.997295] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2444.002155] ? memcg_event_wake+0x210/0x210 [ 2444.006500] ? do_raw_spin_unlock+0x171/0x260 [ 2444.011018] try_charge+0xe22/0x1300 [ 2444.014758] ? find_held_lock+0x2d/0x110 [ 2444.018836] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2444.023744] ? lock_downgrade+0x740/0x740 [ 2444.027942] ? check_preemption_disabled+0x41/0x280 [ 2444.032986] memcg_kmem_charge_memcg+0x7b/0x150 [ 2444.037678] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2444.042191] ? should_fail+0x142/0x7bc [ 2444.046095] ? __isolate_free_page+0x4c0/0x4c0 [ 2444.050727] memcg_kmem_charge+0x132/0x360 [ 2444.054983] __alloc_pages_nodemask+0x396/0x6a0 [ 2444.059768] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2444.064815] ? _raw_spin_unlock_irq+0x24/0x80 [ 2444.069344] copy_process.part.0+0x3d6/0x7a60 [ 2444.073855] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2444.079059] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2444.083651] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2444.088861] ? __lock_acquire+0x6ee/0x49c0 [ 2444.093122] ? do_try_to_free_pages+0xd13/0x1090 [ 2444.097911] ? __cleanup_sighand+0x60/0x60 [ 2444.102158] ? mark_held_locks+0xf0/0xf0 [ 2444.106263] ? shrink_node+0x1350/0x1350 [ 2444.111381] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2444.116428] _do_fork+0x22f/0xf40 [ 2444.119923] ? fork_idle+0x1e0/0x1e0 [ 2444.123656] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2444.129562] ? check_preemption_disabled+0x41/0x280 [ 2444.134602] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2444.139458] ? trace_hardirqs_off_caller+0x55/0x210 [ 2444.144501] ? do_syscall_64+0x21/0x620 [ 2444.148497] do_syscall_64+0xf9/0x620 [ 2444.149915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2444.152310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2444.152322] RIP: 0033:0x45f219 [ 2444.152336] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2444.152342] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2444.196463] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2444.203746] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2444.211021] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2444.218436] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 03:49:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x28}]]}}}]}, 0xb8}}, 0x0) [ 2444.225827] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2444.235601] Task in /syz2 killed as a result of limit of /syz2 [ 2444.249243] memory: usage 307180kB, limit 307200kB, failcnt 1410 [ 2444.265673] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2444.272589] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000064004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2444.316034] Memory cgroup stats for /syz2: cache:0KB rss:224KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x30}]]}}}]}, 0xb8}}, 0x0) [ 2444.381140] Memory cgroup out of memory: Kill process 30084 (syz-executor.2) score 1103 or sacrifice child [ 2444.394210] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2444.416907] Killed process 30084 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2444.433092] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2444.458126] oom_reaper: reaped process 30084 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:49:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e51, {0x4}}, 0x14}}, 0x0) 03:49:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000000c2004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2444.679647] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2444.721354] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2444.749768] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2444.759759] CPU: 1 PID: 30105 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2444.759989] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2444.767667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2444.767672] Call Trace: [ 2444.767694] dump_stack+0x188/0x20d [ 2444.767713] dump_header+0x159/0xa5e [ 2444.795692] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2444.800819] ? ___ratelimit+0x59/0x573 [ 2444.804734] oom_kill_process.cold+0x10/0x6dc [ 2444.809265] ? task_will_free_mem+0x134/0x6d0 [ 2444.813814] out_of_memory+0x349/0x1250 [ 2444.817827] ? oom_killer_disable+0x270/0x270 [ 2444.822350] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2444.827220] ? memcg_event_wake+0x210/0x210 [ 2444.831571] ? do_raw_spin_unlock+0x171/0x260 [ 2444.836091] try_charge+0xe22/0x1300 [ 2444.839828] ? find_held_lock+0x2d/0x110 [ 2444.843898] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2444.848762] ? lock_downgrade+0x740/0x740 [ 2444.852928] ? check_preemption_disabled+0x41/0x280 [ 2444.857964] memcg_kmem_charge_memcg+0x7b/0x150 [ 2444.862654] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2444.867158] ? should_fail+0x142/0x7bc [ 2444.871061] ? __isolate_free_page+0x4c0/0x4c0 [ 2444.875653] memcg_kmem_charge+0x132/0x360 [ 2444.879915] __alloc_pages_nodemask+0x396/0x6a0 [ 2444.884625] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2444.889697] ? _raw_spin_unlock_irq+0x24/0x80 [ 2444.894208] copy_process.part.0+0x3d6/0x7a60 [ 2444.898803] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2444.903912] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2444.908511] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2444.913624] ? __lock_acquire+0x6ee/0x49c0 [ 2444.917867] ? do_try_to_free_pages+0xd13/0x1090 [ 2444.922813] ? __cleanup_sighand+0x60/0x60 [ 2444.927052] ? mark_held_locks+0xf0/0xf0 [ 2444.931119] ? shrink_node+0x1350/0x1350 [ 2444.935193] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2444.940232] _do_fork+0x22f/0xf40 [ 2444.943705] ? fork_idle+0x1e0/0x1e0 [ 2444.947426] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2444.953316] ? check_preemption_disabled+0x41/0x280 [ 2444.958346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2444.963108] ? trace_hardirqs_off_caller+0x55/0x210 [ 2444.968144] ? do_syscall_64+0x21/0x620 [ 2444.972150] do_syscall_64+0xf9/0x620 [ 2444.975970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2444.981174] RIP: 0033:0x45f219 [ 2444.984374] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2445.003457] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2445.011181] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 03:49:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000002c00270d3d6470000000000000100000", @ANYRES32=r9, @ANYBLOB="60000000000000000000f1ff0c0001007463696e6465780004000200"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000013800)=@newtaction={0x9ad8, 0x30, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{0x38c, 0x1, [@m_sample={0xfc, 0xb, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x9b, 0x0, 0x0, 0xb5bd}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x66cb, 0x9, 0x10000002, 0x10000, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x5, 0x4, 0x1000, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x87, 0x6, "86684b4e096272f1d9edf157f546d5fdad2ee3ec245f0a2d0164a63c2dee1e6b8d8aa2c976ac109fbc1b9c2d0071e14079c47bc12d8c1d3d51fea5e0c6788aa65a3055d2feeba71ed7c4417418632ebbe76d9ec053397bf459358fa659242c3c29062d57d2a4cc89b940510b2e0aff4981b527469bf95ea3188ec637d062caeef2c458"}}}, @m_bpf={0x12c, 0x19, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0x5, 0x9, 0x25}, {0x6, 0x3, 0x2, 0x72800000}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x7fffffff, 0x30000002, 0x6, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7f, 0x1, 0x0, 0x8, 0x5}}]}, {0xbf, 0x6, "ad95f14e1884d55de30375d45154f92814a07af6aabb7e92012e22e9486c2ee031022310943c1c3e45ce9abe38a10402f68d89362d4af3b9044384bd49c2afd31df39c69f1d0019681be35eed0082bb520679866fbc54fb3dbd0ea26433d0364ba3d5e63b1583c04cd08f7fa9b10adbab356cbf60b9515821b153915beaf08ba9ac8182518193cd59bed29b70ac03c9b9c027fa5e79a9303d1e25a525141ba7e0e84e7118bb8d93430040865257fcf1deff0113239038f0d8bd544"}}}, @m_sample={0x58, 0x1d, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x101, 0x6, 0x1000, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xa, 0x6, "0aab1ba666ee"}}}, @m_connmark={0x108, 0xc, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5868, 0x80, 0x10000000, 0x2, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0xfffffe00, 0x3, 0xffffffc0, 0x31}, 0x416}}]}, {0xb6, 0x6, "c91e4446cd72bcc99ccaf7055570d6d10ea02976458ee7bc9bafd8728d5a99317d6b91825bc8785efab78ff6380e4b40bebf3ffae987a923e68607c8c4381cbac2d97db1ba30abc0792dc1087fd8690a6659fc7d999c40ec3e1404ed932339c2a4582df1116fb278f4c8d0c88b2feff2568c236ef8aa2dc8e6ffcc9c6edcf453fe33efda2ecd613d7cf5328be9d6e2139ca709a46249ad142c27c45c50fcc522bb0d6abb4bef61424b364de486ce6c15c174"}}}]}, {0x1500, 0x1, [@m_nat={0x148, 0xd, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xb06, 0x7, 0x8, 0x20}, @multicast2, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8001, 0x20000000, 0x7ff, 0x200}, @remote, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80000000, 0x4, 0x5, 0x2d}, @empty, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0xffff0000, 0x3, 0xfffff2d8, 0x7cd0}, @rand_addr=0x100, @dev={0xac, 0x14, 0x14, 0x39}, 0xff}}]}, {0x98, 0x6, "ce882f38f840544d305b6be544be23d97121277c4d01342ca0c3876d5616b922eea11b6cf417f858f31db9f229bdf116d0a5729bb225751d49cd7dfc3a3d50cf70ef026bc59ffc3d60043324aac8366035bfef2de754d23e0898ee37733e6e2a8b1776b1c01e94f6eb972a781da51b648950e033b026dde3a89d6f38c77444de6432ad9e3cd1e6bf7363e37c3c7d4b8c6470ddc0"}}}, @m_tunnel_key={0xe0, 0x1b, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x767, 0x4, 0x6, 0x80, 0x3ff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={[], [], @remote}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000, 0xfff, 0x0, 0xfff, 0x7}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x46, 0x6, "216ab4c7750179507cc646cf0c7d64ca704dbbed827e59ade36c5cc8e0935d523e044899196b1632a4cea4dfdd9992003ab95637bf0d80ab4afcddc8948f3002e66b"}}}, @m_bpf={0x108c, 0x16, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0xb1}, {0x80, 0x20, 0x6, 0x8}, {0x100, 0x4, 0x80, 0x7fffffff}, {0xf896, 0x4c, 0xef, 0x2}, {0x7, 0x1c, 0x4, 0x8000}, {0x8, 0x6, 0xcd}, {0x48, 0x80, 0x60, 0x100}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x8, 0x0, 0x7fff}, {0x7, 0x2, 0x4, 0x3}, {0x1, 0x1, 0xf, 0x2}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x1004, 0x6, "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"}}}, @m_ife={0x78, 0x13, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}]}]}, {0x3f, 0x6, "621779bb64fbc914e484897acfe6ce9aee188cd0020af3f3f343966a96d7d677bdea65ae14119aaec05dd87e2995b8ac619e98b5733b042d693f61"}}}, @m_ct={0x20, 0x20, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x7, 0x6, "7cef1f"}}}, @m_ife={0xfc, 0x9, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0xd3, 0x6, "f4cb4af3b083c950d22a19847c486e5100bb05f291aafb81ee4c550ecd8679ac572747297ad69a9d922d1bacfcbedc7b186943e73b0c99ada1e297b7211c34597d0dd6a22f5d12b2c125b9ccab091a61368583c558800bf9ddd0414625810cab6f735535e408793c761618e76b2c9c907debb81187c028c7fea69ff419f3aba8590463b34b528a5ce0807514c2bd24dd4f33a2cf1bae4ff2aaa62fa9fa92a7bce4fc7b7cc919d6422312380cfbe44b6dabfd3151fae214aa75b19f75215a522b698d2f450d181459f4efa0f489f8e8"}}}, @m_vlan={0xb4, 0x1e, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbe2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x86, 0x6, "8bca37ce31c341137ed2864480bb199c8010508cbfd46bcf949cb17c61aa64c66a3c8fc70e04e9564f4514289a70646db46f84280c4af2bb642c8455cdf39defc633802ffef6e921c275fbb008c11e9a6b46685ad29ce3960db16ac12122cf77b12deeb8172381523a668a559d308db305560bfea684aef0c065338ed5bff7a1e2c1"}}}]}, {0x4534, 0x1, [@m_sample={0x1060, 0x19, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x975}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x73d, 0x9, 0x4, 0x100, 0x9}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x1004, 0x6, "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"}}}, @m_ipt={0x11d4, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x113c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_TARG={0x102a, 0x6, {0x5, 'nat\x00', 0x5, 0x4, "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"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xfa, 0x6, {0x3, 'filter\x00', 0x8, 0x6, "8d40e27f1275041226d430bb374e9d5cbd2200c2b1ca2d596db7d5335b29d7e9f631d5dbcb3a5ea4f5cf95aa2e4863e25ecf2c7611f578ba669b37b909bdd86feac08fead9810ec11d004db6b6e03f9d0b7d3e2f4fb328d47ad6c8eec6ece51d9e5615452e83df140ccc5304d85dbf02c64468ce886f511b1fef87650efeb6b06bedeb0c436f11464c7eaa6432631d91b77bc7a211ef49ce2c2f85f851cdaa25802294a03613961bf9d2e66392ba7c72724877b08d1c0225d88667750f6d18c8dcf950c0128d06570525e0377aa4f2ff"}}]}, {0x89, 0x6, "33153eb24165248608ae5de6ae92af76f0cf9693ca1f3cd65ade6f945eb55cda1fe8ff38b364464194004a14524c7cf77a5b635727abcf527f6405cbc62a8a47e6e54b3126343f601f2818be8c3d60ae69708188930df61a8d75ea9c811cf721ac3a79e7e91a430e73c97d430410dce554e34ec5e861ff45a380169256082581ab6512ecd6"}}}, @m_mpls={0x74, 0x1f, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x12b5c}]}, {0x55, 0x6, "180cfab22b2ea0d412a7eec2ff63aa517f7cd33785f38a5c166772306dba4b569753f75b1f03a0696a760d026ecc598be9b3daf7c14a6f63edfcde3688183a46a9fdb1438eeb34129fb2c3ba4a476e4c01"}}}, @m_vlan={0x108, 0x3, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xa769, 0xfffffffe, 0x0, 0x8, 0x6}, 0x2}}]}, {0xd8, 0x6, "4266657263b785638b4e46299238af3e4e2d5b311ec4c49774401a522fbd8338c9488ebc954bb9a876c1083327a8c2075e6265d3e95a0d9cbc0c1c4eb0564efaa9fe0cd58e61fd26fea74b960aeb02ff318d85850028085a1a4b55dc21493a7371d78dc5a757a9a3406b707a9fb285b14ba849b46bbd0c6acf9a26b708c3b68ac0c32044830ba7a4e8066f4a60f87fd8d395110e67acb893b4a85d641e2811ad5757d3d683470e47d81a3f3365d4ef54eaf7e1fef8087aa05f7b2f4100b794481a018b11cb39b3df0654012718d2b900f8da39ec"}}}, @m_mirred={0x1078, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0xfff, 0x3, 0xffff, 0x1}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x4, 0x800, 0xfffff31a}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x0, 0x20000000, 0xc5e7, 0x5}, 0x4}}]}, {0x1004, 0x6, "193864a76e29b708a1b83a4db3c0e0cb9ba0e4c5fe4627c153beb05e745dba6270a32f35d616eaac0db8d1e840e32f57c12bc850a0d519e77e243dc918870567374d3460b8b37353b5072d58fa4aac0087f02176a2cf08529e09bf9b778defbc6e97b2bcf2232ff586051f51830417c757f43c7ccae537adeb9dabe46eef2799435a71f0c414bd50913afcc4905cdd75e3c80ee545a32f97c09884c5ff9b12f341c3d4d8fa26af26c520ad602c2ec8aa2e552116d47f6790e26796d5edcf81cae65db8edb436fdc22a76ffd47ab26b1ec2096a3ec72dd284d59186f384a74d2241a7199fcd060054f7296489c64ce5ef3e46580a543b4f6573c0645575d2b018bb86bff47395ed0939c10170d84d324b48232e87bddaa8c05123d8eb75d4b12dea949e55c4a4f85471fa726336f04b1f0a271d0d1d3f38e57d6f3f40d837e42359f3efc257313400448c6ef34ad26393b08b9522d838bcd8924ba504308e4d5e8de0afd76c3bde40e759294f024ac9235ce8df3e1fb7eca317ed46eb39d3a68ed6de6c8ddcb14043d7b4156efac6cb93adc37e01620d812ccd588c990eb7f334b0d46b36796974a6f03a62783a4165fea98faa94977f20b8f3441305aa7b0270480753812edc4534fea0c0b18945350277538e2bc94417f50c96bcce7ed13afc29fc08c90f86f62ef575da88dafe82bbf4d1863e9b53e9e07f7618e7209644dca0192936b265ebaabd3b671cd343c2a9c34f775eb17e48ae59d7f6a637f1c34d5d22461e06d16a4b835cfd6959e05daa496a7f3a649970b8f131e56c9e2c49af4c19784cf5f119891a20a74b7fba4302e12eac08ddcfa2b4eae9565c5be1737ccb1533034c8f405d91cd9959c4105ae9ff71a6ae1d94fc32fe98b89eacbcac3ac78b1eb6550a64f95ce8d687cf682b67b99e2f0d62f699be68157e2ef5002d03e0e12437b5d5603734fab086e4bbb77a24d24a0d0581bb13afb0d5d9052afdd3955c4b9db8c674a6bd1295960ac1435a6584831d66668a30d2a9842ea0b0df785de84452408694a82f085b4c2a5c461ec537e14d6c3f1eb6c77a3ada24edf1c37fc8a980644b7aae002cd64415e9417331c22ffeb51af5cd11541054eb540ea8077c3d2c95ae40722559ab7058a20f8656c7600e4cd85640dd0a508111a7039e51620a4c4165ee67e256baabb8831c87f6a523cc8744568d497f761d1e30d3ff89a0231f9ecbd9db76eb592ea98d2dbb9ff99cf1def450928069b90e2d763e447d9ec66a5316e86e2c70fcee8ff8dcb661e4993bf58eefe2699c29aebfb38c845ba861863f97f6dd4bd609c8005893de8f7603fc6f71aef383d9fee015311a445bd4a9b749e4c1a36dd800d724ce4e59bb759b6b55a46a8b9404fecf6ab0501938d11260cfa6a962e5e7187ff56c438c3cdbeaa660c2b26200bba269031e91f7f2306d5ab7e1e50ff029f3751b89eb9b532a5c41ff84036df3133280bf1859897a85435edafb4ef46dd205999a205785fc95a80671aca34c09e2272a42939f38825f906f9542074cb5b7922b7f9463f76fd8a0a5a02a456dddfb3ddb42fd60bca020dbd53273ee14c8b19b4961e0d9964f01ffd49de67933b36c9291206ddb8adde618a2c2483fd4ee7ed313ee8b2087aefcd82b03c3cfda9f11dd9a1bd8a728d0d9318e2c0f170a0311e7a86902b66db307b13f56e14be0c6a13264aa74d55ff3c27a508cb0cf3fc11c32c2f16f1a19b50183c74c4516c03b2577ad94d10815e5d92bf076b99ec6746a8bce38951809b767df75576864117763150d80226f246e60139f7cc1f9e65cb1428625bb98b6c93d3e73dc72f494c0c503f8a0195d80f79fc81507742ac17f89aa3c420372be0dfea2a9c4642c209ef201a6497999b46e40e8e88c0655d355642f528688b2647064adfdafb3f8cfc6f091b7187157e2bf195804f11ad9469ab33f52c48370927fd01e91f027410069d805869e6f89e0138c2e9482de599f8c5fdceb3430f432513ef4647b19881dde3effe4baf12972eab9491a91f22bb23059bd951d37609ecef3a6b8d3839c61897a2f05d83c02400dd7274f0a2fbcc1cc1fd0dcf2d72f75598fb35844dc4250a97b2b60382fb398b87c6bd6de35b44231371407a570886afa7f15217e659c07639d184a81c41a74b219ed1e0c4d46afe8802c16661300fe9a725c83112ab57dc05a9257b83ffff38b72f587579e16626dc09d28c7ee7319f5920b1dba71ffbec67e5814ec921cab90205f714f6ec61108b671f6128d06d69058e748aa3f68558ff8ce3270187fa495ddbf64de94c3e8f9ba66ad40030cab0d1c5a5889f587cc59cc34ff6a1d0dea17c22ef98d3e1bafd36f71a0a7f5f58576bb92a041262b6281b3891e7ed3697692e2ae89a783653ed471697f791ee9994a8b5eea44d65f08ad6d35ff937df400beaac9d82cc298641224c390e6b1d351420cabc53684636f2d5fb0f04ace610d5b713276a084b131ce7c8e1aeb59b7629491a86f99ad0f53540ed12fdf4d9958442b0d413096709f184b45824d3831cd7b645843ff582e0d511be5d68a3c73f4c114c2e934e16a769af21d83c6d259b5f40e3a41cd6d5e5187e56e31f9d00459f2218381d758387428514c90a9059cd4127095b6dab4803e751ec4f11982b17436a3f8630aa425c407d17ff3ee08ce49e2d3519bd7d32984aefdb206c69e84034ad53162ccb3b7075603087602dddc1be9b96bf35db95fbaa1d415bb1941aa64c65fa31fa696f981c7b00610a73137d9db3fe05d3d9f522c2f662881f0d000a8b3a39050041d1dfabcedc0f983031073d1dc3cb9ff6dc2013c18aa62006f92e6dd71a12ea48f23efce0a4ae4213e00b34c50d6ad8f29a1906fce61490b14cba11bdeab3961c45f40ad11a4ef6740eb674ceae4e1c5cdf8f91947511dbe4f793fa4a3b36273bc19fb2d21f7d7adbab1cc84746d06c6763113f2c55255b3796b113260e4187682b090899bec13a1813afed8074201e7735f9b11419cce55c3794fed008ea103216468bfa1352b051a814ce793270a8ebf21e51f99283732eefc59bbd75ba839ed3596454b257af439b7799655f2ebd4cc727d85ae17f4091f886d3b482bbb6224cb677013cb27481f173abcaea84e5e0fec887995e3762827d5cdb79aa3bff201884be695136985fd7b0dc40dfb19458cea76c6f1ec2a1790ee273600d5c9f81b1c9570aeb85258f6f509a16f11e254cff2a5a35829c9b88ab49296fada7d30f5687601d94eda67f4ae162d7ac8f010c1cd0daee211386d5c40a91115c310a35d310a1eddd837cf91a1bc4c5069e9e6d62c475ade1241a60fc80d3db6ea0e8b77a8008f80df3eaf6bdbffa2dad07ec686d5049e5acbcc603ad97e2ae6497398571277e657c4e9068690f5b345448df9322eb684a478bf67780e4261a97c5bebf836bcd83c1dee0a8ba4f167f6182916983fbd7bb37c1e4af892aa9a19d6ca430d409bced23fc1faa5f39bddd0fe0670e26341863505e4aafa944edeb511b2f284d4f359f889d17ff770b8a008367b921b853648999bd9070900c6e3f570c8cdfc94407acf67ef08f3abd8e1a1f3338358d6bd6a8669d193025abb68458fb8784d51b955a969d1faf06390d27658171d832297dc2a5a3eaa689d61b9bdcacc0e2dbb8afa6edc943b7dd012864ecfc27d655f6e23c83fd8a662787e2ded7e0d790ac6fb52a4c3337fa6c3145d13647a372c0717cef0caeb527b0df7dd4e13314326c68316434a330c4ca125690fc70f4090502cbf3774823980c6359867a8b849132d5bd77b7c257a194492b6ceb042d21d0c28822b92d067759dd6524c0e8fabc628c85968c71d9f84f76ab2dd1bbd3da3a852dd6ba0948473f5e19b6b720227d44b22e2bb600afe2b467be105bfa072146af38c8130bbc07c502c8ffcb07069c8b2ca816e138f13bf83971bd5e044943f7919ef91c3710f9061e6200d5d56584fc046d035adb2f1aa3d17691093edc864d6cb4f391f91f8d0bd1b2a76354a19a6cf082cef93e03b2676616eb5d71059f8a3827be698f3252aa406125c17c8de9afbd01cdb1a98ce9b6b19ee3fcfd3dd6baf69537b6e7bbd3439590e379194709fa209f01ccb31e001913a71a63e24f311337466277bb7904df6b33b2c1f6a6d719b6e09976f4414da3c128501518f8f765b8739eabd223542268248a1dc3bba7a1d9ca96269413b437540b122cbd51581cac7232434285779032250fb51b315501a8fa9a155a71b1568a827e0f96c35558acfc65a7ac8830d6da7255e60ab99a8d14330a96f3a47646db822a825c608a8862d7efd8c5e88a6691eb0f2a02451d5db48eb2e52be17022b3fb71f13cd38bb90467cd51a58ac86f91bcc7bc286729c582fc4d80b9f8869885e2360f1c8659edc18a2c7c99be93cec5956df7da40ded391d51e3d6a1e7d00286a806909a20b557655686adae9b2857d35f7df848212e250513bc4c686b21c40bd0674faf1892367e334b5b76997d624bf83c734d51af9b2de242bcb735605f7c010bef9dd0cce0be37496f16a68c596a00040fca995571ad2cfc1d3dc9f9578496ad1c1468c191ec8d734dbcbc483a538ec5540ffbdc04e10b6d584074f99f6d31180b9144667cdac71e248e27e14a000fcf99438062b1624b4380f5e1c79f2476d5a132c8a5d1536ec37ad7b0e43bc0053138d18d3171df96451a2ce380101bfcccb0dec7fa27b8b38cc3d7310ce4c7aa29223aa183dd7301dce01883f202db208c1b349bdc90e4b1f494cb1bd995185ad4d05a9017695d86b656dc5b6dd4082f372311e3860728af1554e53148b72393055ce8eae0fc289b04389f59d83fc1e3f26bc0acf7f9753e334e4539283cef8105b16855e79b626ec72c979c0fdfd100cf4ccc45f53117147b35e1e2da6771d919d3ce38cc9dfc9a52e13eb211a647a9cfd7ec3649bfc4299b78db72025266bc27428cb30acb820958a42ebd4e83abf9cde947212f506b088725e88d6aacdb9950837803e0d585713662386963f4d002605f28b9dbeaeb4c0865b637074ae8c652115bace6417bb5d804b61a2525ece2d0074e5258f99404ca6e72a6e6a261174d80c52ee28ad15a0833deec99b40ba8a49657902c53a4ce7ca46326f09a27398038b4dd6c1fc08e202fdb308991b8c1809ad9031645e75b1314df82c48b84facf5c75e7bfcff35702d36be85d876e43a6d294a47a2678feb55ce42552f40c3da679dd5c0527bd4d49d2d7aec286604f72ce170731003d29376315d4896836b07d7359ba7e1383faeb1c1cb2e5600f7769b4f4838f31f48247017d6609e505c5a117f81b5b4ed2817604e3fd370d22cd0cd75a1eea89ffce65ce3eac20997be76c1a3af7bc5d33adc43e5a49ece7aee688ee5345e39f0ccee14c09c5c3cef4d4112bf87d2b8917e76a462eaf8f8ce095e266791d3ed2ceef0394c1fe5478b4b236e0022a573904025c0be36b4553d37a22dec52babbc51f07e975ac03799c4db41e816ba418f9ee74e71862bc51510fcdab2005aafbf8e8309f7dfc06b4996eafa51280b74f6db2d763ff75f93e08751aaad246f0f77837f1ada0478cc25329865e1741882ed2854dfcddfd7272d149958db14b9edead8b2e215edb043dbe13420cd5e2e718f86f38014bf83a892986ed48f57e0c1a7c3994fd14e656a08f315d4529ed57fb8cdf8bbe65a56a6cbc9f83061c4ef15d18d05d0bb3d0c3a268e287e742c42b94df8c7fafc6b4e8bf1994a3439603029d372afe3a62134b05ec0"}}}, @m_skbedit={0x60, 0x3, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x1a}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd0}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb9, 0x101, 0x0, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x70c, 0x7fff, 0x20000000, 0x3, 0x695b}}]}, {0x4}}}, @m_bpf={0x10a8, 0x2, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x6ea, 0x9, 0x1f, 0x1f}, {0x8001, 0x4, 0x3}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x9, 0x0, 0x5, 0x81}, {0x3, 0x1f, 0x9, 0xfffffffb}, {0xed, 0x2, 0x3, 0x401}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xffff, 0x6, 0x22, 0xffffffff}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x1, 0x4, 0x4c, 0x10000}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x52e7, 0x2, 0x3, 0x100}, {0x2, 0x1, 0x3, 0x4}, {0x0, 0x4, 0x20, 0x8001}]}]}, {0x1004, 0x6, "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"}}}]}, {0x114, 0x1, [@m_nat={0x110, 0x13, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x400, 0x7, 0x1, 0xfffffff7}, @remote, @remote, 0xff000000, 0x1}}]}, {0xd5, 0x6, "e782c89f7180d09d61aaf10c47ab29531021c81e076595a63c9d5078162357a876dc501187441d4c8328367154664cda3926f27d1742022e88cafd1a1efe91a576adf5a98fa2ab0dd46ec5e75811ebc1dc7fc98d07727f4a2dabaf0c05987716eba9cd26189562fe4fa4019408cc50a0bb439011fa9ef70600377cf5c3585076dd0f76ae525257be09dfac3eba5b547e216c17b8d280bf4a29e1bdb71d540b211da8080c73378cd1d05e2f6d79c9bd59b0a43cc72e817a0609e0b66eb9ea7b5c0d47bb4533f063a2f9fb8dfe82a8b76362"}}}]}, {0x1084, 0x1, [@m_simple={0x28, 0x0, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x4}, {0x11, 0x6, "b7e56e510be5d1a7dc63eeb631"}}}, @m_sample={0x1058, 0x13, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xff, 0x5, 0x0, 0x1, 0x4}}]}, {0x1004, 0x6, "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"}}}]}, {0x89c, 0x1, [@m_ife={0x118, 0x8, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={[], 0x44}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={[], 0x22}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0xc0, 0x6, "729aadaa36aa10980e7df80ecf6eebb29359df3e02534e65e94f2b9ee163249bbf6d7f40f6f0efc2d291552cbd16e98545813365ddf67f5e77e166bd3aa6eabb009421fc2fcd670c3e8e969a40db49dc09754323a6966020fa526050a4d33c09bca0dddf3a832726858e0a21793822af2f22d24ec586435b076e1fa2654613cebdaf9f9c165a27bd50e5c18961489635d6ddaf8e70959563edde58e8d63816fb73e04ec04d6a317936ba8ea7852f9ac98d3e7eff08f4cc999f62463d"}}}, @m_ipt={0x204, 0x1d, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xaa, 0x6, {0x9, 'mangle\x00', 0x3, 0x8, "9bca82362e137912c14c521e02c63c812a1e91a1faf5238eaa2b0be90a42935b12902a6b5d90345baef68216eac628489649a7b5c65cdc3b0b1bfc6a822dff183c12c5af369c366408676703ef065a14f6b8168c285aad36b055283710d7580e1722d75def98f3f15c3c80e0de438eec8dc41d5d6fc62b748a31d5e7f79d1617"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4739cc1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xf8, 0x6, "93ef1b7dea72cae0b60924925507c8948d7b5ecb503d8b3468b8cfbc4301022902d4141f69f63dc887f71aeeaaf6a86a1248699775c5c78f1a1717a12c83cbe8b2166fca7e9f244a7ba8f18840ea5c2e6c23a42314c02de2a77763881db5913e47f5e7a708b2da824e4dd0816725444609bb90c060a4ac77411149806e4932ff89bd49c0e42dbecd420a4c612b48e554f74b86d29a3fc377406aefcf058a8ee1c9b5a2cca90ec0efa79b9af0267c3df372f04ea2521f6373927a088a8662b5cd62014b444f7af6d929e33abce424ce86e1a126e58967347b3e56851072c028078c172ab8ac13f8aea4d617197ab1098d3b038247"}}}, @m_tunnel_key={0x164, 0x3, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x94, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr="262c108b200efddf8fe300c93ca53ead"}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xce, 0x10000005, 0x8000, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb9a7, 0x7, 0x10000000, 0x7fffffff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}]}, {0xbb, 0x6, "a4ddfda496b9c08a2202c6e56f34b64d4f8542dc75390385b2369597e5037219b5d3e31fdbc6901e56aa413bcf6b760085e34b5c72de9353f0583066ad29e56ea29be0bccc23417dd8a7282d84df6964dd6f2d3760b0b087e63dca7418dd4e4b99795d26c3e3bb06e79fa502b8a5f73336fcfd214c4a3d842bc0392f21dd24bf71431c1ad675858f6a51e9978eb5983a4c35d68ca66be599d1a4f6c0dbb7f88093c5951c2f32e8d6ad719700952fb31f8bf353cf553fa0"}}}, @m_simple={0x158, 0xf, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0xffff1f8c, 0x1, 0x5, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3d0, 0x400, 0x4, 0x804, 0x9}}, @TCA_DEF_DATA={0xd, 0x3, 'vboxnet0\x00'}]}, {0x103, 0x6, "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"}}}, @m_sample={0x114, 0x1c, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fffffff, 0x7, 0x20000000, 0xf7, 0x80000000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x20, 0x1, 0xfffffff8, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x1, 0x5, 0x10000, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}]}, {0x8f, 0x6, "b60c59aea0b7df5baf9f49401bfa860b92530a134597c921da626577b174c6e21e724a5c4c80d058a34e8387bc96ae2fe29afbe6da24d80809e822f0c74bdc9ab4f3c7622c155dec9f0e3dd3d2c1032ec1ee1df3a76ba6546a148a997802f1efd159e99477ace3f8f371096adb0b8ec4239695bbfc21165474d5c9ebe8165cb93e204ee3345b9d9e75ecd4"}}}, @m_mpls={0xa0, 0x13, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x98fb, 0x7, 0x8, 0x4, 0x9}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x20}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x20}]}, {0x48, 0x6, "fb99348134fba6c1c68e45ec02f15b047e3a869522061204c029b78b8d5ada323b0d10775cbc6420143bb839de20320ac64cb8aa4d4522fc552c50cc654336248a6d3c10"}}}, @m_skbedit={0x10c, 0x9, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0xed, 0x6, "0d45dbf9121150fab6e1a663b72920082c24246617e15c2ce0a48ff94c59507b5a99aa0ba433fb340499d815dfd6e87c8d369579f4fae17ea74f55b51c6e079e5d9e17502c7abfc95172405faa07460431b91919dbfd81c8e2c8352c0dea2a70ea7a7aea38217d4e24686c4640c50aae545f566b7b0b36a10de02a6b78308ba1eebe9f7c7848ca43f66ff118c83a4e4a2413cbb1e6787f3058b140de5ecb565d0bb6fa712507744a38ae84f4b5a856ee2e25c5365372e6f8c6ced61769773763147713e460583f8017ee2d356aa1ab7d4ac95253275472e9f67dce53dd2e81a280dd6ff8ca72ffc4eb"}}}]}, {0x22d0, 0x1, [@m_mpls={0x105c, 0xf, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x2, 0xffffffffffffffff, 0x10001, 0xd920}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe902c}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x1004, 0x6, "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"}}}, @m_gact={0x138, 0x1b, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xd2c}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x468}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x714, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2024, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1634, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x33a, 0x5, 0xffff7fff, 0xffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x4, 0x7, 0x8, 0x1ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x1, 0x0, 0x3f}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1216, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1f4c, 0xffffffffffffffff}}]}, {0x86, 0x6, "87ff94b53e0e3f9ea2bc986608e604b791fdbdd72dde4d1c10f97427ed6145cda09f71cd7302ba2296768e7e4c9c38f4a3c37f7a7f2d2622a92822e63a6976c5a29b0229510e909fd6745af2776744e62b76583ca2e10750c7e8660c242924cf6f23da350a00149069ad6c551090e8f082226079644549eb3105b9d00d821bf8ccbf"}}}, @m_mirred={0x1138, 0x12, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x8, 0x1, 0x7}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x420c, 0xffffffffffffffff, 0xff, 0x14}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x5, 0x41d, 0x8bd}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x575, 0x100, 0x0, 0x0, 0x8000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x2, 0x1, 0x400}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6f4e, 0xde5a, 0x8, 0x20, 0x7ff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0xffffffffffffffff, 0xbc3e, 0x40}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x7fffffff, 0x20000000, 0x9, 0x58d7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x28, 0x6, 0x9, 0xffffff70}, 0x3}}]}, {0x1004, 0x6, "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"}}}]}]}, 0x9ad8}}, 0x0) [ 2445.018458] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2445.025739] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2445.033039] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2445.040313] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2445.108765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000102004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2445.179439] Task in /syz2 killed as a result of limit of /syz2 [ 2445.199411] memory: usage 307184kB, limit 307200kB, failcnt 1435 [ 2445.213466] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:49:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x38}]]}}}]}, 0xb8}}, 0x0) [ 2445.229190] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2445.237685] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2445.258816] Memory cgroup out of memory: Kill process 30105 (syz-executor.2) score 1103 or sacrifice child [ 2445.268898] Killed process 30105 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2445.281524] oom_reaper: reaped process 30105 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:49:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e52, {0x4}}, 0x14}}, 0x0) [ 2445.335707] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2445.392563] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200000000008d7c94159db1b91f7a516e65ec301b562d9c245ab89be87af211e4d713dc61997db133"], 0x5}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r7, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="f9ffffff020000005bee7ff5"], 0x24}}, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) write$cgroup_type(r8, &(0x7f0000000400)='threaded\x00', 0x9) [ 2445.508103] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2445.555759] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2445.564780] CPU: 1 PID: 30127 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2445.572700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2445.582068] Call Trace: [ 2445.584686] dump_stack+0x188/0x20d [ 2445.588339] dump_header+0x159/0xa5e [ 2445.592169] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2445.597292] ? ___ratelimit+0x59/0x573 [ 2445.601206] oom_kill_process.cold+0x10/0x6dc [ 2445.605719] ? task_will_free_mem+0x134/0x6d0 [ 2445.610239] out_of_memory+0x349/0x1250 [ 2445.614236] ? oom_killer_disable+0x270/0x270 [ 2445.618854] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2445.623721] ? memcg_event_wake+0x210/0x210 [ 2445.628068] ? do_raw_spin_unlock+0x171/0x260 [ 2445.632599] try_charge+0xe22/0x1300 [ 2445.636371] ? find_held_lock+0x2d/0x110 [ 2445.640446] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2445.645455] ? lock_downgrade+0x740/0x740 [ 2445.649627] ? check_preemption_disabled+0x41/0x280 [ 2445.654695] memcg_kmem_charge_memcg+0x7b/0x150 [ 2445.659396] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2445.663916] ? should_fail+0x142/0x7bc [ 2445.667830] ? __isolate_free_page+0x4c0/0x4c0 [ 2445.672435] memcg_kmem_charge+0x132/0x360 [ 2445.676698] __alloc_pages_nodemask+0x396/0x6a0 [ 2445.681395] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2445.686450] ? _raw_spin_unlock_irq+0x24/0x80 [ 2445.690971] copy_process.part.0+0x3d6/0x7a60 [ 2445.695495] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2445.700632] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2445.705244] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2445.710388] ? __lock_acquire+0x6ee/0x49c0 [ 2445.714641] ? do_try_to_free_pages+0xd13/0x1090 [ 2445.719429] ? __cleanup_sighand+0x60/0x60 [ 2445.723688] ? mark_held_locks+0xf0/0xf0 [ 2445.727767] ? shrink_node+0x1350/0x1350 [ 2445.731856] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2445.736906] _do_fork+0x22f/0xf40 [ 2445.740390] ? fork_idle+0x1e0/0x1e0 [ 2445.744300] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2445.750204] ? check_preemption_disabled+0x41/0x280 [ 2445.755239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2445.760006] ? trace_hardirqs_off_caller+0x55/0x210 [ 2445.765046] ? do_syscall_64+0x21/0x620 [ 2445.769041] do_syscall_64+0xf9/0x620 [ 2445.772861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2445.778064] RIP: 0033:0x45f219 [ 2445.781273] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2445.800192] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2445.807947] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2445.815233] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2445.822606] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2445.829984] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2445.837273] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2445.872878] Task in /syz2 killed as a result of limit of /syz2 [ 2445.882399] memory: usage 307184kB, limit 307200kB, failcnt 1475 [ 2445.888671] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2445.902900] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2445.921773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2445.939922] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB 03:49:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000103004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2445.984541] Memory cgroup out of memory: Kill process 30127 (syz-executor.2) score 1103 or sacrifice child [ 2446.000306] Killed process 30127 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x39}]]}}}]}, 0xb8}}, 0x0) 03:49:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000100)="4b956a2032cb9f2990ea0ed2eba2491662c852633dddc6e6bba7990495861af52e7eca11228d75015eab0d7768f4345911795b3cf87cf520471ad7e40d3eb411d456daeefd10934965a2236b8dc5defd7d151bfd84b16df898cf8d686af4312187b77cdb0305256c6ca8ec60adf655a4e69088310eb9398f7de0325886f4a6278b4b540167a7c4334e0cd9eed44483365553a1b04616e5a173dc609ce2705264ca3ced4d148922c9040a9f7755b3ebb150241c", &(0x7f0000000380)="e79ead0402ed3199a7b6e28aaea3074705db85fbaf693fafa370eb2ae074c84f13079d4b80bea4c681dfa72f98cd9e28aab85e2ce4fbb8c53698fef71b4adac1dbe9336893c16216619d13817bf686dd2456ea32f1fd7381f1156008a4b7ea2d68ccba3967ae466acbee0fa55d9297d9c79b2ff0e087cf4d2c68e4c7f266403519811c7068120f133a77868ce28bcdbf52fada2959775f288350fca4aa558807858c3193f2d6e62179f7ffa7b7d5cf0a51f5b088a339e8216c85a6a92b87ec4cf5829313cb48708bbf252a8ff2d68464a62bbb5d2904e2d85cb5773ddbc87e979a0fb199d565373b"}, 0x20) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2}}}, 0x24}}, 0x0) [ 2446.077253] oom_reaper: reaped process 30127 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2446.131112] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:49:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e53, {0x4}}, 0x14}}, 0x0) [ 2446.180712] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x240, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000b06010200000000000000000300000a0900020073797a30000000000900020073797a320000000005000100070000000500010007000000050001000700000014000780080009400000007f05000300005b13fc543294cebd6604ef0000000800094000000009"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000a9720200000000000000"], 0x24}}, 0x0) [ 2446.354307] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2446.402246] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2446.421395] CPU: 1 PID: 30148 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2446.429326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2446.438740] Call Trace: [ 2446.441357] dump_stack+0x188/0x20d [ 2446.444239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2446.446214] dump_header+0x159/0xa5e [ 2446.446236] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2446.463539] ? ___ratelimit+0x59/0x573 [ 2446.467448] oom_kill_process.cold+0x10/0x6dc [ 2446.471966] ? task_will_free_mem+0x134/0x6d0 [ 2446.476483] out_of_memory+0x349/0x1250 [ 2446.480477] ? oom_killer_disable+0x270/0x270 [ 2446.485004] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2446.489857] ? memcg_event_wake+0x210/0x210 [ 2446.494194] ? do_raw_spin_unlock+0x171/0x260 [ 2446.498700] try_charge+0xe22/0x1300 [ 2446.502426] ? find_held_lock+0x2d/0x110 [ 2446.506496] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2446.511349] ? lock_downgrade+0x740/0x740 [ 2446.515504] ? check_preemption_disabled+0x41/0x280 [ 2446.520556] memcg_kmem_charge_memcg+0x7b/0x150 [ 2446.525238] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2446.529741] ? should_fail+0x142/0x7bc [ 2446.533636] ? __isolate_free_page+0x4c0/0x4c0 [ 2446.538227] memcg_kmem_charge+0x132/0x360 [ 2446.542476] __alloc_pages_nodemask+0x396/0x6a0 [ 2446.547152] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2446.552182] ? _raw_spin_unlock_irq+0x24/0x80 [ 2446.556692] copy_process.part.0+0x3d6/0x7a60 [ 2446.561191] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2446.566311] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2446.570906] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2446.576017] ? __lock_acquire+0x6ee/0x49c0 [ 2446.580346] ? do_try_to_free_pages+0xd13/0x1090 [ 2446.585121] ? __cleanup_sighand+0x60/0x60 [ 2446.589533] ? mark_held_locks+0xf0/0xf0 [ 2446.593601] ? shrink_node+0x1350/0x1350 [ 2446.597676] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2446.602702] _do_fork+0x22f/0xf40 [ 2446.606166] ? fork_idle+0x1e0/0x1e0 [ 2446.609891] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2446.615779] ? check_preemption_disabled+0x41/0x280 [ 2446.620813] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2446.625596] ? trace_hardirqs_off_caller+0x55/0x210 [ 2446.630624] ? do_syscall_64+0x21/0x620 [ 2446.634606] do_syscall_64+0xf9/0x620 [ 2446.638421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2446.643619] RIP: 0033:0x45f219 [ 2446.646817] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2446.665723] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2446.673437] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2446.680708] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2446.687982] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2446.695263] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 03:49:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000104004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2446.702543] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2446.725541] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2446.764209] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2446.783239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2446.847249] Task in /syz2 killed as a result of limit of /syz2 [ 2446.863583] memory: usage 307192kB, limit 307200kB, failcnt 1497 03:49:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x48}]]}}}]}, 0xb8}}, 0x0) 03:49:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000105004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2446.904841] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2446.927435] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2446.964469] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2447.017509] Memory cgroup out of memory: Kill process 30148 (syz-executor.2) score 1103 or sacrifice child [ 2447.044976] Killed process 30148 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:49:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2387fe5963a76f5a1ce4c8bd50e9c684f1421ed049477607b3f11f052173bce8254b0e5db11b1127815055b48539b4027beed9919e6060bcd5ebaa75913153957f8de5d0b786c8efca34c59a1d24989f1d9afaf4ab2f81d80cc859f85fe1d5844fa6f138d74622bef5259dbd8203ce9f028c4fdc765f3bbd0b3131277c8843a751b31e2b053e98c127346d30a107c9d4c937d123eb8ec6f5ef536dab615f832826e93a2a6ce823a1c57560f561b3beecc3d82bbdfabe", @ANYRES16=r3, @ANYBLOB="00002dbd7000fcdbdf2501000000000000000941000000140018000000006574683a6772657461703000"], 0x3}, 0x1, 0x0, 0x0, 0x40140}, 0x80044) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x800000000000401) r5 = accept4(r4, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r7, 0xe48, 0x5}, 0x8) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a00270d00000000000000000000f8ff847e2c17bb1bccf2dfa40500a26a03fe31e714ac522ef21f3b", @ANYRESOCT=0x0, @ANYRESOCT=r8], 0x3}}, 0x0) 03:49:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e54, {0x4}}, 0x14}}, 0x0) [ 2447.073504] oom_reaper: reaped process 30148 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2447.095866] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2447.165341] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2447.265555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2447.303028] Enabling of bearer rejected, already enabled 03:49:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000106004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2447.378074] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2447.421900] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2447.452161] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:49:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x50}]]}}}]}, 0xb8}}, 0x0) [ 2447.470895] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2447.484462] CPU: 0 PID: 30176 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2447.492376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2447.501877] Call Trace: [ 2447.504498] dump_stack+0x188/0x20d [ 2447.508177] dump_header+0x159/0xa5e [ 2447.511935] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2447.517059] ? ___ratelimit+0x59/0x573 [ 2447.520982] oom_kill_process.cold+0x10/0x6dc [ 2447.525503] ? task_will_free_mem+0x134/0x6d0 [ 2447.530016] out_of_memory+0x349/0x1250 [ 2447.534011] ? oom_killer_disable+0x270/0x270 [ 2447.538536] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2447.543397] ? memcg_event_wake+0x210/0x210 [ 2447.547741] ? do_raw_spin_unlock+0x171/0x260 [ 2447.552249] try_charge+0xe22/0x1300 [ 2447.555983] ? find_held_lock+0x2d/0x110 [ 2447.560321] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2447.565181] ? lock_downgrade+0x740/0x740 [ 2447.569345] ? check_preemption_disabled+0x41/0x280 [ 2447.574383] memcg_kmem_charge_memcg+0x7b/0x150 [ 2447.579073] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2447.583592] ? should_fail+0x142/0x7bc [ 2447.588106] ? __isolate_free_page+0x4c0/0x4c0 [ 2447.592713] memcg_kmem_charge+0x132/0x360 [ 2447.596969] __alloc_pages_nodemask+0x396/0x6a0 [ 2447.601667] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2447.606708] ? _raw_spin_unlock_irq+0x24/0x80 [ 2447.611222] copy_process.part.0+0x3d6/0x7a60 [ 2447.615735] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2447.620851] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2447.625442] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2447.630734] ? __lock_acquire+0x6ee/0x49c0 [ 2447.634984] ? do_try_to_free_pages+0xd13/0x1090 [ 2447.639849] ? __cleanup_sighand+0x60/0x60 [ 2447.644101] ? mark_held_locks+0xf0/0xf0 [ 2447.648179] ? shrink_node+0x1350/0x1350 [ 2447.652264] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2447.657302] _do_fork+0x22f/0xf40 [ 2447.660773] ? fork_idle+0x1e0/0x1e0 [ 2447.664507] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2447.670840] ? check_preemption_disabled+0x41/0x280 [ 2447.675881] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2447.680655] ? trace_hardirqs_off_caller+0x55/0x210 [ 2447.685685] ? do_syscall_64+0x21/0x620 [ 2447.689677] do_syscall_64+0xf9/0x620 [ 2447.693501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2447.699048] RIP: 0033:0x45f219 [ 2447.702249] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2447.721289] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2447.729014] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2447.736307] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2447.743588] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2447.750871] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2447.758154] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:49:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000107004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x800000000000401) r3 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r5, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000200)=0x84) getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x2}}}, 0x24}}, 0x0) [ 2447.916169] Task in /syz2 killed as a result of limit of /syz2 [ 2447.946299] memory: usage 307140kB, limit 307200kB, failcnt 1509 [ 2447.961776] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2447.981776] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2447.985411] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2448.034742] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2448.131250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2448.142069] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2448.195188] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2448.236267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:49:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x3e, 0x2, 0x2) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400e071e8645b7a000000ffff08", @ANYRESOCT=0x0, @ANYBLOB="000000000200000000000000"], 0x3}}, 0x0) 03:49:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000109004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:49:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x58}]]}}}]}, 0xb8}}, 0x0) [ 2448.442590] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2448.509643] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2448.567517] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2448.605353] Memory cgroup out of memory: Kill process 30176 (syz-executor.2) score 1103 or sacrifice child [ 2448.632430] Killed process 30176 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2448.669230] oom_reaper: reaped process 30176 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:49:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e55, {0x4}}, 0x14}}, 0x0) 03:49:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000010a004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2448.789761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2448.869070] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2448.902058] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2448.924834] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2448.941510] CPU: 1 PID: 30218 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2448.949523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2448.958891] Call Trace: [ 2448.961854] dump_stack+0x188/0x20d [ 2448.965502] dump_header+0x159/0xa5e [ 2448.969232] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2448.974459] ? ___ratelimit+0x59/0x573 [ 2448.978379] oom_kill_process.cold+0x10/0x6dc [ 2448.982905] ? task_will_free_mem+0x134/0x6d0 [ 2448.987426] out_of_memory+0x349/0x1250 [ 2448.991424] ? oom_killer_disable+0x270/0x270 [ 2448.995944] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2449.000802] ? memcg_event_wake+0x210/0x210 [ 2449.005166] ? do_raw_spin_unlock+0x171/0x260 [ 2449.009678] try_charge+0xe22/0x1300 [ 2449.013419] ? find_held_lock+0x2d/0x110 [ 2449.017502] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2449.022369] ? lock_downgrade+0x740/0x740 [ 2449.026531] ? check_preemption_disabled+0x41/0x280 [ 2449.031570] memcg_kmem_charge_memcg+0x7b/0x150 [ 2449.036259] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2449.040778] ? should_fail+0x142/0x7bc [ 2449.044685] ? __isolate_free_page+0x4c0/0x4c0 [ 2449.049325] memcg_kmem_charge+0x132/0x360 [ 2449.053585] __alloc_pages_nodemask+0x396/0x6a0 [ 2449.058272] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2449.063309] ? _raw_spin_unlock_irq+0x24/0x80 [ 2449.067844] copy_process.part.0+0x3d6/0x7a60 [ 2449.072349] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2449.077467] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2449.082064] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2449.087189] ? __lock_acquire+0x6ee/0x49c0 [ 2449.091456] ? do_try_to_free_pages+0xd13/0x1090 [ 2449.096238] ? __cleanup_sighand+0x60/0x60 [ 2449.101182] ? mark_held_locks+0xf0/0xf0 [ 2449.105354] ? shrink_node+0x1350/0x1350 [ 2449.109441] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2449.114501] _do_fork+0x22f/0xf40 [ 2449.117975] ? fork_idle+0x1e0/0x1e0 [ 2449.121704] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2449.127606] ? check_preemption_disabled+0x41/0x280 [ 2449.132655] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2449.137429] ? trace_hardirqs_off_caller+0x55/0x210 [ 2449.142467] ? do_syscall_64+0x21/0x620 [ 2449.146468] do_syscall_64+0xf9/0x620 [ 2449.150287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.155524] RIP: 0033:0x45f219 [ 2449.158745] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2449.177656] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2449.185478] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2449.192773] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2449.200061] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2449.207354] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2449.214632] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2449.228465] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2449.279826] Task in /syz2 killed as a result of limit of /syz2 [ 2449.286074] memory: usage 307180kB, limit 307200kB, failcnt 1530 [ 2449.297461] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x60}]]}}}]}, 0xb8}}, 0x0) 03:50:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000122004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2449.336027] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2449.363450] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2449.418483] Memory cgroup out of memory: Kill process 30218 (syz-executor.2) score 1103 or sacrifice child [ 2449.428462] Killed process 30218 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2449.448493] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x1, 0x26, &(0x7f0000000100)="e37b6fb1e33309967891fb1bf11194a91d0cb82aa24fa6fdcfbfa472cf3793bdabb2d4fe1b00"}) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r5, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) getresgid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[r8, 0x0]) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={r5, r7, r8}, 0xc) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5}, {0x2}}}, 0x24}}, 0x0) [ 2449.489116] oom_reaper: reaped process 30218 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2449.505438] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e56, {0x4}}, 0x14}}, 0x0) 03:50:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000123004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2449.766661] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2449.847463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2449.851154] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2449.881412] CPU: 1 PID: 30240 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2449.889342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.898715] Call Trace: [ 2449.901325] dump_stack+0x188/0x20d [ 2449.904981] dump_header+0x159/0xa5e [ 2449.908716] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2449.913838] ? ___ratelimit+0x59/0x573 [ 2449.917750] oom_kill_process.cold+0x10/0x6dc [ 2449.922269] ? task_will_free_mem+0x134/0x6d0 [ 2449.926780] out_of_memory+0x349/0x1250 [ 2449.930804] ? oom_killer_disable+0x270/0x270 [ 2449.935329] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2449.940200] ? memcg_event_wake+0x210/0x210 [ 2449.944533] ? do_raw_spin_unlock+0x171/0x260 [ 2449.949039] try_charge+0xe22/0x1300 [ 2449.952793] ? find_held_lock+0x2d/0x110 [ 2449.956875] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2449.961740] ? lock_downgrade+0x740/0x740 [ 2449.966015] ? check_preemption_disabled+0x41/0x280 [ 2449.971229] memcg_kmem_charge_memcg+0x7b/0x150 [ 2449.975919] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2449.980431] ? should_fail+0x142/0x7bc [ 2449.984337] ? __isolate_free_page+0x4c0/0x4c0 [ 2449.989532] memcg_kmem_charge+0x132/0x360 [ 2449.993831] __alloc_pages_nodemask+0x396/0x6a0 [ 2449.998515] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2450.003546] ? _raw_spin_unlock_irq+0x24/0x80 [ 2450.008055] copy_process.part.0+0x3d6/0x7a60 [ 2450.012564] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2450.017680] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2450.022272] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2450.027391] ? __lock_acquire+0x6ee/0x49c0 [ 2450.031636] ? do_try_to_free_pages+0xd13/0x1090 [ 2450.036413] ? __cleanup_sighand+0x60/0x60 [ 2450.040663] ? mark_held_locks+0xf0/0xf0 [ 2450.044735] ? shrink_node+0x1350/0x1350 [ 2450.048817] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2450.053853] _do_fork+0x22f/0xf40 [ 2450.057324] ? fork_idle+0x1e0/0x1e0 [ 2450.061139] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2450.067042] ? check_preemption_disabled+0x41/0x280 [ 2450.072084] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2450.076853] ? trace_hardirqs_off_caller+0x55/0x210 [ 2450.081886] ? do_syscall_64+0x21/0x620 [ 2450.085909] do_syscall_64+0xf9/0x620 [ 2450.089727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2450.094931] RIP: 0033:0x45f219 [ 2450.098134] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2450.117070] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2450.124812] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2450.132288] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2450.139573] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 03:50:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x68}]]}}}]}, 0xb8}}, 0x0) [ 2450.146860] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2450.154141] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2450.167220] Task in /syz2 killed as a result of limit of /syz2 [ 2450.174336] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2450.197157] memory: usage 307188kB, limit 307200kB, failcnt 1573 03:50:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) [ 2450.225258] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2450.242353] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2450.257693] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2450.299852] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000012c004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2450.361917] Memory cgroup out of memory: Kill process 30240 (syz-executor.2) score 1103 or sacrifice child [ 2450.400717] Killed process 30240 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:50:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@deltaction={0xb0, 0x31, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x30}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffffcd, 0x1, 'vlan\x00'}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) fstatfs(r2, &(0x7f0000000100)=""/186) [ 2450.447133] oom_reaper: reaped process 30240 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2450.514174] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e57, {0x4}}, 0x14}}, 0x0) 03:50:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@gettaction={0x20, 0x32, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) [ 2450.557853] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2450.614438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2450.654013] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 03:50:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000148004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2450.713123] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2450.738778] CPU: 0 PID: 30267 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2450.747229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.756591] Call Trace: [ 2450.759202] dump_stack+0x188/0x20d [ 2450.762850] dump_header+0x159/0xa5e [ 2450.766582] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2450.771698] ? ___ratelimit+0x59/0x573 [ 2450.775608] oom_kill_process.cold+0x10/0x6dc [ 2450.780131] ? task_will_free_mem+0x134/0x6d0 [ 2450.784731] out_of_memory+0x349/0x1250 [ 2450.788734] ? oom_killer_disable+0x270/0x270 [ 2450.793256] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2450.798118] ? memcg_event_wake+0x210/0x210 [ 2450.802471] ? do_raw_spin_unlock+0x171/0x260 [ 2450.806983] try_charge+0xe22/0x1300 [ 2450.810715] ? find_held_lock+0x2d/0x110 [ 2450.814792] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2450.819660] ? lock_downgrade+0x740/0x740 [ 2450.823819] ? check_preemption_disabled+0x41/0x280 [ 2450.828861] memcg_kmem_charge_memcg+0x7b/0x150 [ 2450.833545] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2450.838061] ? should_fail+0x142/0x7bc [ 2450.841964] ? __isolate_free_page+0x4c0/0x4c0 [ 2450.846571] memcg_kmem_charge+0x132/0x360 [ 2450.850932] __alloc_pages_nodemask+0x396/0x6a0 [ 2450.855633] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2450.860764] ? _raw_spin_unlock_irq+0x24/0x80 [ 2450.865298] copy_process.part.0+0x3d6/0x7a60 [ 2450.869809] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2450.874936] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2450.879556] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2450.884678] ? __lock_acquire+0x6ee/0x49c0 [ 2450.888945] ? do_try_to_free_pages+0xd13/0x1090 [ 2450.893749] ? __cleanup_sighand+0x60/0x60 [ 2450.898362] ? mark_held_locks+0xf0/0xf0 [ 2450.902438] ? shrink_node+0x1350/0x1350 [ 2450.906519] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2450.911727] _do_fork+0x22f/0xf40 [ 2450.915204] ? fork_idle+0x1e0/0x1e0 [ 2450.918946] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2450.924935] ? check_preemption_disabled+0x41/0x280 [ 2450.929970] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2450.934737] ? trace_hardirqs_off_caller+0x55/0x210 [ 2450.939773] ? do_syscall_64+0x21/0x620 [ 2450.943765] do_syscall_64+0xf9/0x620 [ 2450.947584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2450.952873] RIP: 0033:0x45f219 [ 2450.956089] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2450.975004] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2450.982753] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2450.990044] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2450.997327] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2451.004730] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2451.012016] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x70}]]}}}]}, 0xb8}}, 0x0) [ 2451.072596] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2451.112601] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x2}}}, 0x24}}, 0x0) 03:50:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000014c004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2451.223552] Task in /syz2 killed as a result of limit of /syz2 [ 2451.223580] memory: usage 307196kB, limit 307200kB, failcnt 1596 [ 2451.223589] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2451.223596] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2451.223606] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2451.374702] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2451.413933] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="004cc41c1c00e4ff81b77cd1"], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0x15, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x0) [ 2451.440543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:50:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000160004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2451.523107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pig=30291 comm=syz-executor.4 [ 2451.556355] Memory cgroup out of memory: Kill process 30267 (syz-executor.2) score 1103 or sacrifice child 03:50:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x78}]]}}}]}, 0xb8}}, 0x0) [ 2451.583816] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2451.587590] Killed process 30267 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2451.641275] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2451.660407] oom_reaper: reaped process 30267 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:50:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e58, {0x4}}, 0x14}}, 0x0) 03:50:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x22, 0x0, [0x8, 0x8000, 0x4, 0x1a5, 0x1ff, 0xad5, 0x10001, 0x5, 0x2, 0x9, 0x6, 0x8, 0x9, 0x1f, 0x5, 0x7]}, {0x8, 0x0, [0x2, 0xc3fd, 0x1ff, 0x5, 0x8bd, 0x6, 0x6, 0x2, 0x3, 0xe6a, 0x8, 0x2, 0xff, 0x4, 0xff, 0xffffffff]}, {0x20, 0x0, [0x7, 0x75cd, 0x4, 0x8, 0x4, 0x9, 0x3a3, 0x1, 0x0, 0x2, 0x8000, 0xffffffe0, 0x7, 0xfffffff8, 0xdce, 0x1]}, {0x0, 0x0, [0xca, 0x80000000, 0x6, 0x9, 0x7, 0x5, 0x2, 0xbf5, 0x8, 0x3f, 0xff, 0x1000, 0x0, 0x7, 0x20ea, 0x10000]}, {0x8, 0x0, [0xfffc0000, 0x7, 0xfffffffe, 0x7, 0x5, 0x2, 0x9f, 0x2, 0x6, 0x40, 0x4, 0xffffedd3, 0x4, 0x1, 0x8c, 0x401]}], r4, 0x1, 0x1, 0x168}}, 0x20) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2}}}, 0x24}}, 0x0) 03:50:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000168004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2451.892783] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2451.922369] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2451.959265] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2451.965630] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2451.996481] CPU: 1 PID: 30303 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2452.004499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.013866] Call Trace: [ 2452.016490] dump_stack+0x188/0x20d [ 2452.020141] dump_header+0x159/0xa5e [ 2452.023872] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2452.028992] ? ___ratelimit+0x59/0x573 [ 2452.032894] oom_kill_process.cold+0x10/0x6dc [ 2452.037403] ? task_will_free_mem+0x134/0x6d0 [ 2452.041912] out_of_memory+0x349/0x1250 [ 2452.045907] ? oom_killer_disable+0x270/0x270 [ 2452.050420] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2452.055266] ? memcg_event_wake+0x210/0x210 [ 2452.060214] ? do_raw_spin_unlock+0x171/0x260 [ 2452.064765] try_charge+0xe22/0x1300 [ 2452.068507] ? find_held_lock+0x2d/0x110 [ 2452.072573] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2452.077436] ? lock_downgrade+0x740/0x740 [ 2452.081600] ? check_preemption_disabled+0x41/0x280 [ 2452.086640] memcg_kmem_charge_memcg+0x7b/0x150 [ 2452.091346] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2452.095856] ? should_fail+0x142/0x7bc [ 2452.099767] ? __isolate_free_page+0x4c0/0x4c0 [ 2452.104379] memcg_kmem_charge+0x132/0x360 [ 2452.108645] __alloc_pages_nodemask+0x396/0x6a0 [ 2452.113328] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2452.118370] copy_process.part.0+0x3d6/0x7a60 [ 2452.122876] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2452.127996] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2452.132587] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2452.137694] ? __lock_acquire+0x6ee/0x49c0 [ 2452.141939] ? do_try_to_free_pages+0xd13/0x1090 [ 2452.146722] ? __cleanup_sighand+0x60/0x60 [ 2452.150970] ? mark_held_locks+0xf0/0xf0 [ 2452.155036] ? shrink_node+0x1350/0x1350 [ 2452.159113] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2452.164386] _do_fork+0x22f/0xf40 [ 2452.167947] ? fork_idle+0x1e0/0x1e0 [ 2452.171676] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2452.177577] ? check_preemption_disabled+0x41/0x280 [ 2452.182614] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2452.187387] ? trace_hardirqs_off_caller+0x55/0x210 [ 2452.192431] ? do_syscall_64+0x21/0x620 [ 2452.196414] do_syscall_64+0xf9/0x620 [ 2452.200228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2452.205430] RIP: 0033:0x45f219 [ 2452.208636] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2452.227633] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2452.235356] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2452.242638] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2452.249939] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2452.257213] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2452.264598] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2452.290242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:50:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000016c004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x88}]]}}}]}, 0xb8}}, 0x0) 03:50:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) [ 2452.403208] Task in /syz2 killed as a result of limit of /syz2 [ 2452.412514] memory: usage 307196kB, limit 307200kB, failcnt 1636 [ 2452.459664] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2452.462449] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2452.513853] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2452.584682] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2452.607626] Memory cgroup stats for /syz2: cache:0KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:156KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x800000000000401) r4 = accept4(r3, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r6, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x80000000}, 0x8) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0x2}}}, 0x24}}, 0x0) 03:50:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000174004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2452.757425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2452.815077] Memory cgroup out of memory: Kill process 30303 (syz-executor.2) score 1103 or sacrifice child [ 2452.831732] Killed process 30303 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:50:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e59, {0x4}}, 0x14}}, 0x0) [ 2452.856663] oom_reaper: reaped process 30303 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2452.882732] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2452.937602] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x94}]]}}}]}, 0xb8}}, 0x0) [ 2453.050807] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:50:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000017a004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2453.108725] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2453.124277] CPU: 0 PID: 30339 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2453.132207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.141665] Call Trace: [ 2453.144280] dump_stack+0x188/0x20d [ 2453.147936] dump_header+0x159/0xa5e [ 2453.152455] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2453.157585] ? ___ratelimit+0x59/0x573 [ 2453.161500] oom_kill_process.cold+0x10/0x6dc [ 2453.166029] ? task_will_free_mem+0x134/0x6d0 [ 2453.170550] out_of_memory+0x349/0x1250 [ 2453.174546] ? oom_killer_disable+0x270/0x270 [ 2453.179075] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2453.183938] ? memcg_event_wake+0x210/0x210 [ 2453.188425] ? do_raw_spin_unlock+0x171/0x260 [ 2453.192937] try_charge+0xe22/0x1300 [ 2453.196679] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2453.201549] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2453.206413] ? __pte_alloc+0x1bb/0x350 [ 2453.210318] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2453.216396] mem_cgroup_try_charge+0x249/0x5c0 [ 2453.220995] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2453.225943] __handle_mm_fault+0x1cfb/0x3b60 [ 2453.230376] ? copy_page_range+0x1e70/0x1e70 [ 2453.234807] ? count_memcg_event_mm+0x279/0x4c0 [ 2453.239534] handle_mm_fault+0x1a5/0x670 [ 2453.243613] __do_page_fault+0x5ed/0xdd0 [ 2453.247688] ? trace_hardirqs_off_caller+0x55/0x210 [ 2453.252726] ? vmalloc_fault+0x730/0x730 [ 2453.256812] ? page_fault+0x8/0x30 [ 2453.260450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2453.265322] ? page_fault+0x8/0x30 [ 2453.268871] page_fault+0x1e/0x30 [ 2453.272327] RIP: 0033:0x443aa1 [ 2453.275522] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 2453.275760] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2453.294429] RSP: 002b:00007ffc5c858e18 EFLAGS: 00010202 [ 2453.294440] RAX: 0000000020000000 RBX: 000000000076c900 RCX: 000000000000e62d [ 2453.294447] RDX: 0000000000000006 RSI: 0000000000770080 RDI: 0000000020000000 [ 2453.294453] RBP: 0000000000770060 R08: 000000005a45d11e R09: 000000005a45d122 [ 2453.294460] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 000000000076bf00 [ 2453.294468] R13: 0000000000770068 R14: 0000000000252812 R15: 000000000076bf0c 03:50:04 executing program 0: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="812e26113f3ef731d31e657017b685a6"}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x3f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x218, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @loopback}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x84aa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa32}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2091}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffff800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xed1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fc00000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4802}, 0x5000) [ 2453.399119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2453.422583] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2453.492257] Task in /syz2 killed as a result of limit of /syz2 [ 2453.518709] memory: usage 307200kB, limit 307200kB, failcnt 1674 [ 2453.527125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=30350 comm=syz-executor.0 03:50:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x300}]]}}}]}, 0xb8}}, 0x0) [ 2453.542479] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2453.579117] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:04 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e20, @broadcast}, 0x10) listen(r2, 0x800000000000401) r3 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01001700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @empty}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x150, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x8, 0xd5, "3def087990da01356fcaa456a02e8a62aca8da05f4a94dbc4d580df52454c999e3af9a9c7977c661612c31aa61bad49c691e260a8ee0f504781d39f76b28c7ef043650f308d1eedc4012d4f1a15e2190ecd01f218b541922d0c52091d67914a8967e8cbfd386d921a7762b556ca76000c88cb57d8cc43b5a4f0168b23d13f4b43e6dc3359e067a3831eebf766b08c597e0846c262de923f7a84da39f99086a251093cdb4d8a773c8c5bc72dc645ff6c272646b022cda4e45d50ce001758d1f168a213d05596b99fb4f30c0eb29c15cd6eef26ddf1b"}, 0xdd) [ 2453.590905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=30351 comm=syz-executor.0 [ 2453.597490] Memory cgroup stats for /syz2: cache:0KB rss:88KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2453.675450] Memory cgroup out of memory: Kill process 30339 (syz-executor.2) score 1103 or sacrifice child [ 2453.726248] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2453.764935] Killed process 30339 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:50:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x40, 0x7fffffff}, {0x2, 0x4}]}, 0x14, 0x7) [ 2453.776420] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2453.800233] oom_reaper: reaped process 30339 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB 03:50:04 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, &(0x7f0000000040)=0x3) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r5, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x129000, 0x0) kcmp(0x0, r3, 0x5, r6, r7) r8 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r8, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x4, {0x100, 0x8, 0x4b, 0x8}}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:50:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e5a, {0x4}}, 0x14}}, 0x0) 03:50:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100034e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/27) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x32101, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) dup(r3) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc008ae09, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x7) [ 2454.031474] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2454.034373] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2454.091498] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2454.107451] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2454.116393] CPU: 1 PID: 30464 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2454.124314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.133677] Call Trace: [ 2454.136285] dump_stack+0x188/0x20d [ 2454.139946] dump_header+0x159/0xa5e [ 2454.143685] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2454.148805] ? ___ratelimit+0x59/0x573 [ 2454.152711] oom_kill_process.cold+0x10/0x6dc [ 2454.157322] ? task_will_free_mem+0x134/0x6d0 [ 2454.161850] out_of_memory+0x349/0x1250 [ 2454.165858] ? oom_killer_disable+0x270/0x270 [ 2454.170385] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2454.175250] ? memcg_event_wake+0x210/0x210 [ 2454.179600] ? do_raw_spin_unlock+0x171/0x260 [ 2454.184117] try_charge+0xe22/0x1300 [ 2454.187853] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2454.192715] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2454.198063] ? __pte_alloc+0x1bb/0x350 [ 2454.201972] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2454.208143] mem_cgroup_try_charge+0x249/0x5c0 [ 2454.212755] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2454.217707] __handle_mm_fault+0x1cfb/0x3b60 [ 2454.222138] ? copy_page_range+0x1e70/0x1e70 [ 2454.226695] ? count_memcg_event_mm+0x279/0x4c0 [ 2454.231412] handle_mm_fault+0x1a5/0x670 [ 2454.235511] __do_page_fault+0x5ed/0xdd0 [ 2454.239606] ? trace_hardirqs_off_caller+0x55/0x210 [ 2454.244760] ? vmalloc_fault+0x730/0x730 [ 2454.248840] ? page_fault+0x8/0x30 [ 2454.252397] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2454.257257] ? page_fault+0x8/0x30 [ 2454.260811] page_fault+0x1e/0x30 [ 2454.264272] RIP: 0033:0x443aa1 [ 2454.267477] Code: 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e 88 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e <66> 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e [ 2454.286390] RSP: 002b:00007ffc5c858e18 EFLAGS: 00010202 [ 2454.291768] RAX: 0000000020000000 RBX: 000000000076c900 RCX: 000000000000e62d [ 2454.299050] RDX: 0000000000000006 RSI: 0000000000770080 RDI: 0000000020000000 [ 2454.306330] RBP: 0000000000770060 R08: 000000005a45d11e R09: 000000005a45d122 [ 2454.313616] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 000000000076bf00 [ 2454.320911] R13: 0000000000770068 R14: 0000000000252bd5 R15: 000000000076bf0c [ 2454.339770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:50:05 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r1) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r2) keyctl$negate(0xd, r1, 0x1, r2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:50:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x0, 0x7fff, 0x5, [0x2, 0x104, 0x100, 0xad28, 0x3]}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc008ae09, 0x0) [ 2454.460249] Task in /syz2 killed as a result of limit of /syz2 [ 2454.467766] memory: usage 307200kB, limit 307200kB, failcnt 1716 [ 2454.494619] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2454.524704] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2454.555395] Memory cgroup stats for /syz2: cache:0KB rss:220KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:05 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000040)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:50:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x2}]]}}}]}, 0xb8}}, 0x0) 03:50:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100054e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x9, 0x0, 0x9, 0x7, 0x0, 0x5, 0x4000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xda6, 0x1, @perf_config_ext={0x8, 0x9}, 0x50081, 0x1, 0x3, 0x6, 0x0, 0x8b87, 0x3}, r1, 0x7, r3, 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2454.729397] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2454.742010] Memory cgroup out of memory: Kill process 30464 (syz-executor.2) score 1103 or sacrifice child [ 2454.772938] Killed process 30464 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2454.783053] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2454.798687] oom_reaper: reaped process 30464 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:50:05 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x800000000000401) r2 = accept4(r1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r4, 0x1}, &(0x7f0000000140)=0x8) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x28) 03:50:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e5b, {0x4}}, 0x14}}, 0x0) 03:50:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:50:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20200, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc008ae09, 0x0) 03:50:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100064e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2455.042658] syz-executor.2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 03:50:05 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x3, 0x20000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/138) [ 2455.126424] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2455.139285] CPU: 0 PID: 30728 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2455.147215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.156588] Call Trace: [ 2455.159193] dump_stack+0x188/0x20d [ 2455.162836] dump_header+0x159/0xa5e [ 2455.166564] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2455.171937] ? ___ratelimit+0x59/0x573 [ 2455.175845] oom_kill_process.cold+0x10/0x6dc [ 2455.180369] ? task_will_free_mem+0x134/0x6d0 [ 2455.184982] out_of_memory+0x349/0x1250 [ 2455.189079] ? oom_killer_disable+0x270/0x270 [ 2455.193607] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2455.198470] ? memcg_event_wake+0x210/0x210 [ 2455.202811] ? do_raw_spin_unlock+0x171/0x260 [ 2455.207323] try_charge+0xe22/0x1300 [ 2455.211069] ? find_held_lock+0x2d/0x110 [ 2455.215146] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2455.220021] ? lock_downgrade+0x740/0x740 [ 2455.224185] ? check_preemption_disabled+0x41/0x280 [ 2455.229225] memcg_kmem_charge_memcg+0x7b/0x150 [ 2455.233917] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2455.238431] ? should_fail+0x142/0x7bc [ 2455.242334] ? __isolate_free_page+0x4c0/0x4c0 [ 2455.246940] memcg_kmem_charge+0x132/0x360 [ 2455.251248] __alloc_pages_nodemask+0x396/0x6a0 [ 2455.255943] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 2455.260983] ? _raw_spin_unlock_irq+0x24/0x80 [ 2455.265502] copy_process.part.0+0x3d6/0x7a60 [ 2455.270025] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 2455.275155] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2455.279756] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2455.284874] ? __lock_acquire+0x6ee/0x49c0 [ 2455.289127] ? do_try_to_free_pages+0xd13/0x1090 [ 2455.293910] ? __cleanup_sighand+0x60/0x60 [ 2455.298159] ? mark_held_locks+0xf0/0xf0 [ 2455.302344] ? shrink_node+0x1350/0x1350 [ 2455.306427] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2455.311469] _do_fork+0x22f/0xf40 [ 2455.314948] ? fork_idle+0x1e0/0x1e0 [ 2455.318676] ? blkg_prfill_rwstat_field_recursive+0x100/0x100 [ 2455.324574] ? check_preemption_disabled+0x41/0x280 [ 2455.329610] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2455.334381] ? trace_hardirqs_off_caller+0x55/0x210 [ 2455.339417] ? do_syscall_64+0x21/0x620 [ 2455.343407] do_syscall_64+0xf9/0x620 [ 2455.347230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2455.352433] RIP: 0033:0x45f219 [ 2455.355646] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2455.374731] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2455.382458] RAX: ffffffffffffffda RBX: 00007f1b0e98f700 RCX: 000000000045f219 [ 2455.389744] RDX: 00007f1b0e98f9d0 RSI: 00007f1b0e98edb0 RDI: 00000000003d0f00 [ 2455.399069] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f700 R09: 00007f1b0e98f700 [ 2455.406350] R10: 00007f1b0e98f9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2455.413724] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x3}]]}}}]}, 0xb8}}, 0x0) [ 2455.470577] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x7, 0x80000001, 0xbf30, 0x1000}) r3 = gettid() getpriority(0x0, r3) [ 2455.517119] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2455.525762] Task in /syz2 killed as a result of limit of /syz2 [ 2455.543067] memory: usage 307172kB, limit 307200kB, failcnt 1742 03:50:06 executing program 3: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x4) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x1f}, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2455.580693] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100074e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2455.772498] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2455.791361] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.797677] Memory cgroup stats for /syz2: cache:0KB rss:88KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:116KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:06 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0x79c4}, 0x8) 03:50:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x800000000000401) r3 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r5}, 0x8) [ 2455.841724] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2455.900154] Memory cgroup out of memory: Kill process 30728 (syz-executor.2) score 1103 or sacrifice child [ 2455.911852] Killed process 30728 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:50:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100094e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2456.008078] oom_reaper: reaped process 30728 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:50:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e5c, {0x4}}, 0x14}}, 0x0) 03:50:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', '/dev/kvm\x00'}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x453, 0x200, 0x70bd2d, 0x25dfdbff, "d766f46f2eace77e5a0e657a0e4e84c69110bf92f36e3ed1e3a380f868ac393f08a0acca76d800d6d7f540b7b995864015e53832a5f47488c1bc6a", ["", "", "", "", "", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 03:50:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x400, 0x2, 0xfc, &(0x7f0000ffb000/0x4000)=nil, 0x8}) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)) 03:50:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x5}]]}}}]}, 0xb8}}, 0x0) [ 2456.096310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pig=31039 comm=syz-executor.0 [ 2456.164455] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2456.194714] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:07 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffff68b4, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000280)="c045fe831ba453f850e1aedda8a72432453f92651b02e623b75dd47d31c29c3eba2b68b019831e3393f6d3a40c23920185be492361b576d6b6564e5314ea7a168469f3ae0d8c899b3aa794509e6dd7eb4275be15c1b9c14b28d1d6c2548a6b7882f1f20479474d81490e1136bab73cff8bece61be2bd418d9e1eceb888b42b42d3c943d37b63147fda32b5c8bf24e0f5a743fb6fb02b109cd47c60790fb45235a0cadff9f2e876a011bcc43579220a7fde1715ea70a4ff4c4cb44f3bb0db27bf38620372f11e003c54c960f4a613da452ea43e4d52f1aeec6b72c3d90eeaa7db7b5bed3f2a556f7438475098264da120", 0xf0, 0x7cd1}, {&(0x7f0000000180)="dc524bcb0fe4ab354c7eac56f823c10db9e37a54984baa7676cad3b7e134d8cd0ad84ab041167ccd0fc887ee8eca60a501b7fb", 0x33, 0x2}], 0x2000002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'macroman'}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, ':ppp1&\'%]proc\\'}}, {@subj_type={'subj_type', 0x3d, '/dev/video#\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x62, 0x35, 0x38, 0x65, 0x35, 0x61, 0x39], 0x2d, [0x7b, 0x34, 0x61, 0x65], 0x2d, [0x39, 0x63, 0x31, 0x66], 0x2d, [0x64, 0x30, 0x30, 0x35], 0x2d, [0x64, 0x35, 0x30, 0x66, 0x39, 0x33, 0x5a, 0x37]}}}, {@subj_user={'subj_user', 0x3d, '/dev/video#\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}]}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) 03:50:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$fb(r2, &(0x7f0000000040)=""/80, 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000000c0)={{0x7, 0x3}, 'port0\x00', 0x4a, 0x12, 0x9, 0x8, 0x7fffffff, 0x401, 0x4, 0x0, 0x0, 0x7}) r3 = getpid() r4 = inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r6 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000180)={0x3, 0x4, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0xd4, 0x6, 0xc9, "6595da29"}, 0x3ff, 0x1, @fd=r2, 0xc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) fcntl$setown(r7, 0x8, r3) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r8, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(r2, 0x8, r8) [ 2456.275168] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:50:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001000a4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2456.331154] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2456.337571] CPU: 0 PID: 31045 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2456.345486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.354857] Call Trace: [ 2456.357460] dump_stack+0x188/0x20d [ 2456.361105] dump_header+0x159/0xa5e [ 2456.364838] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2456.369961] ? ___ratelimit+0x59/0x573 [ 2456.373980] oom_kill_process.cold+0x10/0x6dc [ 2456.378499] ? task_will_free_mem+0x134/0x6d0 [ 2456.383029] out_of_memory+0x349/0x1250 [ 2456.387041] ? oom_killer_disable+0x270/0x270 [ 2456.391574] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2456.396472] ? memcg_event_wake+0x210/0x210 [ 2456.400824] ? do_raw_spin_unlock+0x171/0x260 [ 2456.405337] try_charge+0xe22/0x1300 [ 2456.409089] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2456.413957] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2456.418819] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2456.424908] mem_cgroup_try_charge+0x249/0x5c0 [ 2456.429520] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2456.434480] __handle_mm_fault+0x1cfb/0x3b60 [ 2456.438912] ? copy_page_range+0x1e70/0x1e70 [ 2456.443337] ? count_memcg_event_mm+0x279/0x4c0 [ 2456.448042] handle_mm_fault+0x1a5/0x670 [ 2456.452125] __do_page_fault+0x5ed/0xdd0 [ 2456.456208] ? trace_hardirqs_off_caller+0x55/0x210 [ 2456.461244] ? vmalloc_fault+0x730/0x730 [ 2456.465325] ? page_fault+0x8/0x30 [ 2456.468887] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2456.473762] ? page_fault+0x8/0x30 [ 2456.477317] page_fault+0x1e/0x30 [ 2456.480787] RIP: 0033:0x45f1fd [ 2456.483991] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2456.502904] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2456.508288] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2456.515576] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2456.522866] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2456.530151] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2456.537615] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:07 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x800, 0x0) write$ppp(r0, &(0x7f00000000c0)="fb9c25df3d51a0e66365dbd10411f72a7cf4cb52c3acbaa88eac25f127310a10fdf833e410a309c2f22ce91825d6effcc4b66145742ca182bf892f116f736439947b745ddc259dbf5b2a9fad08be090ee9", 0x51) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000140)=""/125) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) [ 2456.630477] Task in /syz2 killed as a result of limit of /syz2 [ 2456.672184] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2456.690022] memory: usage 307200kB, limit 307200kB, failcnt 1780 [ 2456.708672] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80200, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2456.734297] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2456.760456] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2456.775966] Memory cgroup stats for /syz2: cache:0KB rss:220KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:07 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x20000000, 0x1}) 03:50:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2c11c1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_eee={0x45, 0x7, 0x86f, 0x101, 0x1, 0x2, 0x315300, 0x9, [0x31c6, 0x8]}}) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000001c0)={0x0, 0x3}) pread64(r1, &(0x7f0000000080)=""/234, 0xea, 0x7) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x3, @remote, 'bridge_slave_1\x00'}}) [ 2456.865199] Memory cgroup out of memory: Kill process 31045 (syz-executor.2) score 1103 or sacrifice child 03:50:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001b90e4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2456.906967] Killed process 31045 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2456.951573] oom_reaper: reaped process 31045 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:50:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e5d, {0x4}}, 0x14}}, 0x0) 03:50:07 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)=0x101) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2457.076074] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2457.110330] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x6}]]}}}]}, 0xb8}}, 0x0) 03:50:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001001f4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) ioctl$VT_WAITACTIVE(r1, 0x5607) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc008ae09, 0x0) [ 2457.211083] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:50:08 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', @ifru_flags}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ipvlan0\x00', @ifru_flags}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2457.280217] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2457.318423] CPU: 0 PID: 31285 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2457.326347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.333420] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2457.335702] Call Trace: [ 2457.335741] dump_stack+0x188/0x20d [ 2457.335762] dump_header+0x159/0xa5e [ 2457.335777] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2457.335789] ? ___ratelimit+0x59/0x573 [ 2457.335806] oom_kill_process.cold+0x10/0x6dc [ 2457.335826] ? task_will_free_mem+0x134/0x6d0 [ 2457.375736] out_of_memory+0x349/0x1250 [ 2457.379751] ? oom_killer_disable+0x270/0x270 [ 2457.383701] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2457.384262] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2457.397350] ? memcg_event_wake+0x210/0x210 [ 2457.401692] ? do_raw_spin_unlock+0x171/0x260 [ 2457.406198] try_charge+0xe22/0x1300 [ 2457.409944] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2457.414804] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2457.419663] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2457.425759] mem_cgroup_try_charge+0x249/0x5c0 [ 2457.430360] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2457.435303] __handle_mm_fault+0x1cfb/0x3b60 [ 2457.439878] ? copy_page_range+0x1e70/0x1e70 [ 2457.444300] ? count_memcg_event_mm+0x279/0x4c0 [ 2457.448996] handle_mm_fault+0x1a5/0x670 [ 2457.453069] __do_page_fault+0x5ed/0xdd0 [ 2457.457141] ? trace_hardirqs_off_caller+0x55/0x210 [ 2457.462276] ? vmalloc_fault+0x730/0x730 [ 2457.466611] ? page_fault+0x8/0x30 [ 2457.470164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2457.475022] ? page_fault+0x8/0x30 [ 2457.478565] page_fault+0x1e/0x30 [ 2457.482028] RIP: 0033:0x45f1fd [ 2457.485227] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2457.504242] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2457.509715] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2457.517000] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2457.524303] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2457.531581] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2457.538987] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='Aself%keyringeth1#\x00', &(0x7f0000000740)='\x00\xca\xe0~BV\x80\xf0\xfc\xd5\v\xb5\x05\xa5\xe5#/5<)c%\x80\x17Bv$?\xbb\xc3\x98\xad\xdef\x81\xfd\r.@\xf2\xaemt\t\xd0\xfa~\x8f\x1dV\x95G\xfcPoeO\xc9\x17\x8c\xa79\xaf\\\x10\x97\xc3$lee/\xeb@\xb1\xe7\x89wU\xc5\x10\xbf\xb1|\xc4W8\x1b\xbavM\xce\xa2z\x0fR0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100204e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:08 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0285629, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)={0x21da6260, 0xc, 0x4, 0x1000, 0xffffff00, {0x0, 0x7530}, {0x5, 0xc, 0x2, 0xc1, 0x2, 0xff, "ea590d89"}, 0x7, 0x1, @fd=r2, 0x80, 0x0, r5}) r7 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x1, 0x80002) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000000240)={0x29, @multicast2, 0x4e22, 0x3, 'dh\x00', 0x2, 0x8000, 0x3d}, 0x2c) readahead(r6, 0x3f, 0xa9) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) 03:50:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005d091400032bbdee00fbdbdf2508000100010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x200401c0}, 0x20000004) [ 2457.814362] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x8}]]}}}]}, 0xb8}}, 0x0) [ 2457.856904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2397 sclass=netlink_route_socket pig=31519 comm=syz-executor.0 [ 2457.869485] Task in /syz2 killed as a result of limit of /syz2 [ 2457.875493] memory: usage 307200kB, limit 307200kB, failcnt 1820 [ 2457.903452] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:08 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000140)) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x800000000000401) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x1, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xe5}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000400)=0xe9) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x10000000000005, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="06bb084d5d0754ec172c47ee90fab0cf11", @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf250a0000000a000600bbbbbbbbbbbb000004000b0008003700010000000900070056c83d2db7000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20800) r6 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000000)) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000240)={{0x2, 0x6}, 'port0\x00', 0x14, 0x2, 0x496b, 0x7, 0x0, 0xfffff801, 0x7, 0x0, 0x0, 0xb}) [ 2457.960513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2397 sclass=netlink_route_socket pig=31523 comm=syz-executor.0 [ 2457.966856] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2458.070227] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2458.108324] Memory cgroup stats for /syz2: cache:0KB rss:196KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2458.214489] Memory cgroup out of memory: Kill process 31285 (syz-executor.2) score 1103 or sacrifice child [ 2458.290200] Killed process 31285 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2458.357438] oom_reaper: reaped process 31285 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e5e, {0x4}}, 0x14}}, 0x0) 03:50:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100224e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:50:09 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r1 = socket$inet(0xa, 0x3, 0xd5) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x800000000000401) r2 = accept4(r1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x7f}, &(0x7f0000000100)=0x8) r5 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 03:50:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0xc}]]}}}]}, 0xb8}}, 0x0) [ 2458.521811] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2458.591462] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r1) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r2) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$negate(0xd, r1, 0xffffffff, r3) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000280)='ceph\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', 0xc, r6) keyctl$get_persistent(0x16, r5, r6) 03:50:09 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@v2={0x3, 0x2, 0x10, 0xfff, 0x53, "dbe6808d98dc3a46dc4fd25ed95d7213d31aa1c5d1bbda193e0bfacd04588a2a23c1eff8541903b025b2b5bd2c048076e021ab48a76b614bb0b9959aa9b40809df2d4c502678dd2fc268b14862d7627ad59504"}, 0x5c, 0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) [ 2458.681252] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2458.715564] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2458.721157] CPU: 0 PID: 31641 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2458.729051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.738590] Call Trace: [ 2458.741192] dump_stack+0x188/0x20d [ 2458.744832] dump_header+0x159/0xa5e [ 2458.748561] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2458.753676] ? ___ratelimit+0x59/0x573 [ 2458.757586] oom_kill_process.cold+0x10/0x6dc [ 2458.762106] ? task_will_free_mem+0x134/0x6d0 [ 2458.766616] out_of_memory+0x349/0x1250 [ 2458.770602] ? oom_killer_disable+0x270/0x270 [ 2458.775117] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2458.779976] ? memcg_event_wake+0x210/0x210 [ 2458.784323] ? do_raw_spin_unlock+0x171/0x260 [ 2458.788839] try_charge+0xe22/0x1300 [ 2458.792572] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2458.797437] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2458.802402] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2458.808488] mem_cgroup_try_charge+0x249/0x5c0 [ 2458.813092] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2458.818040] __handle_mm_fault+0x1cfb/0x3b60 [ 2458.822473] ? copy_page_range+0x1e70/0x1e70 [ 2458.826897] ? count_memcg_event_mm+0x279/0x4c0 [ 2458.831593] handle_mm_fault+0x1a5/0x670 [ 2458.835671] __do_page_fault+0x5ed/0xdd0 [ 2458.839749] ? trace_hardirqs_off_caller+0x55/0x210 [ 2458.844779] ? vmalloc_fault+0x730/0x730 [ 2458.848851] ? page_fault+0x8/0x30 [ 2458.852407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2458.857269] ? page_fault+0x8/0x30 [ 2458.860825] page_fault+0x1e/0x30 [ 2458.864286] RIP: 0033:0x45f1fd 03:50:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x86480, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2458.867488] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2458.886399] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2458.891772] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2458.899141] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2458.906424] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2458.913707] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2458.921145] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100234e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2458.973790] Task in /syz2 killed as a result of limit of /syz2 [ 2458.984850] memory: usage 307200kB, limit 307200kB, failcnt 1858 [ 2459.032248] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2459.067472] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:09 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2000, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f00000000c0)=""/97, 0x61, &(0x7f0000000140)=""/32, 0x2}}, 0x48) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x4, [], "cc97f5d4b4b8de8ea13a57ad62bf48a2"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc008ae09, 0x0) [ 2459.096828] Memory cgroup stats for /syz2: cache:0KB rss:64KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2459.128991] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2459.176971] Memory cgroup out of memory: Kill process 31641 (syz-executor.2) score 1103 or sacrifice child [ 2459.195199] Killed process 31641 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2459.199564] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2459.234146] oom_reaper: reaped process 31641 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 03:50:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x10}]]}}}]}, 0xb8}}, 0x0) 03:50:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e5f, {0x4}}, 0x14}}, 0x0) 03:50:10 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, r3, 0x20, 0x70bd28, 0x9, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0xa}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x33}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="c54f782e88f7a23bb2b9f2136e381de7"}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="156506d615b8d3c94e0c26f156606fd7"}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x4, "5a961316f7bbd227"}) ioctl$VIDIOC_S_INPUT(r4, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000040)={0x4, "72ff011fefdef801bd545ad8b9482ae229ff439e63662efe445b411bb075ddc2", 0x1, 0x1}) 03:50:10 executing program 0: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, 0x0) 03:50:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001002c4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2459.490957] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2459.509155] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x840, 0x0) r0 = socket$unix(0x1, 0x100000000000001, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080), 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x705a81, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc008ae09, 0x0) [ 2459.554739] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2459.583100] CPU: 1 PID: 31873 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2459.589689] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2459.591028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.591033] Call Trace: [ 2459.591056] dump_stack+0x188/0x20d [ 2459.591074] dump_header+0x159/0xa5e [ 2459.591087] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2459.591099] ? ___ratelimit+0x59/0x573 [ 2459.591115] oom_kill_process.cold+0x10/0x6dc [ 2459.591131] ? task_will_free_mem+0x134/0x6d0 [ 2459.591149] out_of_memory+0x349/0x1250 [ 2459.640571] ? oom_killer_disable+0x270/0x270 [ 2459.645089] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2459.649945] ? memcg_event_wake+0x210/0x210 [ 2459.654285] ? do_raw_spin_unlock+0x171/0x260 [ 2459.658793] try_charge+0xe22/0x1300 [ 2459.662529] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2459.667386] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2459.672239] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2459.678313] mem_cgroup_try_charge+0x249/0x5c0 [ 2459.682915] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2459.687859] __handle_mm_fault+0x1cfb/0x3b60 [ 2459.692281] ? copy_page_range+0x1e70/0x1e70 [ 2459.696700] ? count_memcg_event_mm+0x279/0x4c0 [ 2459.703313] handle_mm_fault+0x1a5/0x670 [ 2459.707394] __do_page_fault+0x5ed/0xdd0 [ 2459.711469] ? trace_hardirqs_off_caller+0x55/0x210 [ 2459.716494] ? vmalloc_fault+0x730/0x730 [ 2459.720571] ? page_fault+0x8/0x30 [ 2459.724131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2459.728989] ? page_fault+0x8/0x30 [ 2459.732539] page_fault+0x1e/0x30 [ 2459.736004] RIP: 0033:0x45f1fd [ 2459.739205] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2459.758122] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2459.763502] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2459.770794] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2459.778075] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2459.785356] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2459.792640] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:10 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) sendto$unix(r1, &(0x7f00000000c0)="053a64eeea7844811913b113827475030cc94904a54cf77950444861ecec56a334553709cae03a42705a8cddbc21e7bae0c038ed0da93fce45c2f62b2895fbe498dd7356d84e21d3504f550414ced3c80771e6264f4ef846f4b26be9032fc03f647c388aba931abcd37dfe76f2d4f53e798ed8773a7318e8ddfb6485e5ae6ed8c1c77d5b75ea94ff29305fe02963e1702639e53e722bc56a6f36eb2481767ffa7944659585b5050fa777c51c47a250a8211df2ce6b846c11cb9120a73ecdc503c425", 0xc2, 0x20008005, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)) 03:50:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:50:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001003f4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x14}]]}}}]}, 0xb8}}, 0x0) 03:50:10 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x1}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x4, 0x3, 0x5, 0x4}, 0x8) 03:50:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'gretap0\x00', @ifru_flags}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x5, [@default, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2460.046882] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2460.093401] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:10 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERROR(r2, &(0x7f0000000040)={0x15, 0x7, 0x1, {0xc, '/dev/video#\x00'}}, 0x15) [ 2460.364333] Task in /syz2 killed as a result of limit of /syz2 [ 2460.384865] memory: usage 307192kB, limit 307200kB, failcnt 1898 [ 2460.424341] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2460.464083] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2460.480999] Memory cgroup stats for /syz2: cache:0KB rss:64KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2460.529115] Memory cgroup out of memory: Kill process 31873 (syz-executor.2) score 1103 or sacrifice child [ 2460.584437] Killed process 31873 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2460.639219] oom_reaper: reaped process 31873 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 03:50:11 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x202, 0x0) getpeername$inet6(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) 03:50:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100404e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x39}]]}}}]}, 0xb8}}, 0x0) 03:50:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfe95) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 03:50:11 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7f, 0x202440) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x57d0cfcbc5cf88f6, 0x200, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getresgid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[r6, 0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getresgid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[r8, 0x0]) getresgid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[r9, 0x0]) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, r3}, {0x2, 0x1, r5}], {0x4, 0x8}, [{0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x6, r8}, {0x8, 0x0, r9}], {0x10, 0x1}, {0x20, 0x5}}, 0x5c, 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r10, 0xc008ae09, 0x0) fsync(r4) 03:50:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e60, {0x4}}, 0x14}}, 0x0) 03:50:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) r2 = getpid() r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r4, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000000c0)={{0x6, 0x2, 0x1, 0x9, 'syz0\x00', 0x40}, 0x2, 0x20, 0x7f, r4, 0x2, 0xf4c, 'syz0\x00', &(0x7f0000000080)=['/dev/kvm\x00', 'nodev\x00'], 0xf, [], [0xebc, 0xff, 0x3, 0x3]}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2460.810277] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2460.864875] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2460.882351] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:50:11 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x9, 0xc0000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40c202, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, &(0x7f0000000040)=0x3) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x4, 0x80000001, 0x0, r3, 0x0, &(0x7f0000000100)={0x98090d, 0x4, [], @string=&(0x7f00000000c0)=0x1}}) [ 2460.914482] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2460.959377] CPU: 1 PID: 32129 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2460.967313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.976772] Call Trace: [ 2460.979380] dump_stack+0x188/0x20d [ 2460.983035] dump_header+0x159/0xa5e [ 2460.986769] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2460.991895] ? ___ratelimit+0x59/0x573 [ 2460.995815] oom_kill_process.cold+0x10/0x6dc [ 2461.000343] ? task_will_free_mem+0x134/0x6d0 [ 2461.004860] out_of_memory+0x349/0x1250 [ 2461.008873] ? oom_killer_disable+0x270/0x270 [ 2461.013401] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2461.018266] ? memcg_event_wake+0x210/0x210 [ 2461.022617] ? do_raw_spin_unlock+0x171/0x260 [ 2461.027218] try_charge+0xe22/0x1300 [ 2461.030966] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2461.035844] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2461.040797] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2461.046982] mem_cgroup_try_charge+0x249/0x5c0 [ 2461.051594] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2461.056572] __handle_mm_fault+0x1cfb/0x3b60 [ 2461.061007] ? copy_page_range+0x1e70/0x1e70 [ 2461.065446] ? count_memcg_event_mm+0x279/0x4c0 [ 2461.070155] handle_mm_fault+0x1a5/0x670 [ 2461.074236] __do_page_fault+0x5ed/0xdd0 [ 2461.078318] ? trace_hardirqs_off_caller+0x55/0x210 [ 2461.083345] ? vmalloc_fault+0x730/0x730 [ 2461.087420] ? page_fault+0x8/0x30 [ 2461.090969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2461.095830] ? page_fault+0x8/0x30 [ 2461.099391] page_fault+0x1e/0x30 [ 2461.102861] RIP: 0033:0x45f1fd [ 2461.106093] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2461.125009] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2461.130471] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2461.137759] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2461.145042] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2461.152321] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 03:50:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x6, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r6, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000) 03:50:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x52ef4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1e) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000080)={0x8000, 0x0, 0x2, 0x1, 0x3, [0x7, 0x6, 0x9, 0x9], [0xffffffff, 0x10000, 0x9, 0x4], [0x7, 0x8, 0x80, 0x3e04d0c4], [0x200, 0x3, 0xffff, 0x3704]}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc008ae09, 0x0) [ 2461.159620] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100484e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2461.229409] Task in /syz2 killed as a result of limit of /syz2 [ 2461.235639] memory: usage 307200kB, limit 307200kB, failcnt 1915 [ 2461.242114] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2461.249303] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2461.255655] Memory cgroup stats for /syz2: cache:0KB rss:196KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:12 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x8001006, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "752ba4997e9997f4", "dbe06515c8a0774752a01b07dc0cc1827f4ed275404e694eb60e3425c5a45e53", "2059ae9d", "88f00f702ecc17de"}, 0x38) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000140)=0x2c) [ 2461.328207] Memory cgroup out of memory: Kill process 32129 (syz-executor.2) score 1103 or sacrifice child 03:50:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00f5000002000000000000008807d56ce9138706db3632684926fdb0e68270590035553e8a0cf8d926d22fda5ea651c80300000041f790393ca2b7c5aaa6b81c2560be75ee96cf5f1d8e4a10e9ca11804874fb8219c73976c8a50ad2f8039e4103ac07ad7c93248b25e812ebc4c3aadd440ecc93c1"], 0x24}}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000100)={0xc, {0x4, 0x5, 0x80}, {0x4, 0x3, 0x8}, {0x200, 0x10001}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000200)={0x81, 0x1}) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x2}, 0x10) 03:50:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x280040, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000001200)=""/4087, 0xff7) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2461.378862] Killed process 32129 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2461.388733] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2461.422005] oom_reaper: reaped process 32129 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2461.456145] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x300}]]}}}]}, 0xb8}}, 0x0) 03:50:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e61, {0x4}}, 0x14}}, 0x0) 03:50:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fff, 0x10740) 03:50:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001004c4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2461.742714] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2461.778473] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x1011}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) 03:50:12 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40800, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000300)=0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000380)={'icmp6\x00'}, &(0x7f00000003c0)=0x1e) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="86002000434fa7938b8a8dda0a2a", @ANYRES16=r3, @ANYBLOB="010000000000000000000a0000000c0003800800010002000000"], 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2e0e29dd7000efdbdf250d000000"], 0x14}}, 0x20000000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x3, r8}) [ 2461.787424] syz-executor.2 cpuset=syz2 mems_allowed=0-1 03:50:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x442880, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000080)=0x4) [ 2461.831863] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2461.839546] CPU: 0 PID: 32467 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2461.848148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.857511] Call Trace: [ 2461.860119] dump_stack+0x188/0x20d [ 2461.863791] dump_header+0x159/0xa5e [ 2461.867521] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2461.872638] ? ___ratelimit+0x59/0x573 [ 2461.876543] oom_kill_process.cold+0x10/0x6dc [ 2461.881058] ? task_will_free_mem+0x134/0x6d0 [ 2461.885582] out_of_memory+0x349/0x1250 [ 2461.889576] ? oom_killer_disable+0x270/0x270 [ 2461.894095] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2461.898959] ? memcg_event_wake+0x210/0x210 [ 2461.903316] ? do_raw_spin_unlock+0x171/0x260 [ 2461.907826] try_charge+0xe22/0x1300 [ 2461.911560] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2461.916424] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2461.921287] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2461.927377] mem_cgroup_try_charge+0x249/0x5c0 [ 2461.932044] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2461.937000] __handle_mm_fault+0x1cfb/0x3b60 [ 2461.941531] ? copy_page_range+0x1e70/0x1e70 [ 2461.945968] ? count_memcg_event_mm+0x279/0x4c0 [ 2461.950678] handle_mm_fault+0x1a5/0x670 [ 2461.954764] __do_page_fault+0x5ed/0xdd0 [ 2461.958850] ? trace_hardirqs_off_caller+0x55/0x210 [ 2461.963925] ? vmalloc_fault+0x730/0x730 [ 2461.968158] ? page_fault+0x8/0x30 [ 2461.971716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2461.976574] ? page_fault+0x8/0x30 [ 2461.980131] page_fault+0x1e/0x30 [ 2461.983597] RIP: 0033:0x45f1fd [ 2461.986797] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2462.005805] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2462.011184] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2462.018577] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2462.025857] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2462.033136] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2462.040423] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:fonts_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x6}, 0x49) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 03:50:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100604e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2462.244991] Task in /syz2 killed as a result of limit of /syz2 [ 2462.265638] memory: usage 307200kB, limit 307200kB, failcnt 1935 [ 2462.311524] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2462.327887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2462.346518] Memory cgroup stats for /syz2: cache:0KB rss:196KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2462.375460] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@ipx={0x4, 0x1, 0x9, "b70c35644f67", 0xff}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000200000000000000"], 0x24}}, 0x0) 03:50:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8, 0x500}]]}}}]}, 0xb8}}, 0x0) [ 2462.439251] Memory cgroup out of memory: Kill process 32467 (syz-executor.2) score 1103 or sacrifice child [ 2462.457815] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2462.474356] Killed process 32467 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:50:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) [ 2462.521213] oom_reaper: reaped process 32467 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 03:50:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x22e62, {0x4}}, 0x14}}, 0x0) 03:50:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x309002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @llc={0x1a, 0x17, 0x12, 0xff, 0x5, 0x4a, @broadcast}, @sco={0x1f, @none}, @phonet={0x23, 0x1, 0x20, 0x4}, 0x7f, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x162, 0x9681, 0x528}) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800023000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000061d8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) 03:50:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100684e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:13 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3e000000694f6c421f7c40a7277a372f884e79b4ffcdfc53b1989b383f7b6e8b9ca23635eb0a47974735d59f756de799ad3a31c3cf7387163822d7b70eb7af721bd4787759f499ff35eb3a6033af730042337c37d6a368bbcb57375f17492d04fd8b72a8c8d5d3f70a70f3872f8c", @ANYRES16=r2, @ANYBLOB="02002cbd7000ffdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2004c044) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x401, 0x4, 0x8, 0x5, 0x100, 0x6, 0x400}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getresgid(&(0x7f0000000340), &(0x7f00000003c0)=0x0, &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[r6, 0x0]) chown(&(0x7f00000000c0)='./file0\x00', r5, r6) 03:50:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x800000000000401) r3 = accept4(r2, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r5, 0x5}, 0xc) [ 2462.816124] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2462.837087] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2462.880749] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2462.893611] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2462.900009] CPU: 0 PID: 32609 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2462.907907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.917359] Call Trace: [ 2462.919970] dump_stack+0x188/0x20d [ 2462.923619] dump_header+0x159/0xa5e [ 2462.927352] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2462.932479] ? ___ratelimit+0x59/0x573 [ 2462.936389] oom_kill_process.cold+0x10/0x6dc [ 2462.940965] ? task_will_free_mem+0x134/0x6d0 [ 2462.945482] out_of_memory+0x349/0x1250 [ 2462.949477] ? oom_killer_disable+0x270/0x270 [ 2462.953999] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2462.958871] ? memcg_event_wake+0x210/0x210 [ 2462.963222] ? do_raw_spin_unlock+0x171/0x260 [ 2462.967768] try_charge+0xe22/0x1300 [ 2462.971511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2462.976462] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2462.981327] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2462.987565] mem_cgroup_try_charge+0x249/0x5c0 [ 2462.992306] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2462.997264] __handle_mm_fault+0x1cfb/0x3b60 [ 2463.001960] ? copy_page_range+0x1e70/0x1e70 [ 2463.006389] ? count_memcg_event_mm+0x279/0x4c0 [ 2463.011094] handle_mm_fault+0x1a5/0x670 [ 2463.015175] __do_page_fault+0x5ed/0xdd0 [ 2463.019259] ? trace_hardirqs_off_caller+0x55/0x210 [ 2463.024289] ? vmalloc_fault+0x730/0x730 [ 2463.028362] ? page_fault+0x8/0x30 [ 2463.031917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2463.036782] ? page_fault+0x8/0x30 [ 2463.040340] page_fault+0x1e/0x30 [ 2463.043806] RIP: 0033:0x45f1fd [ 2463.047006] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2463.065946] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2463.071321] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2463.078606] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2463.085893] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2463.093186] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2463.100609] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac 03:50:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) accept$netrom(r2, 0x0, &(0x7f0000000000)) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x2}}}, 0x24}}, 0x0) [ 2463.129799] Task in /syz2 killed as a result of limit of /syz2 [ 2463.136542] memory: usage 307200kB, limit 307200kB, failcnt 1971 [ 2463.143494] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2463.150546] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2463.157535] Memory cgroup stats for /syz2: cache:0KB rss:60KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001006c4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:13 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xa, {0x1, 0x6, 0x40}}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000002c0)=@ethtool_sset_info={0x8, 0x0, 0x0, [0x401]}}) r5 = accept4(r4, &(0x7f0000000100)=@sco={0x1f, @fixed}, &(0x7f0000000180)=0x80, 0x800) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x200, 0x70bd27, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x14000}) [ 2463.279221] Memory cgroup out of memory: Kill process 32609 (syz-executor.2) score 1103 or sacrifice child [ 2463.325245] Killed process 32609 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2463.353171] oom_reaper: reaped process 32609 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 03:50:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x30000, {0x4}}, 0x14}}, 0x0) [ 2463.412380] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xf}}, 0x0) [ 2463.482848] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:14 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x2, 0x4000000}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x3, @pix={0x800, 0x7fff, 0x55595659, 0x4, 0x9, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x1, 0x3}}) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000200)={0x0, 0x5, 0x0, [], &(0x7f00000001c0)}) 03:50:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100744e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2463.624134] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:50:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="08000003000000001700000000030000"]}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200), 0x4) recvfrom$unix(r0, &(0x7f0000000040)=""/247, 0xf7, 0x20010020, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x94e, 0x3, 0x10000, 0x9, 0xff, "072a290e0a6a5684e59a0b5d55f76ae98d560b", 0x44411266}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, 0x0) [ 2463.669074] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2463.686891] CPU: 0 PID: 375 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2463.694652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.704014] Call Trace: [ 2463.706616] dump_stack+0x188/0x20d [ 2463.710261] dump_header+0x159/0xa5e [ 2463.714020] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2463.719140] ? ___ratelimit+0x59/0x573 [ 2463.723046] oom_kill_process.cold+0x10/0x6dc [ 2463.727562] ? task_will_free_mem+0x134/0x6d0 [ 2463.732074] out_of_memory+0x349/0x1250 [ 2463.736073] ? oom_killer_disable+0x270/0x270 [ 2463.740594] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2463.745454] ? memcg_event_wake+0x210/0x210 [ 2463.749796] ? do_raw_spin_unlock+0x171/0x260 [ 2463.754307] try_charge+0xe22/0x1300 [ 2463.758041] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2463.762901] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2463.767784] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2463.773865] mem_cgroup_try_charge+0x249/0x5c0 [ 2463.778474] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2463.783420] __handle_mm_fault+0x1cfb/0x3b60 [ 2463.787840] ? copy_page_range+0x1e70/0x1e70 [ 2463.792260] ? count_memcg_event_mm+0x279/0x4c0 [ 2463.797044] handle_mm_fault+0x1a5/0x670 [ 2463.801123] __do_page_fault+0x5ed/0xdd0 [ 2463.805202] ? trace_hardirqs_off_caller+0x55/0x210 [ 2463.810234] ? vmalloc_fault+0x730/0x730 [ 2463.814310] ? page_fault+0x8/0x30 [ 2463.817953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2463.823263] ? page_fault+0x8/0x30 [ 2463.826811] page_fault+0x1e/0x30 [ 2463.830272] RIP: 0033:0x45f1fd [ 2463.833474] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2463.852394] RSP: 002b:00007ffc5c858ce8 EFLAGS: 00010202 [ 2463.857769] RAX: ffffffffffffffea RBX: 00007f1b0e98f700 RCX: 00007f1b0e98f700 [ 2463.865044] RDX: 00000000003d0f00 RSI: 00007f1b0e98edb0 RDI: 0000000000413430 [ 2463.872438] RBP: 00007ffc5c858f00 R08: 00007f1b0e98f9d0 R09: 00007f1b0e98f700 [ 2463.879725] R10: 00007f1b0e98edc0 R11: 0000000000000246 R12: 0000000000000000 [ 2463.887070] R13: 00007ffc5c858d9f R14: 00007f1b0e98f9c0 R15: 000000000076bfac [ 2463.908643] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_dccp_int(r1, 0x21, 0x19, &(0x7f0000000000)=0x33, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) r3 = socket(0xf, 0x2, 0x25) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000100)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 03:50:14 executing program 3: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x3ff}, @in6={0xa, 0x4e22, 0xfffffffc, @loopback, 0x81}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xf, 0x101000) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000000c0)={0x2b, @rand_addr, 0x4e20, 0x1, 'lblcr\x00', 0x0, 0x6, 0x48}, 0x2c) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) [ 2463.961461] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2464.039793] Task in /syz2 killed as a result of limit of /syz2 03:50:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a9020000000001007a4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2464.082611] memory: usage 307200kB, limit 307200kB, failcnt 1998 03:50:14 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x401, 0xb, 0x4, 0x2000000, 0x9, {0x0, 0x2710}, {0x4, 0x1, 0xf9, 0x4, 0x2, 0x65, 'Gsx\x00'}, 0x2, 0x1, @planes=&(0x7f0000000140)={0x0, 0xf1, @fd, 0xffff}, 0x9, 0x0, r0}) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000200)=0x10000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x2}, 0x8) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xffffffff7fffffff, 0x2d0000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)) [ 2464.164992] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff9, 0xfff2}, {0x3, 0x4}, {0xe, 0xfff3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000300099000825bd0001001101c525d499f8062fcb48eccd8fd2f51154fe0bdb9c7ba0c8a7b80033005e7781e3f98d95d52400"], 0x18}}, 0x0) [ 2464.226024] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2464.258178] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. 03:50:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x10}}, 0x0) [ 2464.278434] Memory cgroup stats for /syz2: cache:0KB rss:56KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2464.334065] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2464.358928] Memory cgroup out of memory: Kill process 375 (syz-executor.2) score 1103 or sacrifice child 03:50:15 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x32, 0x15, 0x5, 0x3, 0x6, 0x5d, 0x0, 0x127, 0xffffffffffffffff}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000000)) [ 2464.373426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39168 sclass=netlink_route_socket pig=633 comm=syz-executor.4 [ 2464.401126] Killed process 375 (syz-executor.2) total-vm:74832kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2464.430702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39168 sclass=netlink_route_socket pig=715 comm=syz-executor.4 [ 2464.443929] oom_reaper: reaped process 375 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 03:50:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x600000, {0x4}}, 0x14}}, 0x0) 03:50:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x2}, 0x18) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x2}}}, 0x24}}, 0x0) 03:50:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000010eb94e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2464.633833] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2464.673368] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2464.693530] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2464.714692] CPU: 0 PID: 789 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2464.722540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.731897] Call Trace: [ 2464.734500] dump_stack+0x188/0x20d [ 2464.738167] dump_header+0x159/0xa5e [ 2464.742046] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2464.747177] ? ___ratelimit+0x59/0x573 [ 2464.751104] oom_kill_process.cold+0x10/0x6dc [ 2464.755626] ? task_will_free_mem+0x134/0x6d0 [ 2464.760142] out_of_memory+0x349/0x1250 [ 2464.764138] ? oom_killer_disable+0x270/0x270 [ 2464.768660] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2464.773511] ? memcg_event_wake+0x210/0x210 [ 2464.775884] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2464.777846] ? do_raw_spin_unlock+0x171/0x260 [ 2464.777862] try_charge+0xe22/0x1300 [ 2464.777882] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2464.777900] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2464.804026] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2464.810112] ? __lock_acquire+0x6ee/0x49c0 [ 2464.814717] mem_cgroup_try_charge+0x249/0x5c0 [ 2464.819315] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2464.824256] wp_page_copy+0x3fe/0x1530 [ 2464.828160] ? follow_pfn+0x260/0x260 [ 2464.831978] ? __lock_acquire+0x6ee/0x49c0 [ 2464.836225] do_wp_page+0x518/0xfa0 [ 2464.839856] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2464.844708] __handle_mm_fault+0x21a4/0x3b60 [ 2464.849139] ? copy_page_range+0x1e70/0x1e70 [ 2464.853557] ? count_memcg_event_mm+0x279/0x4c0 [ 2464.858260] handle_mm_fault+0x1a5/0x670 [ 2464.862336] __do_page_fault+0x5ed/0xdd0 [ 2464.866421] ? trace_hardirqs_off_caller+0x55/0x210 [ 2464.871448] ? vmalloc_fault+0x730/0x730 [ 2464.875521] ? page_fault+0x8/0x30 [ 2464.879072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2464.883923] ? page_fault+0x8/0x30 [ 2464.887489] page_fault+0x1e/0x30 [ 2464.890982] RIP: 0033:0x40ee58 [ 2464.894176] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 88 2e 00 00 8b 05 b2 91 33 00 48 8b 15 2b 38 87 00 83 c0 01 <89> 05 a2 91 33 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 2464.913084] RSP: 002b:00007ffc5c858db0 EFLAGS: 00010202 [ 2464.918451] RAX: 0000000000000001 RBX: 0000001b2be20014 RCX: 0000001b2ce20000 [ 2464.925730] RDX: 0000001b2be20000 RSI: 000000000000111e RDI: ffffffff5a45d11e [ 2464.933007] RBP: 0000001b2be20018 R08: 000000005a45d11e R09: 000000005a45d122 [ 2464.940413] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 0000001b2be2001c [ 2464.947690] R13: 00000000002554c3 R14: 000000000076bf00 R15: 000000000076bf0c 03:50:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4a000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x1, 0x1, 0xa, 0x8, 0x67}, &(0x7f0000000100)=0x20) 03:50:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000010fff4e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xc0}}, 0x0) 03:50:15 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "fa67b59e5e227d6c", "bed1c332315a00160962302d9a9b56a7", "f2e52699", "6a30170e83f2e2be"}, 0x28) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x3}}) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/245) 03:50:15 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x3c79440f) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x0, 0x4, 0x4, 0x4}}, 0x80) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'virt_wifi0\x00', @ifru_settings={0x7f, 0x9, @fr_pvc_info=&(0x7f0000000400)={0x7fffffff, 'macvlan1\x00'}}}}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000340)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x81, 'syz0\x00', @default, 0x8000, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x3d, 0x1, @thr={&(0x7f0000000140)="39d9b8f07bdf3f78cb4786de756a66b9c3162aa762bad6344368196e61f9a75611cf992ded65b8f14f92f9b6d1e87a9ec3d22edd2d83826a71bb799aeaddca0513b40b9684f975add61ebab941e84e3d94ca2d612f484f274be3b74157c61c34b41e1f28c88ab0b7cb9b87365dec760c2296b509fc", &(0x7f00000001c0)="5c4d6144ff8ecd56118c16b3cb18845818368929cea7c9d87c8e9d9dc459b937b1914fcde92bbc2de16af3d77f243ef6bdd06af59bc4dec75e5400ba08d9776235872a618071"}}, &(0x7f0000000300)=0x0) timer_delete(r7) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002a0027decc09a3c321a126040f00905e500f98b2661414710000000000000000cc0000", @ANYRES32=r8, @ANYBLOB="98602e2aec407c3d0000000000007f00000000000000fec98b25e26f1634"], 0x24}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 2465.130229] Task in /syz2 killed as a result of limit of /syz2 [ 2465.161605] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2465.189481] memory: usage 307200kB, limit 307200kB, failcnt 2025 [ 2465.196095] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2465.220297] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2465.221413] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101000, 0x0) pipe(&(0x7f0000000040)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM(0x23, 0x23354a9332cc372c, &(0x7f0000fe9000/0x14000)=nil) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc008ae09, 0x0) [ 2465.238258] Memory cgroup stats for /syz2: cache:0KB rss:56KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2465.266114] Memory cgroup out of memory: Kill process 789 (syz-executor.2) score 1103 or sacrifice child [ 2465.277515] Killed process 789 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2465.292960] oom_reaper: reaped process 789 (syz-executor.2), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB 03:50:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x80000000, 'syz0\x00', @null, 0x10000, 0x6, [@default, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x60802, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)={0x0, 0x0}) kcmp(r6, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sched_setparam(r4, &(0x7f0000000240)=0xff) ioctl$VIDIOC_S_INPUT(r3, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000140)={0x5, 0x2, 0x9a9d}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x0, @rand_addr="1cc426dfb6e3a769bffdda375d0be9b9", 0x1}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @loopback}], 0x7c) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) 03:50:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0xf0ffff, {0x4}}, 0x14}}, 0x0) 03:50:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a90200000000010000252f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) [ 2465.537233] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2465.560110] syz-executor.2 cpuset=syz2 mems_allowed=0-1 03:50:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0285629, &(0x7f0000000040)=0x3) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000100)={0x2, "d0395fe9a42f93a28659f8dcc77456da2344c118b46f742d22a6ec558fc6a33b", 0x2, 0x0, 0x5, 0x1000, 0x10, 0x8}) r5 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) tee(r3, r5, 0x5, 0x9) [ 2465.576028] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2465.619410] CPU: 0 PID: 959 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2465.627162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.636525] Call Trace: [ 2465.639125] dump_stack+0x188/0x20d [ 2465.642776] dump_header+0x159/0xa5e [ 2465.643087] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2465.646502] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2465.646516] ? ___ratelimit+0x59/0x573 [ 2465.646534] oom_kill_process.cold+0x10/0x6dc [ 2465.646553] ? task_will_free_mem+0x134/0x6d0 [ 2465.672809] out_of_memory+0x349/0x1250 [ 2465.676813] ? oom_killer_disable+0x270/0x270 [ 2465.681334] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2465.686198] ? memcg_event_wake+0x210/0x210 [ 2465.690546] ? do_raw_spin_unlock+0x171/0x260 [ 2465.695077] try_charge+0xe22/0x1300 [ 2465.698846] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2465.703707] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2465.708617] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2465.714789] ? __lock_acquire+0x6ee/0x49c0 [ 2465.719047] mem_cgroup_try_charge+0x249/0x5c0 [ 2465.723646] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2465.729557] wp_page_copy+0x3fe/0x1530 [ 2465.733462] ? mark_held_locks+0xa6/0xf0 [ 2465.737533] ? follow_pfn+0x260/0x260 [ 2465.741344] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2465.747416] do_wp_page+0x518/0xfa0 [ 2465.751054] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2465.755768] __handle_mm_fault+0x21a4/0x3b60 [ 2465.761353] ? copy_page_range+0x1e70/0x1e70 03:50:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0xec0}}, 0x0) 03:50:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000040)={{0x8, 0x6}, {0x5, 0xff}, 0x489, 0x1, 0xaa}) [ 2465.766048] ? count_memcg_event_mm+0x279/0x4c0 [ 2465.770754] handle_mm_fault+0x1a5/0x670 [ 2465.774853] __do_page_fault+0x5ed/0xdd0 [ 2465.778936] ? trace_hardirqs_off_caller+0x55/0x210 [ 2465.783962] ? vmalloc_fault+0x730/0x730 [ 2465.788069] ? page_fault+0x8/0x30 [ 2465.791632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2465.796580] ? page_fault+0x8/0x30 [ 2465.800252] page_fault+0x1e/0x30 [ 2465.803712] RIP: 0033:0x40ee58 [ 2465.806910] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 88 2e 00 00 8b 05 b2 91 33 00 48 8b 15 2b 38 87 00 83 c0 01 <89> 05 a2 91 33 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 2465.825825] RSP: 002b:00007ffc5c858db0 EFLAGS: 00010202 [ 2465.831209] RAX: 0000000000000001 RBX: 0000001b2be20014 RCX: 0000001b2ce20000 [ 2465.838592] RDX: 0000001b2be20000 RSI: 000000000000111e RDI: ffffffff5a45d11e [ 2465.845882] RBP: 0000001b2be20018 R08: 000000005a45d11e R09: 000000005a45d122 [ 2465.853164] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 0000001b2be2001c [ 2465.860450] R13: 000000000025583b R14: 000000000076bf00 R15: 000000000076bf0c 03:50:16 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_sset_info={0x8}}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "e82a83e7f350bb45", "5fb718d23a0fbf0bc2706536fc8df1ca54ada4dc6d3ae7dfa827f5406f1dae78", "d0931bd1", "fb0271cc8681550f"}, 0x38) [ 2465.901436] Task in /syz2 killed as a result of limit of /syz2 [ 2465.910447] memory: usage 307200kB, limit 307200kB, failcnt 2059 [ 2465.919747] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:50:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100024e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2465.971634] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2465.980998] Memory cgroup stats for /syz2: cache:0KB rss:56KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:140KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc008ae09, 0x0) [ 2466.053023] Memory cgroup out of memory: Kill process 959 (syz-executor.2) score 1103 or sacrifice child 03:50:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}}}, 0x24}}, 0x0) 03:50:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) ioctl$int_out(r1, 0x5460, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)) [ 2466.101584] Killed process 959 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2466.134011] oom_reaper: reaped process 959 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:50:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x1000000, {0x4}}, 0x14}}, 0x0) [ 2466.160848] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2466.205341] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. 03:50:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x301000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000080)=""/124) [ 2466.259795] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 03:50:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100034e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2466.312383] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2466.334797] CPU: 0 PID: 1206 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2466.342639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.352006] Call Trace: [ 2466.354614] dump_stack+0x188/0x20d [ 2466.358249] dump_header+0x159/0xa5e [ 2466.361983] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2466.367102] ? ___ratelimit+0x59/0x573 [ 2466.371019] oom_kill_process.cold+0x10/0x6dc [ 2466.375530] ? task_will_free_mem+0x134/0x6d0 [ 2466.380042] out_of_memory+0x349/0x1250 [ 2466.384045] ? oom_killer_disable+0x270/0x270 [ 2466.388560] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2466.393423] ? memcg_event_wake+0x210/0x210 [ 2466.397759] ? do_raw_spin_unlock+0x171/0x260 [ 2466.402264] try_charge+0xe22/0x1300 [ 2466.405997] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2466.410856] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2466.415717] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2466.422285] ? __lock_acquire+0x6ee/0x49c0 [ 2466.426549] mem_cgroup_try_charge+0x249/0x5c0 [ 2466.431146] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2466.436085] wp_page_copy+0x3fe/0x1530 [ 2466.439989] ? follow_pfn+0x260/0x260 [ 2466.443796] ? __lock_acquire+0x6ee/0x49c0 [ 2466.448055] do_wp_page+0x518/0xfa0 [ 2466.451688] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2466.456380] __handle_mm_fault+0x21a4/0x3b60 [ 2466.460797] ? copy_page_range+0x1e70/0x1e70 [ 2466.465216] ? count_memcg_event_mm+0x279/0x4c0 [ 2466.469910] handle_mm_fault+0x1a5/0x670 [ 2466.473986] __do_page_fault+0x5ed/0xdd0 [ 2466.478061] ? trace_hardirqs_off_caller+0x55/0x210 [ 2466.483086] ? vmalloc_fault+0x730/0x730 [ 2466.487152] ? page_fault+0x8/0x30 [ 2466.490698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2466.495544] ? page_fault+0x8/0x30 [ 2466.499087] page_fault+0x1e/0x30 [ 2466.502540] RIP: 0033:0x411898 [ 2466.505733] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2466.524643] RSP: 002b:00007ffc5c858d50 EFLAGS: 00010246 [ 2466.530040] RAX: 0000000069216677 RBX: 0000000046c9e7e4 RCX: 0000001b2ce20000 [ 2466.537402] RDX: 0000000000000000 RSI: 0000000000000677 RDI: ffffffff69216677 [ 2466.544682] RBP: 000000000000000f R08: 0000000069216677 R09: 000000006921667b [ 2466.551966] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 000000000076bf88 03:50:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000ffea00"/20, @ANYRES32=r2, @ANYBLOB="0000000002000f0000000000"], 0x24}}, 0x0) 03:50:17 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x0, 0x5}) [ 2466.559242] R13: 0000000080000000 R14: 00007f1b109b1008 R15: 000000000000000f [ 2466.605673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60159 sclass=netlink_route_socket pig=1327 comm=syz-executor.4 [ 2466.620150] Task in /syz2 killed as a result of limit of /syz2 [ 2466.627247] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2466.628479] memory: usage 307200kB, limit 307200kB, failcnt 2073 [ 2466.646403] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2466.655782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60159 sclass=netlink_route_socket pig=1355 comm=syz-executor.4 [ 2466.656375] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2466.675283] Memory cgroup stats for /syz2: cache:0KB rss:56KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r10, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x705, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xffffffff}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8205}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}], @vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xe016}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x401}, @IFLA_VTI_OKEY={0x8, 0x3, 0x200}], @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xc736}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x33fe0}}, 0x0) [ 2466.702923] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2466.714949] Memory cgroup out of memory: Kill process 1206 (syz-executor.2) score 1103 or sacrifice child [ 2466.731899] Killed process 1206 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB 03:50:17 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0xc023}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0x228, @remote, 0x8}, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff7fff}, 0x1, [0x0, 0x7, 0xb06, 0x6, 0xc00000, 0x6, 0xb0, 0x400]}, 0x5c) [ 2466.751648] oom_reaper: reaped process 1206 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 03:50:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000000)='-\xe6)\\)\x00', 0x0, 0x20, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x8}) socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x1010000, {0x4}}, 0x14}}, 0x0) 03:50:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100044e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) 03:50:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5, {0x60}, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x698840, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@deltfilter={0x1878, 0x2d, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff2, 0x3}, {0xffe0, 0xffe0}, {0xfff2, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0xd4}, @filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x1530, 0x2, [@TCA_U32_SEL={0x704, 0x5, {0x2, 0x9, 0x3, 0x21d, 0x0, 0x8001, 0x8001, 0x7fffffff, [{0x8, 0x4, 0x5e, 0xfffffffb}, {0x7fff, 0x5, 0x9, 0xffffffc1}, {0x7fff, 0xfb3, 0x7, 0x401}, {0x5, 0x7, 0x3ff, 0x10001}, {0xaf, 0x7, 0xe1d, 0x7b}, {0x5, 0x7, 0xfff, 0x64}, {0x7, 0x80000001}, {0x1, 0x1, 0x20000, 0x7}, {0x5, 0x9, 0x3, 0x80000001}, {0x1f, 0x4, 0xc7bd, 0xffffffd3}, {0x401, 0x74, 0x1, 0x7}, {0x80000001, 0x3, 0x3, 0x5}, {0x0, 0x3f, 0x3, 0x6}, {0x4, 0x20, 0x8, 0x1000}, {0x7f, 0x8, 0xba, 0xe72}, {0x3f, 0xdb02, 0x7, 0x6}, {0x7d94, 0xfffff001, 0x114cc72b, 0x101}, {0x80000000, 0x81, 0x1ff, 0x8}, {0x8001, 0x5, 0x5, 0x80}, {0x0, 0x2, 0xece, 0x4}, {0x1, 0x2ad8, 0x3f, 0x80}, {0xd8e, 0x80000000, 0x4c, 0x1}, {0x3, 0x8, 0x6, 0xad87}, {0x100, 0x7ff, 0x7fff, 0x8}, {0x1ff, 0x101, 0x800, 0x2}, {0x7ff, 0x2, 0x1, 0x49}, {0x0, 0x39, 0x7, 0x40}, {0x1, 0xffff8e08, 0x0, 0x40}, {0x4, 0x3, 0x7, 0xff12}, {0x8, 0x2, 0xc00, 0x7fff}, {0x7fffffff, 0x9d, 0x3, 0x4a8}, {0x76f, 0x5, 0x8, 0x10001}, {0x0, 0x7, 0x8, 0x6}, {0x164, 0x7ff, 0x5, 0x9}, {0x4, 0xfffffffa, 0xfffffffc, 0x5}, {0xff, 0x10001, 0xb197, 0xfff}, {0x80000001, 0x6, 0x5, 0x1}, {0x8, 0x5, 0xff, 0x5}, {0x0, 0xff, 0x7, 0x200000}, {0x6, 0xfffff287, 0x0, 0x8}, {0x1, 0x9, 0x7fffffff, 0x80000000}, {0x8d, 0x3, 0x5, 0x7}, {0xff, 0xc0000000, 0x0, 0xfff}, {0x40, 0x35e700a, 0x7, 0x2}, {0xffffff7f, 0x9, 0x5, 0x81}, {0x4, 0xc349, 0x81, 0x6}, {0xff, 0x0, 0x7}, {0x7, 0xd0, 0x1000, 0x8000}, {0x0, 0x1, 0x7fff, 0x400}, {0x3, 0x9, 0x9, 0x800}, {0x27, 0x46b, 0x1, 0x1f}, {0x5, 0x0, 0x8, 0x7}, {0x9, 0x3, 0x0, 0x10}, {0x4, 0x5, 0x6, 0x10000}, {0xffff0000, 0x5, 0x5d9, 0x16}, {0x161, 0x40, 0x12, 0x7fffffff}, {0x81, 0x100, 0x7ff, 0xfffffff8}, {0x8, 0x5, 0x8001, 0x1}, {0x8, 0x219, 0x7fff, 0x101}, {0x7, 0x3, 0x8, 0x5}, {0x1cd, 0x0, 0x0, 0x6}, {0x7fffffff, 0x4, 0x5, 0x8000}, {0xfff, 0x7f, 0x55d, 0xa9}, {0xfffffff7, 0x5, 0x1, 0x9}, {0x1f, 0x7fff, 0x6}, {0x10001, 0x8001, 0xff}, {0xff, 0x1000, 0x2, 0x2}, {0x400, 0x7, 0x0, 0x1f7}, {0x0, 0xffffffff, 0x1, 0x6a1}, {0x7ff, 0x9, 0xc0, 0xfffffb7a}, {0x8, 0x8, 0x5, 0x7}, {0x80, 0x8, 0x2c0000}, {0x4, 0xfff, 0x10000, 0x1d}, {0x0, 0x2, 0x6, 0xb18}, {0x3d, 0x12c0000, 0x0, 0x439}, {0x5, 0x8, 0x1, 0x1}, {0x8, 0x6, 0x7fffffff, 0x4}, {0x7, 0x4, 0x1, 0x800}, {0xfff, 0x6, 0x2, 0x6}, {0x1, 0x3, 0x7fffffff, 0x2}, {0x2, 0x0, 0x7fff, 0x3ff}, {0x9, 0x3, 0x10000, 0xff}, {0x0, 0x6, 0x4, 0x8}, {0x9, 0x3, 0x1, 0x3}, {0x1fc0, 0x8, 0x8, 0x26ad}, {0x4, 0x8428, 0x1, 0x7}, {0x2, 0xfd6c, 0xffff, 0x40}, {0x9, 0x4, 0x0, 0x1000}, {0x1, 0xffffffff, 0x1, 0x1ff}, {0x8, 0x1, 0x26, 0x4}, {0x7, 0x9, 0xaa, 0x6}, {0x3, 0x400, 0x3, 0x6}, {0x2, 0x4, 0x0, 0x1000}, {0x4, 0x20, 0x9, 0x6}, {0xe7, 0x35, 0x8d2, 0x5}, {0x80000001, 0x401, 0x7, 0x7fff}, {0x6, 0x3, 0x1ff, 0xfffffff7}, {0x9f4, 0x4, 0x7f, 0x7db}, {0x8, 0xf2b, 0x80000001}, {0x6, 0x401, 0x30, 0x9}, {0x0, 0x8, 0x1, 0x6}, {0x6c, 0xffffffff, 0x7f, 0x1ff}, {0x5, 0x80000000, 0x9, 0x1}, {0x400, 0x7fff, 0x9, 0x80000001}, {0x1ff, 0x3, 0x80000000}, {0x1, 0x2, 0xd5e, 0xffff}, {0xbfe3, 0x8d4, 0x0, 0x1}, {0x3, 0x5, 0xff, 0xffffffca}, {0x0, 0x9, 0xe3, 0xfffffff7}, {0x6, 0x2, 0x1, 0x100000}, {0x1000, 0xaa, 0x7fff, 0x81}]}}, @TCA_U32_MARK={0x10, 0xa, {0x101, 0xff1}}, @TCA_U32_SEL={0x684, 0x5, {0xd, 0x0, 0xb8, 0x9, 0x2, 0x401, 0xe5a2, 0xee4, [{0x7, 0x8, 0x9, 0x1}, {0x3, 0xfffffffc, 0x2d57fcf3, 0x7}, {0x0, 0x4, 0x771, 0x8}, {0xffff0001, 0x7fff, 0xc6, 0x8000}, {0xffffffc1, 0xffffffff, 0x0, 0x2}, {0xfffffc01, 0x5, 0x6, 0x7}, {0x8001, 0x7ff, 0x6f, 0x2}, {0xcc7, 0x9, 0x46, 0xf247}, {0x40, 0x3, 0x80000000, 0x200}, {0x7, 0x5, 0x9, 0x9}, {0x8, 0x0, 0xb459, 0xffffffff}, {0x80, 0x1, 0x0, 0x401}, {0x6, 0x7, 0x2, 0x81}, {0x7, 0x4806, 0x0, 0x2}, {0x7, 0x400, 0x1, 0x2}, {0x66f, 0x40, 0x912, 0x7}, {0xffff, 0x6, 0x0, 0xffffffff}, {0x1000, 0x5, 0x0, 0x20}, {0x65, 0x1, 0x7fff, 0x31}, {0x8000, 0x3ff, 0x2, 0x5fac}, {0xd8, 0x9, 0x100, 0x1000}, {0x5, 0x2, 0x8000, 0x5}, {0x5dde10ec, 0x6, 0x0, 0x3}, {0x4, 0xffee8fe, 0x25, 0x8}, {0x8, 0x0, 0x864, 0xe343}, {0x0, 0xff, 0xffff, 0x5}, {0x7, 0x5, 0x8001, 0x40}, {0x0, 0xfffff33e, 0x101, 0x9}, {0x4e1da4d6, 0x80, 0xc4, 0xffffffff}, {0x5, 0x80000000, 0x2, 0x3}, {0x4, 0x7, 0x5, 0x2}, {0x1, 0x1f, 0x7fffffff, 0xfffffffd}, {0x800, 0x1, 0x1, 0x2}, {0xbe6, 0x3, 0x6, 0x10000}, {0x98, 0x100, 0x8000, 0xc8}, {0x1, 0x4, 0x80000001, 0x47b}, {0x101, 0x2, 0x1}, {0x78, 0x0, 0x0, 0x11}, {0x6, 0x9, 0x9, 0x8}, {0x5a5, 0x3, 0x80, 0x2}, {0x2, 0x81, 0x7fffffff}, {0x7, 0x7ff, 0x10000, 0x7}, {0x5, 0x10001, 0x7ff, 0xd6b4}, {0xfff, 0x6, 0x1000, 0x7}, {0x8, 0x3, 0x2, 0x99cc}, {0xfff, 0x9, 0x9, 0x6}, {0x9, 0x5, 0x7, 0xea0}, {0x7fffffff, 0xfbfd, 0x7ff, 0x8}, {0x49a, 0x7fffffff, 0x11, 0x5}, {0x7, 0xff, 0x1, 0x7}, {0xe1, 0x2, 0x3f, 0x1}, {0x400, 0x7, 0xce, 0x7}, {0x6, 0x100, 0x1ff, 0x7f}, {0x9d, 0xeb1d, 0x80000000, 0x6}, {0x0, 0x3f, 0xaff98b04, 0x80000001}, {0x2, 0x0, 0x3, 0x9}, {0x8, 0x7, 0x4, 0x4}, {0x5, 0x5, 0x3ff}, {0x0, 0xfffff1a5, 0x6aa, 0xffff}, {0x1, 0x4, 0x8, 0x5}, {0x4, 0x0, 0x4, 0x6}, {0x1, 0x8001, 0x9d4, 0x6}, {0x81, 0x6, 0x9, 0xffffffff}, {0x6, 0x141, 0x0, 0x40}, {0x80, 0x8, 0x7a6f06f0, 0x9}, {0x20, 0x99a5, 0x3, 0x5}, {0x5, 0x9, 0x9, 0x5}, {0x4, 0x8a99, 0x1, 0x5}, {0x6, 0x0, 0x2, 0x2}, {0x4, 0x81, 0x0, 0x1d}, {0x7, 0x7, 0x2, 0x80000001}, {0xc000, 0x80000000, 0x80000000, 0x8001}, {0x2, 0x9afc, 0x2, 0x100}, {0x8, 0x0, 0x401, 0x8}, {0x7ce9, 0x1000, 0x10000, 0xffff}, {0x0, 0x3, 0xfffffff9, 0x2}, {0x20, 0x6, 0x48, 0x4}, {0x1ff, 0x0, 0x5, 0x400}, {0x2, 0x8001, 0xa88d}, {0xa4, 0x9, 0x2, 0xfffff001}, {0x3, 0xff, 0x1, 0x40}, {0x7b3b, 0x2, 0x10000, 0x5}, {0x4, 0x3, 0x8, 0x1}, {0x7, 0x8000, 0x9, 0x4}, {0x7, 0x136, 0x4}, {0x620, 0x6, 0x9, 0x5}, {0x7, 0x1000, 0x1, 0x200}, {0x100, 0x1, 0x5}, {0x4, 0x6, 0x40, 0x401}, {0x8001, 0x6, 0xfffffff7, 0x7}, {0x1a5, 0xe0, 0x5e6, 0x3e1e}, {0x4, 0x1, 0xff, 0x3}, {0x5, 0x2, 0x5, 0x7ff3e11c}, {0xfff, 0x8001, 0x1ff, 0x5}, {0xffffffff, 0x1, 0x2, 0x1000}, {0x6, 0x8b, 0xff, 0xbe9}, {0x6, 0x7, 0x64000000}, {0x1, 0xfffffffc, 0x8, 0x2}, {0x8, 0x4, 0x7, 0x76}, {0x1f, 0x8, 0xffffff69, 0x4}, {0xfffffffb, 0x0, 0x80000001, 0x10001}, {0x8001, 0x1, 0x9, 0xfffffbff}, {0x5, 0x1, 0x1f, 0x9}]}}, @TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x90000}}, @TCA_U32_SEL={0x784, 0x5, {0x3, 0x81, 0x7, 0x5852, 0x9, 0x9, 0x4a, 0xfffff92c, [{0xff, 0x80000000, 0x7, 0x3}, {0x209, 0x0, 0xfffffffe, 0x3ff}, {0x4, 0x6, 0x77, 0x9017}, {0x7c81, 0x6, 0x8f7, 0x3f}, {0x10001, 0x9, 0x0, 0x2}, {0xaf1, 0x8, 0x0, 0x2}, {0xfff, 0x4, 0x1f, 0x401}, {0x1, 0x80000000, 0x8, 0xd268}, {0x1ff, 0x9, 0x8, 0x6}, {0x7, 0x4, 0x5e0, 0x9}, {0x3, 0x6, 0xa803, 0x726d82a0}, {0xffffff25, 0x3, 0x0, 0xfffffff9}, {0x1, 0x8, 0x3, 0x7e5}, {0x7, 0x6, 0xffff0001, 0x7}, {0x0, 0x0, 0x6, 0x3}, {0x5, 0x3, 0x200, 0x3}, {0x800, 0x8319, 0x9ea, 0x4}, {0x9, 0x101, 0xbd9, 0x3}, {0x5, 0x1, 0x7fff, 0x401}, {0x100, 0x6c8c, 0x9, 0x6}, {0x4, 0xffff0001, 0xffffffff, 0x30000}, {0x0, 0x0, 0x10000, 0x1d76}, {0x1, 0x7, 0x8, 0x93}, {0x10001, 0x7fffffff, 0x0, 0x7}, {0x3, 0x7, 0x3, 0xfffffff7}, {0x3ff, 0xffff68f0, 0xfffffffd}, {0x6, 0x401, 0x4, 0x20}, {0x9, 0x4, 0x4, 0x9}, {0xfd5, 0x800, 0xf508, 0x3ff}, {0x0, 0x6, 0x7, 0xac7}, {0x20, 0xdb4d, 0x1000, 0x1000}, {0x4, 0x1000, 0x6, 0x8000}, {0x6, 0x100, 0x0, 0x3}, {0x4, 0xc2, 0x851b, 0x4}, {0x81, 0x7fffffff, 0x2}, {0x400, 0x5, 0x6, 0x5}, {0xffffff08, 0x100, 0x39, 0x80}, {0x9, 0x100, 0x5, 0x3}, {0x9, 0xffff, 0x7, 0xffffffff}, {0x400, 0x7, 0x0, 0x2}, {0x2, 0x2, 0x42, 0x8}, {0x8cb, 0x0, 0x20, 0x5}, {0x10000, 0x4c3, 0x1}, {0x8001, 0x6, 0x5, 0x861}, {0xef, 0x4, 0x6, 0x8}, {0x8001, 0x5, 0xfffffc01, 0x400}, {0x6, 0x8, 0xc41, 0x80}, {0x1, 0x1, 0xde0, 0x1}, {0x9, 0x4, 0x10000, 0xcc23}, {0xac5b, 0x8, 0x200, 0x9}, {0x8, 0x0, 0x1, 0x9}, {0x9, 0x6, 0x800, 0x5}, {0x5, 0x6, 0x9, 0x200000}, {0x80000001, 0x1020000, 0x6, 0x6}, {0x3, 0x69, 0x3}, {0x3, 0x5, 0x0, 0x4}, {0x1000, 0x9d87, 0x0, 0xbd4}, {0x2294, 0x7, 0x74f, 0x101}, {0x4, 0x4, 0x8, 0xfffffff8}, {0x5, 0x4, 0x7, 0x67}, {0x2, 0x5, 0x10001, 0x3}, {0x0, 0x200, 0x10000, 0x3113}, {0x1, 0xfffffff7, 0x5, 0x2}, {0x590e, 0x400, 0x1, 0x7}, {0x80000001, 0x0, 0x1ff}, {0x5, 0x6, 0x1ff, 0x2}, {0x1, 0x92b, 0x9a64, 0xfdc}, {0x6648, 0x5, 0x6, 0x6}, {0xffffffff, 0x4, 0x7ff, 0x4}, {0xddf, 0x0, 0x0, 0x1}, {0x1, 0xff, 0x8, 0x2a4a}, {0x1, 0x3, 0x7ff, 0x7}, {0x41bd, 0x1, 0x4, 0x552}, {0x1, 0x8, 0x1db, 0x7f}, {0x9, 0x3, 0xfffffffb, 0x1}, {0xfffffffc, 0x9, 0x6, 0x5}, {0x1, 0x909, 0x9, 0x101}, {0x5, 0x10001, 0x8000, 0x1}, {0x101, 0xc2, 0x2000000, 0x6}, {0xfffffff7, 0x5, 0x3, 0xfffffffd}, {0xe4, 0x401, 0xe26a, 0x10001}, {0x4, 0x3d, 0x21}, {0x6, 0x1, 0x6, 0x6}, {0xe184, 0xffffffff, 0x1, 0x101}, {0x84, 0x1000, 0x4, 0x20}, {0x2, 0x10000, 0x4, 0x8}, {0x4, 0x80, 0x7f, 0x7}, {0x6, 0x10000, 0x0, 0x2}, {0x7fff, 0x0, 0x0, 0x8001}, {0x7f, 0x2, 0x2, 0x14000000}, {0x5, 0x3, 0x3, 0x8}, {0x3, 0x5, 0x101, 0x1}, {0xcfd, 0xfffffffb, 0x0, 0x4}, {0x20, 0x3ff, 0x3, 0xba}, {0x1, 0x0, 0x25, 0x4}, {0x5, 0x20, 0xb522, 0x9}, {0x9a1, 0x3, 0x2e87, 0x4}, {0x10001, 0x1, 0xd6b, 0x66c}, {0x5, 0x1ff, 0x2, 0x7fffffff}, {0xfffffffb, 0x200, 0x0, 0x5}, {0x0, 0x401, 0x8, 0x5}, {0x4, 0x80000, 0x3, 0x400}, {0x7, 0x3, 0x0, 0x7ff}, {0x7ff, 0x40, 0x1, 0x8}, {0x0, 0x3ff, 0x2000000, 0x20}, {0x3ff, 0x7ff, 0x9, 0x5}, {0x4ffd186e, 0x6, 0x1, 0xffff8000}, {0x0, 0x2, 0x6, 0xd3fa}, {0xccee, 0x7, 0x7fff, 0x81}, {0xc00, 0x9, 0x8045, 0x4}, {0x1, 0x101, 0xce22}, {0x2, 0x2, 0x1f, 0x3}, {0x1, 0x7, 0x7fff, 0x401}, {0x3, 0x80, 0x1ff, 0x200}, {0x3, 0x6, 0x0, 0x6}, {0x6, 0x3, 0x7, 0x8}, {0x80000000, 0x6, 0x4}, {0x3, 0x8, 0x3ff, 0x8}, {0x0, 0x3, 0x1, 0xf02b}]}}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x11c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x87c, 0x8, 0x80, 0x8000}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0xe0, 0x1, [@m_ctinfo={0x94, 0x11, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x832}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x19, 0x6, 0x10000000, 0x80000001, 0x4}}]}, {0x3f, 0x6, "ca82ee53c0cb9b105e018c0275407d89deeec7e3cdce75f56a9bae70bda2e2131d824c508094ac38194e2f579935ffa119f49a5f10183b9edb4688"}}}, @m_nat={0x48, 0xb, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1ce, 0x6, 0x3, 0x2, 0x80000001}, @multicast1, @rand_addr=0x4, 0xff000000, 0x1}}]}, {0xe, 0x6, "98759e72761a5c93ceea"}}}]}, @TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x164, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x3f, 0x80, 0x813}, {0x4000, 0x40, 0x7f}, {0xed, 0x8, 0x1, 0x80000001}, {0x5, 0x9, 0x7f, 0x6}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xb}}, @TCA_BPF_FD={0x8, 0x6, r8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe4, 0x1, [@m_connmark={0x90, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x786c, 0x10000, 0xffffffffffffffff, 0x3, 0x4}, 0xe5}}]}, {0x59, 0x6, "8ef6acee220a2d8c5fa9bc45488ffef56079b50fd01b6b2d3fcdaf95166664594a50f6021c0c9f003890c4bf10466154b9b2e95b55fab5f1cd89f138bb463798108ccdfce347b7c7998772bd2c0796640d6d3075ae"}}}, @m_skbmod={0x50, 0x3, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="d1d509448124"}]}, {0x2f, 0x6, "c41e0dd3df2cac5d16f838216f82986ca4478e5c0d94fcc41adb8368a1815dc00a46b92d0ef84ab33729e7"}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x60, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xff, 0x4}, {0xfd83, 0x9, 0x1b4}, 0x88, 0x80, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, [], 0xc}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0xfff3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10000, 0x5, 0x1ff}, {0xffffffff, 0x2, 0xfff}, 0x11, 0x0, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x50ff}, @TCA_RATE={0x6, 0x5, {0x1, 0x1f}}]}, 0x1878}, 0x1, 0x0, 0x0, 0x4}, 0x4084) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x240341, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x2}}}, 0x24}}, 0x0) [ 2466.936004] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2466.975154] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 2466.981138] CPU: 0 PID: 1441 Comm: syz-executor.2 Not tainted 4.19.110-syzkaller #0 [ 2466.988969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.998424] Call Trace: [ 2467.001029] dump_stack+0x188/0x20d [ 2467.004667] dump_header+0x159/0xa5e [ 2467.008415] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 2467.016247] ? ___ratelimit+0x59/0x573 [ 2467.020173] oom_kill_process.cold+0x10/0x6dc [ 2467.024688] ? task_will_free_mem+0x134/0x6d0 [ 2467.029196] out_of_memory+0x349/0x1250 [ 2467.033199] ? oom_killer_disable+0x270/0x270 [ 2467.037727] mem_cgroup_out_of_memory+0x1c7/0x240 [ 2467.042584] ? memcg_event_wake+0x210/0x210 [ 2467.046930] ? do_raw_spin_unlock+0x171/0x260 [ 2467.051435] try_charge+0xe22/0x1300 [ 2467.055180] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2467.060049] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 2467.064902] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 2467.070986] ? __lock_acquire+0x6ee/0x49c0 [ 2467.075247] mem_cgroup_try_charge+0x249/0x5c0 [ 2467.080011] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 2467.084964] wp_page_copy+0x3fe/0x1530 [ 2467.088868] ? follow_pfn+0x260/0x260 [ 2467.092681] ? __lock_acquire+0x6ee/0x49c0 [ 2467.097085] do_wp_page+0x518/0xfa0 [ 2467.100731] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 2467.105418] __handle_mm_fault+0x21a4/0x3b60 [ 2467.109854] ? copy_page_range+0x1e70/0x1e70 [ 2467.114275] ? count_memcg_event_mm+0x279/0x4c0 [ 2467.118972] handle_mm_fault+0x1a5/0x670 [ 2467.123072] __do_page_fault+0x5ed/0xdd0 [ 2467.127151] ? trace_hardirqs_off_caller+0x55/0x210 [ 2467.132170] ? vmalloc_fault+0x730/0x730 [ 2467.136235] ? page_fault+0x8/0x30 [ 2467.139779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2467.140679] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2467.144628] ? page_fault+0x8/0x30 [ 2467.160128] page_fault+0x1e/0x30 [ 2467.163585] RIP: 0033:0x411898 [ 2467.166790] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0d 21 4c 00 31 c0 e8 d3 02 ff ff 31 ff e8 8c 09 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d b6 0d 87 00 [ 2467.185699] RSP: 002b:00007ffc5c858d50 EFLAGS: 00010246 [ 2467.191073] RAX: 0000000069216677 RBX: 0000000046c9e7e4 RCX: 0000001b2ce20000 [ 2467.198383] RDX: 0000000000000000 RSI: 0000000000000677 RDI: ffffffff69216677 [ 2467.201092] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2467.205746] RBP: 000000000000000f R08: 0000000069216677 R09: 000000006921667b [ 2467.221261] R10: 00007ffc5c858ef0 R11: 0000000000000246 R12: 000000000076bf88 [ 2467.228620] R13: 0000000080000000 R14: 00007f1b109b1008 R15: 000000000000000f [ 2467.282640] Task in /syz2 killed as a result of limit of /syz2 [ 2467.295051] memory: usage 307200kB, limit 307200kB, failcnt 2092 03:50:17 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f00000000c0)=0x3) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) 03:50:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000280)="25bca27465079c2f2734fa0095e0612687ecb86a548802a902000000000100054e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253efc4a567a08c5cafe6239eb0c7af4816bf0d3cc586d241c3c8d2628ce366a9cac1a111053e52aef02b5fa65627", 0x66, 0x400}], 0x0, 0x0) [ 2467.335634] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2467.368679] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2467.402302] Memory cgroup stats for /syz2: cache:0KB rss:56KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB 03:50:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="789800002a002700"/20, @ANYRES32=r0, @ANYBLOB="000000000200000000000000"], 0x3}}, 0x0) [ 2467.445792] Memory cgroup out of memory: Kill process 1441 (syz-executor.2) score 1103 or sacrifice child [ 2467.467194] Killed process 1441 (syz-executor.2) total-vm:74700kB, anon-rss:100kB, file-rss:34816kB, shmem-rss:0kB [ 2467.491271] oom_reaper: reaped process 1441 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 2467.515174] EXT4-fs warning (device loop5): ext4_fill_super:3655: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2467.582881] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2476.480257] NOHZ: local_softirq_pending 08 [ 2504.882995] NOHZ: local_softirq_pending 08 [ 2619.099027] NOHZ: local_softirq_pending 08 [ 2620.387743] INFO: task syz-executor.0:1310 blocked for more than 140 seconds. [ 2620.395057] Not tainted 4.19.110-syzkaller #0 [ 2620.407574] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2620.415661] syz-executor.0 D29632 1310 8133 0x00000004 [ 2620.428052] Call Trace: [ 2620.430679] ? __schedule+0x866/0x1d80 [ 2620.434582] ? firmware_map_remove+0x19a/0x19a [ 2620.445240] ? ___preempt_schedule+0x16/0x18 [ 2620.451010] schedule+0x8d/0x1b0 [ 2620.454396] rwsem_down_write_failed+0x774/0xc30 [ 2620.465112] ? __lock_acquire+0x6ee/0x49c0 [ 2620.473236] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 2620.483953] ? find_held_lock+0x2d/0x110 [ 2620.488094] ? __debug_object_init+0x17d/0xac0 [ 2620.494020] ? call_rwsem_down_write_failed+0x13/0x20 [ 2620.505815] call_rwsem_down_write_failed+0x13/0x20 [ 2620.514741] down_write+0x4f/0x90 [ 2620.518263] ? register_netdevice_notifier+0x7b/0x5a0 [ 2620.530218] register_netdevice_notifier+0x7b/0x5a0 [ 2620.535268] ? __dev_close_many+0x2e0/0x2e0 [ 2620.544485] ? __lockdep_init_map+0x100/0x5a0 [ 2620.552757] ? __lockdep_init_map+0x100/0x5a0 [ 2620.557316] bcm_init+0x1a3/0x210 [ 2620.565316] ? canbcm_pernet_init+0x90/0x90 [ 2620.572019] can_create+0x27c/0x4a0 [ 2620.575665] __sock_create+0x3d5/0x740 [ 2620.584281] __sys_socket+0xef/0x200 [ 2620.588092] ? move_addr_to_kernel+0x70/0x70 [ 2620.594681] ? __x64_sys_clock_gettime+0x165/0x240 [ 2620.604867] ? __ia32_sys_clock_settime+0x260/0x260 [ 2620.612200] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2620.617000] ? trace_hardirqs_off_caller+0x55/0x210 [ 2620.627026] __x64_sys_socket+0x6f/0xb0 [ 2620.633089] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2620.637728] do_syscall_64+0xf9/0x620 [ 2620.647090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2620.654268] RIP: 0033:0x45c849 [ 2620.657484] Code: Bad RIP value. [ 2620.665499] RSP: 002b:00007f26c0af5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2620.675235] RAX: ffffffffffffffda RBX: 00007f26c0af66d4 RCX: 000000000045c849 [ 2620.687329] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 2620.696678] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2620.708602] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2620.727146] R13: 0000000000000b67 R14: 00000000004cd99c R15: 000000000076bf0c [ 2620.735031] INFO: task syz-executor.0:1322 blocked for more than 140 seconds. [ 2620.755247] Not tainted 4.19.110-syzkaller #0 [ 2620.760344] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2620.775343] syz-executor.0 D29552 1322 8133 0x00000004 [ 2620.783327] Call Trace: [ 2620.785935] ? __schedule+0x866/0x1d80 [ 2620.789867] ? rwsem_down_write_failed+0x764/0xc30 [ 2620.808052] ? firmware_map_remove+0x19a/0x19a [ 2620.813087] ? mark_held_locks+0xa6/0xf0 [ 2620.817172] schedule+0x8d/0x1b0 [ 2620.820573] rwsem_down_write_failed+0x774/0xc30 [ 2620.832048] ? __lock_acquire+0x6ee/0x49c0 [ 2620.836318] ? rwsem_down_read_failed+0x3c0/0x3c0 [ 2620.847094] ? find_held_lock+0x2d/0x110 [ 2620.852462] ? __debug_object_init+0x17d/0xac0 [ 2620.857076] ? call_rwsem_down_write_failed+0x13/0x20 [ 2620.867936] call_rwsem_down_write_failed+0x13/0x20 [ 2620.880096] down_write+0x4f/0x90 [ 2620.889264] ? register_netdevice_notifier+0x7b/0x5a0 [ 2620.895731] register_netdevice_notifier+0x7b/0x5a0 [ 2620.900799] ? __dev_close_many+0x2e0/0x2e0 [ 2620.910823] ? __lockdep_init_map+0x100/0x5a0 [ 2620.917575] ? __lockdep_init_map+0x100/0x5a0 [ 2620.928330] bcm_init+0x1a3/0x210 [ 2620.933330] ? canbcm_pernet_init+0x90/0x90 [ 2620.937689] can_create+0x27c/0x4a0 [ 2620.941376] __sock_create+0x3d5/0x740 [ 2620.951965] __sys_socket+0xef/0x200 [ 2620.961406] ? move_addr_to_kernel+0x70/0x70 [ 2620.972294] ? __x64_sys_clock_gettime+0x165/0x240 [ 2620.977272] ? __ia32_sys_clock_settime+0x260/0x260 [ 2620.989187] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2620.994627] ? trace_hardirqs_off_caller+0x55/0x210 [ 2620.999671] __x64_sys_socket+0x6f/0xb0 [ 2621.010339] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 2621.015354] do_syscall_64+0xf9/0x620 [ 2621.019178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2621.031112] RIP: 0033:0x45c849 [ 2621.037948] Code: Bad RIP value. [ 2621.041395] RSP: 002b:00007f26c0ad4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2621.056709] RAX: ffffffffffffffda RBX: 00007f26c0ad56d4 RCX: 000000000045c849 [ 2621.067144] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 2621.078456] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2621.088898] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2621.100116] R13: 0000000000000b67 R14: 00000000004cd99c R15: 000000000076bfac [ 2621.110577] [ 2621.110577] Showing all locks held in the system: [ 2621.121155] 1 lock held by khungtaskd/1078: [ 2621.128633] #0: 00000000c5c3e7c9 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 2621.141293] 1 lock held by rsyslogd/7972: [ 2621.148519] #0: 000000004c888eec (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 2621.160636] 2 locks held by getty/8094: [ 2621.167629] #0: 0000000098dc53a5 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.180114] #1: 00000000284b6c7e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.192880] 2 locks held by getty/8095: [ 2621.200583] #0: 00000000ff58a4b6 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.212321] #1: 00000000981975f7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.225266] 2 locks held by getty/8096: [ 2621.229261] #0: 00000000d64d713a (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.243472] #1: 00000000143fa55a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.253604] 2 locks held by getty/8097: [ 2621.263230] #0: 00000000e7a4188a (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.272964] #1: 00000000f948bd44 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.289531] 2 locks held by getty/8098: [ 2621.293558] #0: 00000000acb46dbc (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.305219] #1: 00000000cd54f9ea (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.314128] 2 locks held by getty/8099: [ 2621.324652] #0: 00000000aeecd91d (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.334467] #1: 0000000078be2ae2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.349937] 2 locks held by getty/8100: [ 2621.353975] #0: 000000006f420389 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2621.364284] #1: 000000009cd646fa (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1a50 [ 2621.379187] 3 locks held by kworker/u4:0/5194: [ 2621.383808] #0: 000000007f830a45 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x81a/0x1640 [ 2621.396955] #1: 0000000093654907 (net_cleanup_work){+.+.}, at: process_one_work+0x84e/0x1640 [ 2621.405687] #2: 000000003d6bf227 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x850 [ 2621.420605] 1 lock held by syz-executor.0/1310: [ 2621.425306] #0: 000000003d6bf227 (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0x7b/0x5a0 [ 2621.437004] 1 lock held by syz-executor.0/1322: [ 2621.441677] #0: 000000003d6bf227 (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0x7b/0x5a0 [ 2621.462616] [ 2621.464275] ============================================= [ 2621.464275] [ 2621.473801] NMI backtrace for cpu 0 [ 2621.477605] CPU: 0 PID: 1078 Comm: khungtaskd Not tainted 4.19.110-syzkaller #0 [ 2621.485063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2621.494423] Call Trace: [ 2621.497145] dump_stack+0x188/0x20d [ 2621.500787] nmi_cpu_backtrace.cold+0x63/0xa2 [ 2621.505302] ? lapic_can_unplug_cpu.cold+0x44/0x44 [ 2621.510245] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 2621.515550] watchdog+0x962/0xe40 [ 2621.519034] ? reset_hung_task_detector+0x30/0x30 [ 2621.523898] kthread+0x34a/0x420 [ 2621.527283] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2621.532931] ret_from_fork+0x24/0x30 [ 2621.536939] Sending NMI from CPU 0 to CPUs 1: [ 2621.541771] NMI backtrace for cpu 1 [ 2621.541776] CPU: 1 PID: 8321 Comm: kworker/u4:6 Not tainted 4.19.110-syzkaller #0 [ 2621.541782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2621.541785] Workqueue: bat_events batadv_nc_worker [ 2621.541791] RIP: 0010:lockdep_hardirqs_off+0xb9/0x2d0 [ 2621.541801] Code: 85 f6 0f 85 13 01 00 00 48 c7 c0 a0 19 6d 8b 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 <38> d0 7c 08 84 d2 0f 85 ab 01 00 00 8b 0d a5 60 1d 0a 85 c9 0f 84 [ 2621.541804] RSP: 0018:ffff8880516afc48 EFLAGS: 00000006 [ 2621.541810] RAX: 0000000000000003 RBX: ffff88809f4cc180 RCX: 1ffffffff16da334 [ 2621.541815] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff88809f4cc9fc [ 2621.541819] RBP: ffffffff813e3a39 R08: ffff88809f4cc180 R09: ffffed1009874bf3 [ 2621.541824] R10: ffffed1009874bf2 R11: ffff88804c3a5f93 R12: ffff88809f4cc180 [ 2621.541828] R13: ffffffff8702e650 R14: ffff88805269d980 R15: 000000000000000e [ 2621.541833] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2621.541837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2621.541841] CR2: ffffffffff600400 CR3: 0000000095fc9000 CR4: 00000000001406e0 [ 2621.541846] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2621.541850] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2621.541852] Call Trace: [ 2621.541856] ? batadv_nc_purge_paths+0x28e/0x3b0 [ 2621.541859] __local_bh_enable_ip+0x119/0x270 [ 2621.541862] batadv_nc_purge_paths+0x28e/0x3b0 [ 2621.541865] batadv_nc_worker+0x299/0x760 [ 2621.541868] process_one_work+0x91f/0x1640 [ 2621.541871] ? pwq_dec_nr_in_flight+0x310/0x310 [ 2621.541879] worker_thread+0x96/0xe20 [ 2621.541882] ? process_one_work+0x1640/0x1640 [ 2621.541885] kthread+0x34a/0x420 [ 2621.541888] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2621.541891] ret_from_fork+0x24/0x30 [ 2621.549224] Kernel panic - not syncing: hung_task: blocked tasks [ 2621.725487] CPU: 0 PID: 1078 Comm: khungtaskd Not tainted 4.19.110-syzkaller #0 [ 2621.732935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2621.742289] Call Trace: [ 2621.744891] dump_stack+0x188/0x20d [ 2621.748542] panic+0x26a/0x50e [ 2621.751874] ? __warn_printk+0xf3/0xf3 [ 2621.755777] ? lapic_can_unplug_cpu.cold+0x44/0x44 [ 2621.760868] ? ___preempt_schedule+0x16/0x18 [ 2621.765288] ? watchdog+0x962/0xe40 [ 2621.768931] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 2621.774393] watchdog+0x973/0xe40 [ 2621.777857] ? reset_hung_task_detector+0x30/0x30 [ 2621.782706] kthread+0x34a/0x420 [ 2621.786079] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2621.791621] ret_from_fork+0x24/0x30 [ 2621.797070] Kernel Offset: disabled [ 2621.800714] Rebooting in 86400 seconds..